Privacy Policy

1. Who May Use Draft It All

Draft It All is an adult administrative service. Every account holder and user must be at least 18 years old. No person under 18 may create, hold, access, or use an account.

Minor participants may appear only as non-login records created and managed by authorized adults. Children may not submit information directly through the Service.

Draft It All is not currently offered or marketed primarily for K-12 school purposes. School-purpose use may require a separate agreement and legal review.

2. Information We Collect

Account, Identity, and Role Information

We may collect an adult user’s name, email address, optional phone number, account identifier, age affirmation, organization role, division and team assignments, invitation status, login timestamps, account activity, access-removal history, privacy preferences, and notification preferences. Draft It All uses email-based authentication and does not require users to create a password directly with Draft It All.

Organization and Draft Information

We may collect organization, division, and team names; commissioner, manager, and coach assignments; draft type and settings; roster-position requirements; draft order; preassignments; draft selections; auction nominations, bids, and virtual unit values; team rosters; draft state; check-in configuration; evaluation configuration; and activity history.

Participant, Roster, and Contact Information

Authorized adults may provide participant names, stable identifiers, pinnie or jersey numbers and colors, positions, check-in or attendance status, evaluation ratings and notes, custom registration fields selected by the organization, draft status, team assignment, roster information, and authorized adult contact information such as contact name, relationship, email, and phone number.

Team Management may create durable roster records, player-team memberships, coach assignments, contact relationships, roster field history, and other operational records that are separate from the finalized draft history.

Draft It All is not intended to collect Social Security numbers, government identification numbers, financial account information, health-insurance information, detailed medical information, passwords, precise home-location information, or unrelated sensitive information. Organizations should not upload information that is unnecessary for the permitted drafting or team-management purpose.

Team Communications and User Content

If Team Management communications are used, we may collect chat messages, message edits and deletions, reactions, starred-message state, reports, blocks, moderation actions, team email content and metadata, recipient selections, delivery status, and related communication records.

If an adult uploads a photo to Team Chat, we may collect the uploaded file, a processed display copy, file metadata, moderation status, and safety-review information. Uploaded images may be resized, reformatted, technically validated, quarantined, or submitted to automated or manual safety review before or after ordinary display.

Calendar, Event, Attendance, and Location Information

We may collect team events, event names, opponents, dates, times, arrival times, recurrence settings, facilities and locations, addresses entered for team facilities, descriptions, jersey information, reminder settings, attendance-tracking settings, availability deadlines, attendance or availability responses, comments, and related event history.

Support, Privacy Requests, and Technical Information

If you contact us or submit a privacy request, we may collect your name, email address, request type, request status, verification information, and message or supporting details.

Draft It All and its providers may automatically receive IP address, browser and device information, authentication and security records, request and error logs, essential session cookies, and similar information required to operate and secure the Service.

3. Sources of Information

We receive information directly from adult users, from commissioners and other authorized organization representatives, from files those representatives upload, from actions taken during check-in, evaluation, drafting, Team Management, communications, and events, and automatically from devices and service providers supporting authentication, hosting, storage, security, moderation, and email delivery.

Some adult contact information may originate in an organization-provided roster or registration file and later be associated with a verified adult login when the adult activates access using the same authorized email address.

4. How We Use Information

We may use information to:

• Create, authenticate, and secure accounts and sessions.
• Create and administer organizations, divisions, teams, workspaces, and roles.
• Import and manage participant pools and rosters.
• Conduct check-in and player evaluations.
• Configure, synchronize, conduct, and preserve drafts.
• Create Team Management workspaces from finalized drafts or standalone setup.
• Manage players, coaches, contacts, and team access.
• Operate team chat, reactions, reporting, blocking, moderation, and photo safety review.
• Operate team email, invitations, and notification preferences.
• Create and manage calendars, recurring events, facilities, attendance, availability, and reminders.
• Create rosters, reports, downloads, and exports requested by authorized users.
• Apply adult contact-display preferences and waiting periods.
• Respond to support, access, correction, export, and deletion requests.
• Detect misuse, investigate errors, maintain audit records, and improve reliability and security.
• Comply with applicable law and enforce our agreements.

We do not sell personal information. We do not use participant information for behavioral advertising, unrelated marketing, or unrelated profiling.

5. Organization Responsibilities

Each organization controls the information its authorized users submit and the roles assigned within that organization. Commissioners represent that they are adults, are authorized to act for the organization, have provided required notices and obtained required permissions, and will limit information to what is reasonably necessary.

Commissioners must review uploaded columns, protect exports, manage access, remove users who no longer require access, and avoid using Draft It All to store unnecessary sensitive child information. Organizations should maintain their own records and procedures for responding to participant or parent questions.

6. How Information Is Disclosed

Within an Organization or Team

Authorized users may access information according to their organization, division, draft, team, role, and verified relationships. Commissioners and managers may receive broader access than contacts or adult players. Check-in and evaluation managers receive only the access assigned to them.

Draft It All does not make organization or Team Management information publicly accessible merely because a workspace is published to a team.

An adult’s login email or phone number is not automatically displayed to team members. Where the feature is available, the adult must separately opt in to ordinary team display, and a waiting period may apply. Hidden contact information may still be used for login, invitations, required service communications, or authorized in-app delivery.

Service Providers

Draft It All currently uses service providers that may process information on our behalf, including:

• Supabase for database, authentication, storage, and backend services.
• Vercel for hosting and application infrastructure.
• Resend for login, invitation, notification, and operational email delivery.
• OpenAI for selected automated safety or moderation functions, such as review of uploaded Team Chat images, when that functionality is enabled.

These providers process information to perform services for Draft It All. Their processing is subject to their applicable agreements, security controls, and privacy practices.

Draft It All may add or replace service providers as the Service changes. Material changes to data handling will be reflected in this Policy when required.

Legal, Safety, and Business Changes

We may disclose information when reasonably necessary to comply with law or legal process, investigate misuse, secure the Service, enforce agreements, or protect rights and safety.

Information may transfer during a merger, acquisition, financing, reorganization, or sale, with notice if the change materially affects handling as required by law.

7. Minor Participant Information

No person under 18 may use an account. Minor participants are non-login records administered by authorized adults. Organizations should collect only information reasonably necessary for check-in, evaluation, drafting, roster administration, scheduling, attendance, and legitimate team operations.

A parent or guardian who believes information was provided without authority, is inaccurate, or should be deleted may submit a request through the Contact Us page or any published privacy-request method. Draft It All may verify identity, relationship, organization, and authority and may coordinate with the applicable organization while preserving individual rights and security.

If we learn that a person under 18 created or used an account or directly submitted personal information, we will investigate and disable the account or delete eligible information as appropriate.

8. Team Management Access and Invitations

Publishing a Team Management workspace activates authorized relationships and may create pending informational invitation records. Invitation email delivery may occur later when an authorized commissioner selects SEND INVITATIONS or a similar control.

A person whose authorized email relationship has already been activated may be eligible to access Team Management using that email before receiving an invitation email, subject to verified-login and adult-account requirements.

We maintain access and role records so the Service can determine which organization, team, player, and information a user is permitted to access.

9. Contact Display Choices

Where supported, adults may separately choose whether to display their email address and phone number to a particular team. Display choices are off by default and may include a waiting period before information becomes ordinarily visible to authenticated team members.

An adult may cancel a pending display choice or turn display off. Managers and commissioners cannot opt another adult into directory display on that adult’s behalf.

A parent or contact’s display choice applies only to that adult’s information and does not authorize ordinary display of a minor participant’s email address or phone number.

10. Chat, Photos, Reporting, Blocking, and Moderation

Team Chat may store text messages, photos, reactions, edits, deletions, reports, block relationships, moderation decisions, and related audit information.

A deleted message may be replaced in the ordinary team view with a deletion marker while limited moderation or audit records are retained for a period reasonably necessary for safety, security, dispute resolution, or legal compliance.

Uploaded photos may be stored temporarily in a restricted or quarantine location while technical validation or moderation occurs. Draft It All may create a processed display copy and may remove or restrict access to content that fails technical checks, violates policy, or requires review.

Automated moderation is a safety aid and is not guaranteed to identify every inappropriate image or communication. Chat is not monitored continuously and is not an emergency service.

11. Team Email and Notifications

We may process team email content, recipient selections, delivery metadata, delivery status, and notification preferences. Recipient selectors may identify an adult contact by name or associated player without exposing a hidden email address to the sender.

Users may choose notification settings where available. Security, authentication, required service, and properly authorized safety communications may be handled separately from optional team-notification preferences.

12. Calendar, Events, Attendance, and Availability

We may process team event information, recurring-series information, facilities and locations, attendance-tracking settings, responses, availability comments, private manager notes, reminders, and change or cancellation history.

Event and attendance information is private team information. Users should not enter unnecessary medical, custody, precise home-location, or other sensitive child information into event descriptions, comments, or availability notes.

13. Retention and Deletion

We retain information only as reasonably necessary to provide and secure the Service, maintain draft and operational integrity, support team history, comply with legal obligations, resolve disputes, prevent fraud, enforce agreements, and support disclosed recovery or backup processes. Retention depends on the record type, organization status, and user action.

Commissioners may reset drafts or delete teams, divisions, workspaces, or organizations where permitted. Users may initiate access, correction, export, or account-deletion requests through the Service or other published request methods.

Account-deletion requests may require identity verification and review. Eligible personal information may be deleted, de-identified, or disconnected from an account. Certain information may be retained where reasonably necessary for security, fraud prevention, legal compliance, dispute resolution, immutable draft-history integrity, team-history integrity, audit requirements, backup rotation, or other permitted purposes.

Deleted information may remain temporarily in secured backups, restricted moderation records, and logs until overwritten or removed under applicable procedures. Exported copies are controlled by the organization or user who downloaded them.

14. Security

We use administrative and technical safeguards designed to protect information, including email authentication, role-based access, organization and workspace separation, server-side authorization, database security controls, signed or access-controlled storage where applicable, encryption in transit, provider security measures, and restricted administrative access.

No online system can be guaranteed completely secure. Users must protect their email accounts and devices and promptly report suspected unauthorized activity.

15. Cookies, Analytics, and Tracking

Draft It All uses essential cookies and similar technologies for authentication, security, session continuity, and basic functionality.

Draft It All does not currently use third-party behavioral advertising or intentionally track users across unrelated websites or apps for advertising. We do not sell personal information to advertisers.

If Draft It All later enables analytics or other measurement technologies that materially change the information collected or the purposes for which it is used, this Policy and applicable user or store disclosures will be updated when required.

16. Your Privacy Choices and Requests

Depending on your role and the information involved, you may be able to:

• Review or correct your account information.
• Manage team-specific email or phone display choices.
• Manage notification preferences.
• Request removal from an organization or team.
• Request access to or export of available personal information.
• Request correction or deletion of eligible personal information.
• Initiate an account-deletion request.
• Ask about participant information associated with your child, subject to verification.
• Delete teams, divisions, workspaces, or organizations when your role permits.
• Report or block users or content in Team Chat where the feature is available.

Submit requests through the Contact Us page, the in-app privacy request tools, or the public account-deletion page where available. We may verify your identity, relationship, and authority.

We will explain when information cannot be provided or deleted because of security, legal, fraud-prevention, organizational, immutable-history, team-history, or other permitted requirements.

Draft It All does not discriminate against a user for making a privacy request.

17. Third-Party Links

The Service may link to websites or services Draft It All does not control. Their privacy and security practices are governed by their own policies.

18. Changes to This Policy

We may update this Policy as the Service changes. We will update the Last Updated date and may provide additional notice through the Service or by email for material changes. When required, we may request affirmative acceptance before continued use.

19. Contact Us

Questions and requests concerning privacy, access, correction, export, or deletion may be submitted through the Contact Us page.

Please provide enough information to identify the account, organization, participant relationship, and request. Do not submit passwords or login codes.