The platform powering modern sports leagues

Last updated: [DATE]

This policy explains how [COMPANY LEGAL NAME] (“RecHero”, “we”, “us”) collects, uses, and shares personal information when you use our websites (rechero.app and its subdomains), applications, and services (the “Service”).

1. Two roles: our data vs. your league’s data

RecHero handles personal information in two distinct capacities:

1. RecHero as the responsible organization (“controller”). For our marketing website, account registration, demo requests, league referrals, support, and the operation of the platform itself, we decide how and why personal information is used, and this policy applies fully.
2. RecHero as a service provider (“processor”) for organizations. League data — rosters, player names and contact details, scores, photos, posts — is entered and controlled by the organization that runs your league. We process it on the organization’s behalf to provide the Service and per our contract with them. If you are a player with questions about how your league uses your information, or you want your information corrected or removed from a league, contact your league organizer first — we support them in honoring those requests, and you can always reach us too (Section 12).

2. Information we collect

You provide it:

• Account information — name, email address, password (stored hashed), optional phone and profile details.
• League participation data — teams, rosters, schedules, scores, standings, ratings; community posts and comments; photos, documents, and team icons you or your organizer upload.
• Demo requests — name, email, organization/league name, sport, team count, current tooling, and anything you include in your message.
• League referrals — your name (and optional email), the league’s name, and the organizer’s name and contact details that you provide about them (see Section 5).
• Support and correspondence — whatever you send us.

Collected automatically:

• Log and device data — IP address, browser type, pages requested, timestamps; used for security, debugging, and abuse prevention.
• Marketing-site analytics — when you visit our marketing site we record the page you viewed, the site that referred you, any campaign parameters in the link you followed, and your IP address and browser user-agent. See Section 6 for what we do with these, how long we keep them, and what we don’t do. We set no cookies on the marketing site and use no third-party analytics, advertising trackers, or session replay.
• Product usage events — actions within the app (e.g., a schedule generated, a score finalized) tied to your account, used to operate, secure, and improve the Service.

From others: organizers may enter your information to add you to a roster or invite you; teammates may add you to a team; a player may refer their league organizer (Section 5).

3. How we use personal information

• Provide, operate, and secure the Service (including authentication, scheduling, standings, ratings, league websites, and community features).
• Respond to demo requests and referrals, and communicate about the Service (see Section 7 for marketing-email rules).
• Understand how our marketing site is found and used — which pages and campaigns bring people to RecHero, roughly where visitors are located, whether a visit is a repeat, and which traffic is automated. This is the purpose for which we process the IP address and user-agent described in Sections 2 and 6.
• Improve the Service — debugging, aggregate analytics, feature usage. Where feasible we use de-identified or aggregated data for this.
• Enforce our Terms, prevent abuse and fraud, and comply with law.

We do not sell personal information, and we do not “share” it for cross-context behavioral advertising (as those terms are defined under the CPRA). We do not use personal information for automated decisions with legal or similarly significant effects. (Elo judges your team’s skill, not your creditworthiness.)

4. Public content

League websites and community pages that an organizer publishes are public: standings, schedules, team names, rosters as configured by the organizer, posts, and photos on those pages can be viewed by anyone and indexed by search engines. Ask your organizer about your league’s visibility settings.

5. League referrals (information about someone else)

If you refer your league, you give us your organizer’s name and contact details. We use that information only to contact them about RecHero on your behalf — a single introduction that identifies you as the referrer — and to keep a record of the referral. We do not add referred organizers to marketing lists without their consent, and they can ask us to delete their details at any time. Only refer someone you know in the context of the league — that’s also what Canada’s anti-spam law (CASL) requires of referral messages.

6. Cookies and analytics

• Essential cookies only. The app uses signed session cookies to keep you logged in and protect against request forgery. No advertising or third-party analytics cookies. Our marketing site sets no cookies at all and stores nothing on your device.

• First-party marketing analytics. Our marketing site uses a measurement system we built and run on our own servers — there is no third-party analytics provider, no advertising pixel, and no session replay or heatmap tool. When you view a page, your browser sends us the page path, the site that referred you, and any campaign parameters in the link you followed. Our servers also record your IP address and browser user-agent string, which every web server receives with every request.

  What we use them for. To see which pages and campaigns bring people to RecHero, to approximate a visitor’s general location (country/region), to tell repeat visits from new ones, and to filter out bots and automated traffic.

  How long we keep them. Records containing your IP address and user-agent are deleted after 90 days. After that we keep only aggregate statistics — counts by page, referrer, campaign, and device type — that do not identify you.

  What we don’t do with them. We do not track you across other websites, build advertising or behavioural profiles, sell or share this information, or attempt to identify you personally from it. If you fill in a form, we know who you are — but only because you chose to tell us.

No cookie banner. Because our marketing site stores nothing on your device and sets no cookies, there is nothing to consent to beyond what this policy describes.

Your control (opt out of analytics). If your browser or a browser extension sends a Global Privacy Control (GPC) signal, or a Do Not Track (DNT: 1) header, our analytics endpoint detects it and records nothing for that visit — no IP address, no user-agent, no page event. This works at our server on every request, with no account and nothing stored on your device. It is both the “means to deactivate” contemplated by Quebec’s Law 25 and the opt-out signal recognized under applicable US state privacy laws.

7. Email

• Transactional email (invites, password resets, score notifications, responses to your requests) is part of the Service.
• Marketing email is sent only with consent required by law (express or implied under CASL in Canada; opt-out honored under CAN-SPAM in the US). Every marketing email identifies us and includes a working unsubscribe that we honor promptly (within 10 business days at most, per CASL).
• We keep records of consent (what, when, how) as CASL requires.

8. How we share personal information

• Your league. Organizers and (as configured) league members see league data — that’s the product.
• Service providers working for us under contract, only as needed: application hosting (Render, United States), content delivery, DNS, and edge security (Cloudflare), transactional email delivery (Resend), and payment processing when applicable ([PROCESSOR] — they receive payment details directly; we don’t store card numbers). A current subprocessor list is available on request.
• Legal and safety — when required by law or to protect users, the public, or RecHero (we narrow requests where we can and notify affected users where permitted).
• Business transfers — if RecHero is involved in a merger, acquisition, or asset sale, personal information may transfer as part of it, subject to this policy.

9. Where data is stored; cross-border transfers

Our infrastructure is hosted in the United States. If you are in Canada, your personal information is transferred to and processed in that region, where it is subject to local law and lawful access by local authorities. For Quebec residents (Law 25): personal information is communicated outside Quebec for hosting and the service providers above; we assess these transfers to ensure adequate protection, and contractually require it.

10. Retention

• Account and league data: kept while the account/organization is active. After deletion or closure, personal information is deleted or de-identified within 90 days, except backup copies (rotated out within 35 days) and records we must keep by law (e.g., tax, consent records).
• Demo requests and referrals: kept up to 24 months after last contact, then deleted.
• Marketing analytics records containing IP address and user-agent: 90 days (Section 6), then deleted; aggregate statistics that do not identify you are kept indefinitely. Security logs: 12 months.

11. Security

We use industry-standard measures: encryption in transit (TLS), hashed passwords, tenant scoping in the application (each organization’s data is isolated by design), least-privilege access, and audit logging. No system is perfectly secure; we maintain an incident-response process and a privacy-incident register (as Law 25 requires), and we will notify you and regulators of breaches as applicable law requires (PIPEDA’s “real risk of significant harm” standard, Law 25, and US state breach-notification laws).

12. Your rights and choices

Everyone: access, correct, or delete your information; withdraw consent; close your account; unsubscribe from marketing. Contact us (Section 14) — we verify requests and respond within the time required by applicable law (30 days under PIPEDA/Law 25; 45 days under CPRA, extendable once).

Marketing-site analytics. These records are keyed to an IP address, not to an account. To avoid collection entirely, send a Global Privacy Control or Do Not Track signal (Section 6) and we record nothing. To remove records already collected, tell us the approximate date and IP address and we will locate and delete them; in practice they age out on their own within 90 days (Section 6).

Canada (PIPEDA / provincial laws): you may request access to and correction of your personal information and information about how it has been used and disclosed, and you may withdraw consent subject to legal or contractual restrictions. You may complain to the Office of the Privacy Commissioner of Canada or your provincial regulator (in Quebec, the CAI).

Quebec (Law 25) additionally: the right to data portability in a structured, commonly used technological format; the right to be informed of and object to fully automated decisions (we don’t make them — Section 3); our designated Privacy Officer is [NAME, TITLE — EMAIL].

US state privacy laws (California CPRA and similar): the rights to know/access, correct, delete, and to portability; the right to opt out of sale/sharing and targeted advertising (we do not sell or share personal information, and we do not serve targeted ads); the right to limit use of sensitive personal information (we don’t use it beyond providing the Service); and the right not to be discriminated against for exercising rights. You may use an authorized agent; we verify agent requests. California residents: no “Notice of Financial Incentive” applies because we offer none. [IF REFERRAL INCENTIVES ARE ADDED, REVISIT.]

League data: where your request concerns data controlled by your league’s organization (Section 1), we will refer the request to them and assist — this is the PIPEDA accountability and CPRA service-provider model working as intended.

13. Children

The Service is not directed to children under 13, and we do not knowingly collect their personal information directly. Accounts require users to be 16 or older. Organizers who run youth leagues are responsible for parental consent before entering minors’ information (see Terms of Service, Section 3). If you believe a child’s information was provided to us improperly, contact us and we will delete it.

14. Contact us

Privacy questions, requests, and complaints:

[PRIVACY OFFICER NAME/TITLE] [COMPANY LEGAL NAME] [MAILING ADDRESS] [PRIVACY EMAIL]

15. Changes to this policy

We’ll post updates here and change the “last updated” date; for material changes we’ll notify you (email or in-product) before they take effect. Prior versions are available on request.

Last updated: [DATE]

These Terms of Service (the “Terms”) are an agreement between [COMPANY LEGAL NAME] (“RecHero”, “we”, “us”) and you. They govern your use of the RecHero websites (including rechero.app and its subdomains), applications, and services (together, the “Service”).

By creating an account, submitting a form on our website, or using the Service, you agree to these Terms. If you are using the Service on behalf of an organization (for example, as a league organizer), you agree to these Terms on that organization’s behalf and represent that you have authority to do so.

1. What RecHero is

RecHero is a platform for recreational sports organizations to run leagues: scheduling, score capture, standings and ratings, league websites and community pages, player rosters and portals, and related tools.

Different people use RecHero in different roles:

• Organizations / Organizers — create and administer leagues, seasons, teams, schedules, and league websites, and enter or invite the people in their leagues.
• Players / Captains — join teams, view schedules and standings, submit and score games, and participate in league community pages.
• Visitors — browse public league websites and our marketing site without an account.

2. Eligibility and accounts

1. You must be at least 16 years old to create a RecHero account. The Service is not directed to children under 13, and we do not knowingly collect personal information directly from children under 13.
2. Keep your account credentials confidential. You are responsible for activity under your account. Tell us promptly at security@rechero.app if you suspect unauthorized access.
3. Provide accurate account information and keep it current.
4. We may suspend or terminate accounts that violate these Terms (see Section 12).

3. Organizer responsibilities

If you administer an organization or league on RecHero, you additionally agree that:

1. You have the right to enter other people’s information. Organizers routinely enter or upload player names, contact details, and roster information. You represent that you have the consent or another lawful basis to share that information with us so we can provide the Service, and that you will honor players’ requests to correct or remove their information.
2. Youth participants. If your league includes minors, you are responsible for obtaining any parental or guardian consent required by applicable law before entering their information or inviting them to the Service.
3. Your league’s rules and safety are yours. RecHero provides software. You are responsible for the conduct and safety of your league’s activities, venues, eligibility rules, and compliance with local requirements (insurance, waivers, facility agreements, and similar).
4. League websites and community pages you publish are your content. You are the administrator of what appears on your league’s public pages and community spaces, including moderating member posts within your league.

4. Your content

1. Ownership. You (or your organization or its members) retain ownership of the content you submit to the Service — league information, posts, comments, photos, documents, team names and icons, scores and stats (“User Content”).
2. License to us. You grant RecHero a worldwide, non-exclusive, royalty-free license to host, store, reproduce, adapt (for example, resizing images), publish, and display User Content as needed to operate and provide the Service — including displaying it on the public league pages the organizer chooses to publish. This license ends when the content is deleted from the Service, except for backup copies retained for a limited period and content already shared publicly by others.
3. Public pages are public. Content published to a league website or community page is visible to anyone with the link and may be indexed by search engines. Organizers control what is published.
4. Your responsibilities. You represent that your User Content does not violate anyone’s rights (including privacy, publicity, and intellectual property rights) or any law, and that you have permission from identifiable people appearing in photos you upload.

5. Acceptable use

You agree not to:

• break the law or infringe others’ rights using the Service;
• upload content that is hateful, harassing, threatening, defamatory, obscene, or exploits minors;
• impersonate others or misrepresent your affiliation;
• submit false scores or manipulate ratings and standings in bad faith (leave the sandbagging on the court);
• probe, scan, or test the vulnerability of the Service, bypass authentication, or access data that isn’t yours;
• scrape the Service at scale, resell it, or use it to build a competing dataset;
• send spam or unsolicited commercial messages through the Service (including via community pages or referral features); or
• interfere with the operation of the Service (including overloading, malware, or disrupting other leagues).

We may remove content or restrict accounts that violate this section.

6. Community features

League community pages are for league members. Be a good teammate: no harassment, hate speech, doxxing, or NSFW content. Organizers moderate their leagues; RecHero may also remove content or restrict users at our discretion where these Terms are violated. Report abusive content to abuse@rechero.app.

7. Copyright complaints

If you believe content on the Service infringes your copyright, send a notice to legal@rechero.app including: identification of the work, the URL of the allegedly infringing material, your contact information, a statement of good-faith belief, and a statement, under penalty of perjury, that you are authorized to act. We will process notices in accordance with applicable law (including the DMCA in the US and the notice-and-notice regime in Canada) and may remove content and terminate repeat infringers. Before we promote user-generated-content features (community pages, photo uploads) to US users, we will register a DMCA designated agent with the US Copyright Office and list the agent’s contact details here.

8. Fees and payments

1. Fees for the Service, if any, are as agreed with your organization. Where no fee schedule has been agreed, the features made available to you are provided free of charge for now; we will give organizations reasonable advance notice before any feature they use becomes paid.
2. Where the Service is used to collect payments (for example, registration dues or merch orders), payment processing is provided by third-party processors subject to their own terms. Organizers are responsible for the accuracy of amounts they charge and for their own refund policies toward their members, and must use collected funds lawfully.
3. Taxes are the responsibility of the party required to pay them by law.

9. Intellectual property; feedback

The Service — including software, design, and branding — is owned by RecHero or its licensors and is protected by intellectual-property laws. We grant you a limited, non-exclusive, non-transferable right to use the Service in accordance with these Terms. If you send us feedback or suggestions, we may use them without obligation to you.

10. Third-party services

The Service may link to or interoperate with third-party services (for example, maps, payment processors, or video embeds). Those services have their own terms and privacy policies; RecHero is not responsible for them.

11. Privacy

Our Privacy Policy explains what personal information we collect and how we use it, including our roles with respect to league data entered by organizers. It forms part of these Terms.

12. Suspension and termination

1. By you. You may stop using the Service and delete your account at any time. Organizations may export their data (see Section 13) before closing an account.
2. By us. We may suspend or terminate access (with notice where practicable) if you materially violate these Terms, create risk or legal exposure for us or other users, or if we discontinue the Service.
3. Sections that by their nature should survive termination (including Sections 4.2 in respect of prior public sharing, 9, 14, 15, and 16) survive.

13. Your data; portability

Organizations can export their league data (teams, schedules, results, standings) in a portable format. After account closure we delete or de-identify personal information in accordance with the Privacy Policy’s retention terms, except where retention is required by law.

14. Disclaimers

THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE”. TO THE MAXIMUM EXTENT PERMITTED BY LAW, RECHERO DISCLAIMS ALL WARRANTIES AND CONDITIONS, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR THAT RATINGS, STANDINGS, OR SCHEDULES WILL BE ACCURATE OR SUITABLE FOR ANY PARTICULAR COMPETITIVE PURPOSE.

RECHERO DOES NOT ORGANIZE, SUPERVISE, OR OPERATE SPORTS ACTIVITIES. PARTICIPATION IN RECREATIONAL SPORTS CARRIES INHERENT RISKS; RECHERO HAS NO RESPONSIBILITY FOR INJURIES, PROPERTY DAMAGE, OR DISPUTES ARISING FROM LEAGUE ACTIVITIES.

Some jurisdictions do not allow certain disclaimers; where that is the case, they apply to the maximum extent permitted. Nothing in these Terms limits non-waivable consumer rights, including under Canadian provincial consumer-protection legislation.

15. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW: (a) RECHERO WILL NOT BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, REVENUES, DATA, OR GOODWILL; AND (b) RECHERO’S AGGREGATE LIABILITY FOR ALL CLAIMS RELATING TO THE SERVICE IN ANY 12-MONTH PERIOD IS LIMITED TO THE GREATER OF (i) THE AMOUNTS YOU PAID US FOR THE SERVICE IN THAT PERIOD AND (ii) CAD $100. THESE LIMITS DO NOT APPLY TO LIABILITY THAT CANNOT BE LIMITED BY LAW (INCLUDING FOR FRAUD, GROSS NEGLIGENCE, OR WILFUL MISCONDUCT).

16. Indemnity (organizations)

If you use the Service on behalf of an organization, the organization will defend and indemnify RecHero against third-party claims arising from (a) the organization’s User Content, (b) its violation of Section 3 (including entering participants’ information without a lawful basis), or (c) its leagues’ activities — except to the extent caused by RecHero’s own breach of these Terms.

17. Changes to the Service or Terms

We may modify the Service, and we may update these Terms. For material changes we will give reasonable advance notice (email or in-product). The “last updated” date shows the current version; continued use after the effective date constitutes acceptance. If you don’t agree to a change, stop using the Service before it takes effect.

18. Governing law and disputes

These Terms are governed by the laws of the Province of Ontario and the federal laws of Canada applicable there, without regard to conflict-of-law rules. Courts located in Toronto, Ontario have exclusive jurisdiction, and the parties attorn to them — except that either party may seek injunctive relief in any competent court, and consumers retain any right to bring claims in their local courts where the law provides it.

19. General

Entire agreement (together with the Privacy Policy and any order form); severability (invalid provisions are narrowed, remainder stands); no waiver by inaction; you may not assign these Terms without our consent, we may assign to an affiliate or in connection with a merger or asset sale; no agency or partnership is created; notices to us go to legal@rechero.app, notices to you go to your account email.

20. Contact

[COMPANY LEGAL NAME] [MAILING ADDRESS] legal@rechero.app