Privacy Policy

1. Information We Collect

Personal Information

• Account Information: Name, email address, password (encrypted)
• Profile Information: Player position, skill level, availability preferences, profile photo
• Organization Information: Organization name, league details

Technical Information

• Session Data: IP address, browser type, device information (retained for 14 days)
• Security Logs: Login attempts, account changes (retained for 1 year)

2. How We Use Your Information

• Provide, maintain, and improve our services
• Create and manage your account
• Facilitate league and team management
• Send you important service notifications
• Detect and prevent fraud and abuse
• Comply with legal obligations

3. Data Sharing and Third Parties

• Supabase: Database and authentication (GDPR-compliant, SOC 2 certified)
• Stripe: Payment processing (PCI-DSS Level 1 certified)
• Resend: Transactional email delivery

We do NOT sell your personal information to anyone.

4. Your Rights

• Right to Access: Request a copy of your data
• Right to Rectification: Update incorrect information
• Right to Erasure: Delete your account and data
• Right to Data Portability: Download your data in JSON format

To exercise these rights, visit your account settings or contact us at privacy@beerleaguehockey.ca

5. Security

• Encryption in transit (HTTPS/TLS)
• Encryption at rest for database storage
• Row-level security policies to prevent unauthorized access
• Regular security audits and monitoring

6. Contact Us

For questions, contact us at privacy@beerleaguehockey.ca

• Email: privacy@beerleaguehockey.ca
• Data Protection Officer: dpo@beerleaguehockey.ca
• Security Concerns: security@beerleaguehockey.ca