Privacy Policy

1.1 Information You Provide

• Account Information: Name, email address, password, and payment information when you register.
• Team Information: Team names, organization affiliations, age groups, and geographic location.
• Player Statistics: Batting averages, pitching stats, fielding percentages, and other performance metrics you input or import.
• Player Roster Data: Player names, jersey numbers, positions, and related team roster information.
• Imported Data: Statistics from GameChanger exports, screenshots, or third-party integrations.
• Communications: Messages, support requests, and feedback you send us.

1.2 Automatically Collected Information

• Device Information: IP address, browser type, operating system, and device identifiers.
• Usage Data: Pages visited, features used, time spent, and interaction patterns.
• Analytics Data: Aggregated statistics about service usage via Google Analytics.
• Log Data: Server logs including access times, errors, and referring URLs.

1.3 Third-Party Sources

• GameChanger: When you connect or import data from GameChanger.
• Payment Processors: Transaction information from Stripe.
• Public Baseball Data: Publicly available team rankings and statistics.

We use the information we collect to:

• Provide, maintain, and improve our Services
• Generate AI-powered lineup recommendations and matchup analyses
• Calculate team rankings and performance metrics
• Process payments and manage subscriptions
• Send service-related communications (account updates, security alerts)
• Respond to your inquiries and provide customer support
• Detect, prevent, and address technical issues and security threats
• Analyze usage patterns to improve user experience
• Comply with legal obligations

3.1 Account Requirements

• Only adults (18+) may create accounts on Baseball IQ.
• Children under 13 may NOT create accounts or directly use our services.
• Coaches and parents enter player statistics on behalf of their teams.

3.2 Youth Player Data

• We collect only performance statistics (batting averages, etc.) about youth players—not personal contact information.
• Player names are stored only for roster identification purposes within the coach's account.
• We do NOT collect birth dates, addresses, phone numbers, or photos of minors.
• Youth player data is visible only to the authorized coach/parent who entered it.
• We do NOT contact youth players directly.

3.3 Parental Rights

• Parents may request to review any data associated with their child.
• Parents may request deletion of their child's data at any time.
• To exercise these rights, contact us at privacy@baseballiq.win.

4. Data Sharing & Disclosure

4.1 We May Share Data With:

• Service Providers: Cloud hosting (Vercel), database services (Supabase), payment processing (Stripe), and analytics (Google).
• AI Services: OpenAI and Google for generating lineup and matchup analyses (data is processed but not stored by these providers).
• Legal Requirements: When required by law, court order, or government request.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.

4.2 Public Rankings

Team names and aggregate rankings may be displayed publicly on our leaderboards. Individual player names and personal statistics are NEVER displayed publicly.

4.3 We Do NOT:

• Sell personal information to third parties
• Share player data with advertisers
• Use player data for targeted advertising
• Share data with other teams or coaches without consent

We implement industry-standard security measures including:

• Encryption: All data transmitted via TLS/SSL encryption (HTTPS).
• Access Controls: Row-level security (RLS) ensuring users only access their own data.
• Authentication: Secure password hashing and session management.
• Infrastructure: Hosted on enterprise-grade cloud infrastructure with SOC 2 compliance.
• Payment Security: PCI-DSS compliant payment processing via Stripe.

While we strive to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

6. Your Rights & Choices

You have the right to:

• Access: Request a copy of your personal data.
• Correction: Update or correct inaccurate information.
• Deletion: Request deletion of your account and associated data.
• Export: Download your data in a portable format.
• Opt-Out: Unsubscribe from marketing communications.
• Restrict Processing: Limit how we use your data in certain circumstances.

To exercise these rights, contact us at privacy@baseballiq.win. We will respond within 30 days.

7. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA:

• Right to Know: Request disclosure of personal information collected, used, and shared.
• Right to Delete: Request deletion of personal information.
• Right to Opt-Out: Opt out of the "sale" of personal information (note: we do not sell personal information).
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights.

To submit a CCPA request, email privacy@baseballiq.win with subject line "CCPA Request."

If you are located in the European Economic Area (EEA), UK, or Switzerland, you have additional rights under GDPR:

• Legal Basis: We process data based on contract performance, legitimate interests, and consent.
• Data Transfers: Data may be transferred to the United States under Standard Contractual Clauses.
• DPO: For GDPR inquiries, contact privacy@baseballiq.win.
• Supervisory Authority: You have the right to lodge a complaint with your local data protection authority.

9. Cookies & Tracking Technologies

We use cookies and similar technologies for:

• Essential Cookies: Required for authentication and core functionality.
• Analytics Cookies: Google Analytics to understand usage patterns.
• Preference Cookies: Remember your settings and preferences.

You can control cookies through your browser settings. Disabling cookies may affect functionality. See our Cookie Policy for more details.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we may also send an email notification. Your continued use of the Services after changes constitutes acceptance of the updated policy.