Privacy Policy

1. Information We Collect

We collect information you provide directly and information generated by your use of the service:

• Account information: Name, email address, and password when you create an account.
• Team data: Roster information, schedules, game scores, and payment requests you create as a coach or org admin.
• Player information: Player names, jersey numbers, positions, and guardian contact info entered by coaches.
• Payment information: Payment transactions are processed by Stripe. We receive confirmation of payment status but do not store card numbers or banking details.
• Usage data: Pages visited, features used, and actions taken within the app to help us improve the product.

2. How We Use It

• Provide and operate the Chalk platform
• Send transactional emails (payment confirmations, event reminders, invite links)
• Improve the product based on how it's used
• Respond to support requests

We never sell your data to third parties.

3. Data Sharing

We share data only with the vendors necessary to operate the service:

• Stripe — payment processing. Governed by Stripe's Privacy Policy.
• Supabase — database and authentication hosting.
• Resend — transactional email delivery.
• Vercel — application hosting and analytics (page view counts only, no personal data).

We share only what each vendor needs to perform their function and no more.

4. Your Rights

You have the right to:

• Access your data: Request a copy of the data we hold about you.
• Delete your account: Delete your account from Settings. Team data you created will be removed within 30 days.
• Export your data: Request a data export at any time.

To exercise these rights, email privacy@chalksports.com.

5. Cookies

Chalk uses minimal cookies:

• Session cookie: Keeps you signed in. Required for the app to function. Deleted when you sign out.
• Preference cookie: Remembers your last visited team. 30-day expiry.

We do not use advertising cookies, tracking pixels, or third-party analytics cookies. See our Cookie Policy for details.

6. Children's Privacy (COPPA)

Players must be 13 or older to create an account directly on Chalk. Our signup flow includes an age gate that blocks account creation for users who indicate they are under 13. No personal information is collected from that interaction.

Chalk is not directed to children under 13. We do not knowingly collect personal information directly from children under 13. If you are a parent or guardian and believe your child under 13 has provided us personal information, please contact us at privacy@chalksports.com and we will delete it promptly.

Coaches and parents may add players under 13 to a team roster (names, jersey numbers, positions). This data is entered by and under the control of the responsible adult (coach or parent). It is used solely to facilitate team management and is not used for marketing, advertising, or shared with third parties beyond those listed in Section 3.

Player stats and roster information are private by default. Coaches may opt individual players into public stat sharing. For players under 13, this decision rests with the coach and parent/guardian.

7. AI-Powered Features

Chalk includes AI-powered features including a Team Assistant chat, a walk-up song generator, and contextual suggestions. Here is how AI works in Chalk and how your data is handled:

• What AI features exist: The AI Team Assistant (available on team, organization, and dashboard pages), the AI walk-up song generator, and the AI support agent. These are opt-in — you initiate them by interacting with them.
• What data is sent to AI: When you use an AI feature, relevant context about your team is included in the request — for example, your first name, upcoming event names and dates, your role on the team, and payment summary totals. We do not send full roster data, individual player contact details, or financial account information to AI providers.
• AI provider: Chalk uses Anthropic's Claude API to power AI features. Your conversation messages and the team context described above are transmitted to Anthropic's API to generate responses. Anthropic's use of this data is governed by the Anthropic Privacy Policy.
• Not used for training: Chalk uses the Anthropic API under terms that do not permit Anthropic to use your data to train their models.
• Conversation storage: AI conversation messages are stored in our database associated with your user account so that your assistant history persists across sessions. You may request deletion of your AI conversation history at any time by contacting privacy@chalksports.com.
• AI is supplemental: AI responses are generated suggestions and may contain errors. Do not rely on AI-generated output for medical, legal, or financial decisions. Always verify important information independently.

8. Data Retention

We retain your data for as long as your account is active or as needed to provide the service. Specifically:

• Account data: Retained until account deletion. After deletion, personal data is removed within 30 days, subject to legal hold requirements.
• Payment records: Retained for 7 years to comply with financial regulations.
• Team roster data: Retained for the life of the team. Coaches can remove individual players at any time.
• AI conversation history: Retained until account deletion or earlier upon request.
• Audit logs: Retained for 3 years for compliance purposes.

9. Security & Breach Notification

We use industry-standard security practices including encryption in transit (TLS), encryption at rest, row-level security on all database tables, and regular security reviews.

In the event of a data breach that affects your personal information, we will notify affected users within 72 hours of becoming aware of the breach, as required by applicable law. Notifications will be sent to the email address associated with your account. For security-related disclosures, see our Security Policy.

10. Contact

Privacy questions or requests: privacy@chalksports.com