RTF Basketball Camp Manager

RTF Basketball Camp Manager(“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains what personal information we collect, how we use it, and your rights regarding that information. By using our Service, you agree to the practices described in this policy.

1. Information We Collect

We collect personal information in the following categories:

Account information: Full name, email address, and password (hashed) when you create an account.
Organization data: Camp name, logo, and configuration settings you provide.
Player records: Names, birth dates, photos, enrollment status, and session attendance entered by camp administrators.
Payment information: Transaction amounts, payment status, and plan details. Full card numbers are processed by our payment provider and are never stored on our servers.
Usage data: IP address, browser type, pages visited, feature interactions, and timestamps, collected automatically via server logs and analytics.
Communications: Email addresses used to send session reminders, invitations, and platform notifications.

2. How We Use Your Information

We use the information we collect to:

Create and maintain your account and organization.
Provide, operate, and improve the Service.
Send transactional emails: account confirmation, password reset, session reminders, and invitations to coaches or parents.
Process and record payments.
Respond to your support requests and inquiries.
Monitor for and prevent fraud, abuse, and security incidents.
Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information to third parties. We do not use player data for advertising purposes.

3. Children’s Privacy

The Service is designed to help manage youth sports programs, so it may contain data about minors (“players”). This data is entered directly by authorized adult administrators, not by the minors themselves. We do not knowingly collect personal information directly from children under 13.

Camp administrators are responsible for obtaining the appropriate parental consent before entering minor data into the platform and for complying with all applicable child privacy laws (e.g., COPPA in the United States).

4. Data Sharing & Disclosure

We share personal information only in the following limited circumstances:

Service providers: We use third-party providers (e.g., Supabase for database hosting, Resend for transactional email, Vercel for hosting) that process data on our behalf under strict data processing agreements.
Within your organization: Admins, directors, and coaches within the same organization can access player and session data as permitted by their role.
Legal requirements: We may disclose information when required by law, court order, or to protect the rights, property, or safety of our users or the public.
Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. If you close your account, we will delete or anonymize your personal data within 90 days, unless we are required to retain it for legal or compliance reasons.

6. Security

We implement industry-standard security measures to protect your information, including:

Encryption in transit (TLS/HTTPS) for all data.
Passwords hashed using a strong one-way algorithm (bcrypt).
Row-level security (RLS) policies ensuring each organization can only access its own data.
Role-based access control (RBAC) limiting data visibility within organizations.
Regular security reviews and dependency updates.

No method of transmission or storage is 100% secure. If you believe your account has been compromised, contact us immediately at support@rtfcamp.com.

7. Cookies & Tracking

We use cookies and similar technologies to maintain your session (authentication cookie), remember your preferences, and analyze usage patterns. We use:

Session cookies: Required for authentication. Deleted when you sign out or close your browser.
Analytics: Aggregated, anonymized usage data to understand how the Service is used. No cross-site tracking.

You can control cookie behavior through your browser settings. Disabling essential cookies will prevent you from logging in.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you.
Correction: Request that we correct inaccurate data.
Deletion:Request deletion of your personal data (“right to be forgotten”), subject to legal obligations.
Portability: Request your data in a structured, machine-readable format.
Objection / Restriction: Object to or request restriction of certain processing activities.

To exercise these rights, email us at support@rtfcamp.com. We will respond within 30 days.

9. International Data Transfers

Our infrastructure is hosted on servers that may be located in the United States or other countries. If you use the Service from outside those countries, your information is transferred to and processed in those jurisdictions. By using the Service, you consent to such transfers in accordance with this policy.

10. Third-Party Links

The Service may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by a prominent notice within the Service at least 14 days before the changes take effect. The “Effective date” at the top of this page always reflects the current version.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

support@rtfcamp.com