Back to LeagueFlow
Privacy Policy

Privacy Policy

How LeagueFlow collects, uses, stores, and protects account, league, authentication, and Google Sign-In data for organizers, staff, and public visitors.

Last updated: April 6, 2026

[email protected]TermsPrivacy

Overview

LeagueFlow provides basketball league operations software for organizers, staff, teams, and public league visitors. This Privacy Policy explains what information we collect, how we use it, and the choices you have when you use LeagueFlow.

This policy applies when you visit leagueflowapp.io, create an account, sign in with email/password, or sign in with a supported identity provider such as Google.

Information We Collect

We collect information you provide directly, information needed to operate the service, and limited technical information generated when you use the platform.

  • Account information such as your name, email address, password hash, and email-verification status.
  • Organization and league data such as organization names, league settings, team rosters, players, venues, schedules, standings, announcements, and game results that you or authorized staff enter into the product.
  • Authentication and security data such as session records, refresh-token rotation records, rate-limit events, password-reset requests, and login metadata needed to protect accounts and prevent abuse.
  • Billing and upgrade flow data related to subscription plan selection, payment status, and payment-provider references needed to manage your organization subscription.
  • Public-content data such as public league pages, schedules, standings, team summaries, player leaderboards, and announcements that an organization intentionally publishes for public viewing.

Google Sign-In Data

If you choose Google Sign-In, LeagueFlow receives identity information from Google that is necessary to authenticate you and link your account. This typically includes your Google account identifier, email address, display name, and basic profile information associated with the sign-in scopes you approve.

LeagueFlow uses Google user data only to authenticate you, create or link your LeagueFlow account, and maintain account security and sign-in continuity. We do not request access to Gmail, Google Drive, Google Calendar, or other Google account content through this sign-in flow.

We do not sell Google user data, and we do not use Google user data for advertising.

How We Use Information

  • Provide and maintain LeagueFlow, including organizations, leagues, scheduling, standings, public pages, and the officials console.
  • Authenticate users, secure accounts, prevent fraud, detect abuse, and investigate operational incidents.
  • Process organization subscription status, product upgrades, support requests, and service communications.
  • Send transactional emails such as verification emails, password reset messages, invitation emails, and account-related notices.
  • Improve reliability, diagnose product issues, and monitor usage patterns needed to keep the service stable and secure.

How We Share Information

We share information only when needed to operate the service, comply with law, or protect LeagueFlow and its users.

  • With service providers that help us host the application, store media, send email, and process payments.
  • With organization administrators and authorized staff based on the permissions and workflows inside the product.
  • With public visitors only for league information that an organization chooses to publish publicly.
  • When required by law, regulation, legal process, or a valid governmental request.
  • To protect rights, safety, security, or the integrity of LeagueFlow, our users, or the public.

Data Retention

We retain account, organization, and operational data for as long as reasonably necessary to provide the service, maintain security records, comply with legal obligations, resolve disputes, and enforce our agreements.

Public league content may remain available until it is changed or removed by the responsible organization or until the related account or organization data is deleted from the service.

Your Choices

  • You may update certain account and organization information from within the product.
  • You may stop using Google Sign-In and use another available login method if your account supports it.
  • You may request account or data deletion by contacting [email protected].
  • You may stop receiving non-essential messages by following any unsubscribe instructions when those messages are offered.

Third-Party Service Providers

LeagueFlow relies on third-party infrastructure and operational providers to run the service. These providers may process data on our behalf only as needed to host the application, store uploaded media, send email, process payments, and support authentication and security workflows.

  • Hosting and infrastructure providers.
  • Cloud file and media storage providers.
  • Transactional email providers.
  • Payment and billing providers.
  • Identity providers you choose to use for sign-in, such as Google.

Security

We use reasonable administrative, technical, and organizational safeguards to protect LeagueFlow data, including authentication controls, credential handling, and service-level access restrictions. No internet or storage system can be guaranteed fully secure, so we cannot promise absolute security.

Children's Privacy

LeagueFlow is not directed to children under 13 and is intended for use by organizers, staff, players, and teams under the supervision of leagues, schools, clubs, or other responsible organizations. If you believe personal information from a child was provided inappropriately, contact [email protected].

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we may update the effective date on this page and, where appropriate, provide additional notice inside the product or by email.

Contact

Questions, privacy requests, or account/data deletion requests can be sent to [email protected].