Privacy Policy
Introduction
Higharc Athletics ("leaguearc," "we," "us," or "our") operates the leaguearc platform — a sports league management service for basketball, soccer, hockey, volleyball, and other sports. This Privacy Policy explains how we collect, use, share, and protect your information when you use our website, applications, and services (collectively, the "Platform").
By creating an account or using the Platform, you agree to the collection and use of your information as described in this policy. If you do not agree, please do not use the Platform. This policy should be read alongside our Terms of Service.
Information We Collect
Account Information
When you create an account, we collect:
- Your name, email address, and password
- Organization name and details (league name, sport type, location)
- Your role within the organization (owner, admin, scorekeeper, etc.)
League & Team Data
As you use the Platform to manage leagues, you and other authorized users in your organization may enter:
- Player names, jersey numbers, and positions
- Team rosters and coaching staff
- Game schedules, scores, and statistics
- Standings, playoff brackets, and season records
- Registration form responses and participant details
Payment Information
Payment processing is handled entirely by Stripe. When you subscribe to a paid plan or collect registration fees through the Platform, your payment details (credit card numbers, bank account information) are collected and processed directly by Stripe. We do not store your full card number or bank details on our servers. We receive only limited transaction information (such as the last four digits, transaction amount, and status) to maintain your billing history.
AI Scanner Data
If you use our AI scoresheet scanner, you upload images of paper scoresheets. These images are processed by our AI system to extract game statistics. Uploaded images are temporarily stored during processing and are automatically deleted afterward. We do not use your scoresheet images to train AI models.
Automatically Collected Information
When you access the Platform, we automatically collect:
- Device information (browser type, operating system, screen resolution)
- IP address and approximate geographic location
- Usage data (pages visited, features used, actions taken)
- Cookies and similar identifiers (see Cookies & Tracking below)
How We Use Your Information
We use the information we collect to:
- Provide and operate the Platform — manage leagues, generate schedules, calculate standings, power live scoring, and display public league hubs
- Process payments — handle subscriptions and facilitate registration fee collection through Stripe
- Improve the Platform — analyze usage patterns to fix bugs, develop new features, and optimize performance
- Communicate with you — send account notifications, service updates, security alerts, and respond to support requests
- Ensure security — detect, prevent, and respond to fraud, abuse, and unauthorized access
Multi-Tenant Data Isolation
leaguearc is a multi-tenant platform, meaning multiple organizations share the same infrastructure. Each organization's data is logically separated at the database level. Organization administrators can only view, edit, and manage data belonging to their own organization. One organization cannot access another organization's players, teams, schedules, or statistics.
Certain information — such as league schedules, scores, and standings — may be published on public league hub pages, as configured by the organization's administrators.
AI & Automated Processing
Our AI scoresheet scanner uses automated image recognition to extract game statistics from uploaded scoresheet photos. This processing happens on our servers and with third-party AI services.
- Uploaded images are stored temporarily for the duration of processing and then deleted
- Extracted statistics are saved to your league's data and can be reviewed and edited by authorized users
- We do not use your uploaded images or extracted data to train AI or machine-learning models
- AI-extracted results should always be reviewed by a human for accuracy
Information Sharing
We share your information only in the following limited circumstances:
- Service providers: We work with trusted third parties who help us operate the Platform — including Stripe (payments), email delivery providers, and cloud hosting infrastructure. These providers only access your data as needed to perform their services and are bound by confidentiality obligations.
- Within your organization: Your information is visible to administrators and other authorized users within your organization as part of normal Platform operations.
- Public league data: If an organization's administrator enables public league hubs, certain league information (schedules, scores, standings, team names) is viewable by the public.
- Legal requirements: We may disclose information if required to do so by law, regulation, or valid legal process (such as a court order or subpoena).
- Business transfers: If Higharc Athletics is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.
We do not sell, rent, or trade your personal information to third parties for advertising or marketing purposes.
Data Storage & Security
We take the security of your data seriously and implement industry-standard measures to protect it:
- All data is encrypted in transit using TLS (Transport Layer Security)
- Data at rest is encrypted on our servers
- The Platform is hosted on SOC 2 compliant cloud infrastructure
- Data is stored in Canada
- We conduct regular security reviews and maintain access controls to limit who can access your data internally
While we work hard to protect your information, no system is perfectly secure. We cannot guarantee absolute security, but we commit to notifying affected users promptly in the event of a data breach.
Data Retention
We retain your data for as long as your account is active and as needed to provide the Platform's services. Specifically:
- Account and league data is retained while your account or organization remains active
- You can export your data at any time using the Platform's built-in export features
- If you request account deletion, we will delete your personal data within 30 days, except where we are required by law to retain certain records
- After an organization's account is terminated, data remains available for export for 30 days before being permanently deleted
Your Rights
You have the following rights regarding your personal information:
- Access: Request a copy of the personal data we hold about you
- Correction: Request that we correct any inaccurate or incomplete data
- Deletion: Request that we delete your personal data
- Data portability: Request your data in a structured, commonly used format
- Export: Use the Platform's built-in export tools to download your league data at any time
- Withdraw consent: Where processing is based on your consent, you may withdraw it at any time
To exercise any of these rights, contact us at [email protected] or through our contact form. We will respond to your request within 30 days.
Children's Privacy
leaguearc is used to manage youth sports leagues, and we take the privacy of young athletes seriously.
- You must be at least 16 years of age to create a personal leaguearc account
- Users under 16 may only use the Platform with the consent and supervision of a parent or legal guardian
- Youth player data (names, jersey numbers, statistics) is entered into the Platform by authorized league administrators — not by the minors themselves
- We do not knowingly collect personal information directly from children under 16 without parental consent
- Parents or guardians may contact us to review, correct, or delete their child's information
Cookies & Tracking
We use a limited set of cookies to operate the Platform:
- Essential cookies: Session management, authentication, and security cookies that are necessary for the Platform to function. These cannot be disabled.
- Analytics cookies: We use analytics tools to understand how the Platform is used so we can improve it. These cookies collect anonymized usage data.
We do not use third-party advertising cookies or tracking pixels. We do not serve ads on the Platform, and we do not allow third-party advertisers to track you through our service.
International Data
leaguearc is operated from Canada, and your data is stored on servers located in Canada. If you are accessing the Platform from outside Canada, please be aware that your information will be transferred to and processed in Canada. By using the Platform, you consent to this transfer. We ensure that any international data transfers comply with applicable data protection laws.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by:
- Sending an email to the address associated with your account
- Displaying a prominent notice within the Platform
- Updating the "Last updated" date at the top of this page
We encourage you to review this policy periodically. Your continued use of the Platform after changes take effect constitutes your acceptance of the updated policy.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:
- Email: [email protected]
- Contact form: leaguearc.com/contact