Privacy Policy

1. Scope

This Privacy Policy explains how OptiRoster handles information when agencies, agents, and invited users access our soccer-agency operations platform. OptiRoster is not an anonymous service: the platform stores information that customers choose to enter so the service can manage players, contacts, clubs, contracts, documents, requests, communications, and invoices.

2. Information we collect

• Account and agency information: names, business email addresses, agency names, authentication records, membership roles, and account preferences.
• Agency-managed records: player and contact details, club relationships, requests, notes, activity history, contracts, financial terms, invoices, links, and documents uploaded by an authorized agency user.
• Billing information: subscription status, Stripe customer and subscription identifiers, plan, seat count, and billing events. Stripe processes card and payment details; OptiRoster does not store full card numbers.
• Technical information: essential cookies, IP-derived region, browser language, device and request information, and security logs needed to operate and protect the service.

3. How we use information

We use information to provide and secure agency workspaces, authenticate users, process subscriptions, support customer requests, maintain records selected by the agency, prevent abuse, troubleshoot errors, comply with law, and improve service reliability. We do not sell personal information or use private agency records for third-party advertising.

4. Agency responsibility

Each customer agency controls the records it enters and is responsible for having a lawful basis and any required authorization to collect, upload, use, or share information about players, contacts, and other people. This responsibility is especially important for information about minors. Agencies must avoid uploading information they do not need.

5. Service providers and disclosures

We disclose information only as needed to operate the service, comply with law, protect rights and security, or complete a business transaction. Current infrastructure providers include Supabase for authentication, database, and private file storage; Vercel for hosting and delivery; and Stripe for subscription billing. These providers process information under their own terms and security programs. We do not share private agency records with unrelated agencies.

6. Security and tenant isolation

OptiRoster uses authenticated access, agency-scoped records, database row-level security, private storage, signed file access, and encrypted network transport. No online system is perfectly secure, and we cannot guarantee absolute security. Customers must protect their credentials and promptly report suspected unauthorized access.

7. Retention and deletion

We retain account, agency, and billing information while an account is active and as reasonably necessary for the purposes described above, including legal, accounting, fraud-prevention, and dispute-resolution obligations. Authorized customers may request account or data deletion. Some records may remain temporarily in secure backups or be retained when legally required.

8. Cookies and regional language

We use essential cookies for authentication, beta access, security, and saved language preference. Browser language and an approximate request region may be used to select an interface language. We do not claim that essential operational cookies can be disabled while the service remains functional.

9. International use

OptiRoster may be accessed internationally, and information may be processed in countries other than the user’s location. Customer agencies are responsible for any notices, permissions, or transfer safeguards required for the personal information they control.

10. Choices and rights

Depending on location, individuals may have rights to access, correct, delete, restrict, or object to certain processing. Requests should identify the relevant agency because that agency may be the primary controller of player or contact information. We may verify identity and authority before acting.

11. Contact

Privacy questions and requests may be sent to shea@optiroster.com.