Privacy Policy
The short version: we hold what a league needs to run its season (names, contact details, rosters, schedules and scores), we show personal details only to the people in that league, and we don't sell anything, show ads or track you. The rest of this page is the detail.
Who we are
PowerSchedule is a service run by Southpaw Digital Labs Inc., a company based in Alberta, Canada (“we”, “us”). It lets sports leagues publish schedules, collect scores and keep standings. Each league is run by an organization, such as a club or a league coordinator, at its own address like yourleague.powerschedule.ca.
Our Privacy Officer is responsible for how we handle personal information and can be reached at hello@powerschedule.ca.
Our role and the organization's
Organizations decide what goes into their leagues: which teams, captains and players are listed and what details are entered about them. For that league information we act on the organization's behalf, as its service provider, and use it only to run the service for that organization. The organization is responsible for telling its captains and players how their information will be used and for getting their consent where it's required.
For our own records, such as organization admin accounts, billing and messages sent to us, we decide how the information is used, and this policy describes it.
We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta's Personal Information Protection Act (PIPA).
What we collect, and why
| About | What | Why |
|---|---|---|
| Organization admins | Name, email address, which organizations you manage, and sign-in records (time, IP address and browser type) | To let you sign in and manage your leagues, and to keep accounts secure |
| The organization's contact person | The name, email and phone number the organization chooses to show as its contact | So captains and players know who to ask for help |
| Team captains | Name, email address, phone number, team, and the team's four-digit PIN | So the league can reach captains, captains can reach each other, and captains can sign in to enter scores |
| Players on rosters | Name, and where the league uses them: jersey number, position, gender, and attendance replies (going, maybe, out). If a league lets players sign in, also the email address or PIN they use and the sign-in records above | To show who plays on each team and who's coming each week. Gender is used only for leagues with co-ed lineup rules, such as a minimum number of women on the court |
| League details | Schedules, scores, standings, venues, league rules and logos | To run the league. These are usually not about a person |
| People who contact us | Whatever you include in your message | To reply and to set up your league |
| Paying organizations | Billing contact and payment records. Card payments are handled by Stripe; we never see or store card numbers | To bill for the service and keep tax records |
| Anyone using the site | IP address and request details in our server logs. Your IP address is also held for up to an hour to limit repeated PIN guesses | To keep the service running and secure |
We don't use analytics, advertising or tracking tools, and we don't build profiles. Please don't enter sensitive information the league doesn't need, such as health details, birthdates or ID numbers.
Who can see what
| Who | Can see |
|---|---|
| Anyone with the league's address | League and team names, the schedule, scores, standings, venues, league rules, the organization's contact details, and the fairness report if the league chooses to share it. Not captains' or players' names or contact details |
| Captains and players signed in to a league | Everything above, plus that league's team rosters and its captains' names, email addresses and phone numbers. Captains also see their own team's PIN |
| The organization's admins | Everything in their organization's leagues, including PINs |
| Us | We look at league information only when we need to: to run, support or secure the service, when the organization asks us to, or when the law requires it |
Organizations can also print schedules, rules and captain sheets, and download calendar files. What happens to those copies is up to the organization.
How we use it
- To provide the service: show schedules and standings, record scores, and let people sign in
- To send sign-in links and admin invitations by email
- To answer questions and help organizations set up
- To keep the service secure and stop misuse
- To bill organizations and meet our legal and tax obligations
- To tell organization admins about changes to the service
We don't sell personal information, share it for advertising, or send marketing to captains or players.
Companies that help us run the service
We use a small number of service providers. They handle information only to provide their service to us, under their own security and privacy commitments.
| Provider | What for | Where |
|---|---|---|
| OVHcloud | The servers and database the service runs on | Beauharnois, Quebec, Canada |
| Backblaze | Encrypted copies of the database, kept off the main server in case it fails | United States |
| Resend | Sending sign-in and invitation emails (the recipient's address and the message) | United States |
| Cloudflare | Our domain name, and forwarding email sent to hello@powerschedule.ca | Worldwide network |
| Google Workspace | Our email inbox | Worldwide |
| Stripe | Card payments, once paid plans begin | Canada and the United States |
The league information itself is stored in Canada. Backups and emails are handled in the United States, where they may be subject to that country's laws, including access by its authorities.
Cookies and storage on your device
- Sign-in cookies. One for organization admins and one for captains, each lasting up to 14 days. They're needed to stay signed in and aren't used for anything else.
- Browser storage. The app remembers your light or dark setting and which league you picked, and keeps a copy of the league information you're allowed to see so it opens quickly and works with a weak signal. It also stores the app's own files so it can be installed on a phone's home screen.
On a shared device, sign out when you're done. Clearing the site's data in your browser removes everything above.
How long we keep it
- League information: until the organization deletes it or closes its account. We remove a closed account's information from the service within 30 days, after giving the organization a chance to take a copy
- Backups: daily restore points for 35 days (one a week for 180 days, so a whole season can be recovered), restore points an admin makes for 90 days, and off-server database copies for 30 days, plus up to 30 more before deleted copies are erased. Deleted information is gone from every backup within about six months
- Sign-in links: 15 minutes, and they work once. Sign-in sessions: 14 days
- Records of PIN attempts: up to an hour
- Server logs: a short period, for troubleshooting and security
- Messages to us and billing records: as long as we need them, and billing records as long as tax law requires
How we protect it
- Everything is sent over encrypted connections (HTTPS), and off-server backups are encrypted
- Each organization's information is kept separate, and the service checks every request against it
- Admins sign in with one-time email links, so there are no passwords to steal
- Repeated wrong PINs are blocked for a while
- Only we can reach the servers, and access is limited to what's needed
Team PINs are four digits, so captains should keep them to themselves. If personal information is lost or accessed without permission, we'll tell the affected organizations promptly. Where the law requires it (a real risk of significant harm), we'll also report it to the Privacy Commissioner of Canada or Alberta's Information and Privacy Commissioner and notify the people affected.
Your choices and rights
You can ask to see the personal information held about you, have it corrected, or withdraw your consent and be removed (for example, from a roster). Captains and players: your league organizer can usually make these changes directly, so ask them first. You can also write to us at hello@powerschedule.ca, and we'll work with your organization to respond, normally within 30 days.
If you're not satisfied with our answer, you can complain to the Office of the Information and Privacy Commissioner of Alberta or the Office of the Privacy Commissioner of Canada.
Adult leagues only
PowerSchedule is for adult leagues. Organizations must not add anyone under 18. If we learn that information about a child has been added, we'll delete it.
Changes to this policy
When we change this policy we'll update the date at the top. If a change matters, for example a new kind of information or a new provider, we'll email organization admins before it takes effect.
Contact
Southpaw Digital Labs Inc., Alberta, Canada · hello@powerschedule.ca. See also our Terms of Service.