Privacy Policy

1. Overview

Draft It All provides online tools that authorized commissioners and Managers use to organize and conduct drafts. This Privacy Policy explains what information Draft It All collects, why it is used, when it may be disclosed, and the choices available to users.

2. Information We Collect

• Account information: email address, login records, account role, and Organization membership.
• Organization and draft information: Organization names, divisions, teams, Manager invitations, draft settings, selections, auction-unit activity, check-in state, player evaluation scores or notes when enabled, and draft history.
• Team Management information: team workspaces, adult contacts and Managers, approved roster fields, team chat messages and approved chat photos, Team Email metadata, events, reminders, availability responses, comments, and privacy or notification preferences.
• Uploaded participant information: information an authorized commissioner includes in a Draft Pool, such as a participant name, stable identifier, tryout number, division, or other draft fields. Draft It All may preserve the original uploaded columns for authorized commissioner exports even when only selected fields are displayed during the live draft.
• Communications: names, email addresses, and messages submitted through Contact Us.
• Technical information: IP address, browser and device information, session cookies, security logs, and similar information generated while the service is used.

3. How Information Is Used

We use information to:

• authenticate users and maintain secure sessions;
• create Organizations and divisions; operate player check-in, evaluations, and live drafts; and produce authorized draft/roster exports;
• provide authorized users with the information needed for their assigned role;
• send login codes, invitations, roster emails, Team Management messages and reminders, and support responses;
• prevent misuse, investigate problems, and improve reliability; and
• comply with legal obligations and enforce our Terms of Service.

4. How Information Is Shared

Draft It All does not sell personal information or share it for cross-context behavioral advertising. Information may be disclosed to authorized members of the applicable Organization, according to their permissions; to service providers supporting hosting, database, authentication, and email delivery, including Vercel, Supabase, Resend, and OpenAI when automated safety screening is used for Team Chat photo moderation; when required by law; or when reasonably necessary to protect users, the service, or others.

5. Participant and Youth Information

Draft It All accounts are intended for adults. Minor players may appear as Draft Pool or roster profiles, but minor player profiles do not receive Draft Management or Team Management login credentials in the initial release. Users who upload participant information represent that they are authorized to do so. Draft Pool uploads should contain only information reasonably necessary for the draft or team-management purpose and should not contain medical or health information, emergency-contact information, Social Security numbers, financial information, or other unnecessary sensitive information.

6. Data Retention and Deletion

Information is retained while needed to provide the service, maintain security and records, comply with legal obligations, or resolve disputes. Team Management uses product-specific retention rules for items such as chat history, availability history, event cancellations, archive records, and workspace-deletion recovery. Authorized commissioners may use available workspace, division, and Organization lifecycle controls. Team Management Account provides data-export, privacy/correction, and account-deletion request controls. A separate public account-deletion request page is also available at /delete-account so a deletion request can be initiated outside the app. Some limited information may remain in backups, security logs, immutable draft history, or other records that must be retained for legitimate legal, security, fraud-prevention, or operational purposes.

7. Security

Draft It All uses reasonable administrative and technical safeguards intended to protect information, including encrypted connections, email-code authentication, role-based permissions, and Organization-level access controls. No internet service can guarantee absolute security.

8. Cookies and Browser Signals

Draft It All uses session technology needed for authentication, security, and operation of the service. Draft It All does not currently use personal information for cross-site targeted advertising and therefore does not respond differently to browser Do Not Track signals. If these practices change, this policy will be updated.

9. Changes to This Policy

This Privacy Policy may be updated as Draft It All changes. The revised policy will be posted with a new effective date. Material changes may also be communicated through the service when appropriate.

10. Contact

For privacy questions or requests, use the public Support page at /support. Account-deletion requests may also be initiated at /delete-account.