Privacy Policy

RosterPass ("the Service") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and authentication credentials. Club administrators may also provide phone numbers and other contact details.

Player Information

Club staff and parents provide player details including names, birth years, jersey numbers, positions, and health-related notes relevant to sports participation. This information is managed by your club administrator.

Payment Information

Payment processing is handled by Stripe. We do not store credit card numbers or bank account details on our servers. We retain transaction records (amounts, dates, and payment status) for club accounting purposes.

Usage Data

We automatically collect certain information when you use the Service, including IP addresses, browser type, pages visited, and timestamps. This data helps us improve the Service and diagnose issues.

2. How We Use Your Information

• To provide and maintain the Service
• To manage club memberships, rosters, and team assignments
• To process payments and track dues on behalf of clubs
• To send notifications about schedules, payments, and club activity
• To provide customer support
• To detect, prevent, and address technical issues and abuse

3. Information Sharing

We share your information only in the following circumstances:

• With your club: Club administrators and authorized staff can view member information relevant to club operations (rosters, contact details, payment status).
• Service providers: We use third-party services including Stripe (payments), Supabase (database hosting), Vercel (application hosting), Sentry (error monitoring), and Resend (email delivery).
• Legal requirements: We may disclose information when required by law, subpoena, or legal process.

We do not sell your personal information to third parties.

4. Children's Privacy

The Service handles information about minors (youth sports players). Player accounts for children under 13 are managed by their parents/guardians in compliance with the Children's Online Privacy Protection Act (COPPA). Children under 13 cannot self-register. Parental consent is required before any personal information about a child under 13 is collected through the registration process.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Club administrators can request deletion of player records. When you delete your account, we remove your personal information within 30 days, except where retention is required by law or for legitimate business purposes (such as payment records).

6. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Export your data in a portable format
• Opt out of non-essential communications

To exercise these rights, contact your club administrator or reach out to us at the contact information below.

7. Security

We implement industry-standard security measures including encryption in transit (TLS), encrypted data at rest, row-level security policies, and regular access audits. However, no method of electronic storage is 100% secure.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

9. Contact Us

If you have questions about this Privacy Policy, please contact us at privacy@rosterpass.com.