Privacy Policy

1. Who we are

BenchIQ is a hockey team scoring and analytics service operated by Sadow LLC ("we," "us"). Questions about this policy or your data: privacy@benchiq.app.

2. What we collect

From account holders (adults only):

• Name, email address, and an optional phone number, provided at signup
• Your password, stored only as a secure hash by our authentication provider. We never see it.
• Billing details when you purchase a subscription, handled by Stripe. Your card number never touches our servers.

About players (entered by adults, never by players):

• Player first and last name, jersey number, and position, entered by team staff
• Game events and statistics (shots, goals, assists, penalties, and similar)
• Optionally, a player's date of birth and a photo. Only that player's own parent or guardian, through an account linked to the player, can add these. Both are optional, are visible only within the player's team, and can be changed or removed by the parent at any time.
• We do not collect player contact information, addresses, or schools.

About people your team invites:

• A name and email address, entered by team staff, used only to send and manage the invitation

Automatically:

• Authentication cookies that keep you signed in (see section 8)
• Server logs (IP address, browser type, pages requested) kept for security and debugging
• Anonymous, cookieless performance and usage telemetry via Vercel Speed Insights and Vercel Web Analytics, which helps us keep the app fast and see which pages get used

3. Children's privacy

This section matters most, so here it is plainly:

• BenchIQ accounts are for adults (18+) only. Players do not have logins. We do not knowingly create accounts for, or collect personal information directly from, anyone under 18, and nothing in the product asks a child for information.
• Player information is entered by adult team staff, who confirm they have permission, including from parents or guardians, to enter it (see the Terms of Service, "Team data responsibility").
• A player's date of birth and photo can only be added by that player's own parent or guardian, from their own account. Team staff cannot enter these for a player, and the product never asks the child for anything.
• Parents: you may review your child's information or ask us to delete it at any time by emailing privacy@benchiq.app. We will remove it from our live systems within 30 days (backup copies expire on the cycle described in section 6).
• If we learn that someone under 18 has created an account, or that we have collected personal information directly from a child, we will delete the account and the information promptly.

4. How we use information

We use the information above to run the service: showing games, stats, and analytics to your team, providing support, and keeping the service secure.

We do not sell personal information. We do not show ads. We do not use player data for advertising or marketing.

We may use de-identified, aggregated statistics (data that cannot be tied to a person) to improve the product and build new features.

5. Who we share information with

We share data only with the service providers that run BenchIQ:

• Supabase: database, authentication, file storage (player photos), and email delivery for account messages
• Vercel: application hosting, performance telemetry, and cookieless site analytics
• Stripe: payment processing

Nobody else, with three exceptions: we will disclose information if legally required to (for example, a valid court order), and we will tell you when the law allows us to; we may disclose information as needed to prevent fraud, abuse, or harm to someone's safety; and if Sadow LLC is acquired or its assets are sold, your data may transfer to the successor, who must honor this policy. We will notify you if that happens.

6. Data retention and deletion

We keep your team's data while your account is active so your season history stays intact. If you close your account, or a parent or team requests deletion of a player's data, we delete it, including any photos, within 30 days. Copies in our encrypted backups expire on a rolling cycle within 7 days after that.

7. Cookies

BenchIQ uses cookies only to keep you signed in (authentication tokens set by our auth provider). We do not use advertising or cross-site tracking cookies. Your display preferences (like dark mode) are stored on your device, not on our servers.

8. Security

Data moves between your device and BenchIQ over encrypted connections (HTTPS), and access to team data is restricted by role-based permissions enforced in our database. No online service can guarantee perfect security, but we commit to notifying affected users promptly if a breach affects personal information.

9. Your choices and rights

Email privacy@benchiq.app to access, correct, or delete your information. Depending on where you live, you may have additional rights (such as access and deletion rights under the California Consumer Privacy Act and similar state laws, or under Canada's federal privacy law, PIPEDA); we honor these requests for everyone regardless of location.

10. Where BenchIQ operates

BenchIQ is offered in the United States and Canada (excluding Quebec). Wherever you use it from, your data is stored and processed on servers in the United States, and may be subject to access by US authorities under US law. By using BenchIQ from Canada, you consent to your information being transferred to and processed in the US. If you use the service from anywhere else, you are responsible for local-law compliance.

11. Changes to this policy

If we make material changes, we will email account holders and update the effective date at the top. The current version is always at benchiq.app/legal/privacy.