Privacy Policy

Remonter Solutions Inc. ("Leagzr", "we", "us") operates the Leagzr sports league management platform. This Privacy Policy explains how we process personal data when you create a platform account, manage a league, or visit a league's public site hosted on Leagzr.

This document is an engineering scaffold for transparency and GDPR readiness. It must be reviewed and approved by qualified legal counsel before production launch or marketing to EU/UK users.

Under the GDPR and UK GDPR, the party that determines why and how personal data is processed is the data controller. A processor processes personal data on the controller's instructions.

• Leagzr acts as the data controller for platform account data: league owner and admin registration, billing contact details, authentication identifiers, support correspondence, and platform usage logs tied to your account.
• Each league organization (the "League") acts as the data controller for player and participant data it collects through its league site, registrations, waivers, schedules, and communications— including names, contact details, waiver signatures, and game statistics published at the League's direction.
• Leagzr acts as a data processor when storing and processing player and league operational data on behalf of a League, as described in our Data Processing Agreement (DPA).

If you are a player or participant, contact your League first for access, correction, or deletion requests relating to league-specific data. Contact us at [email protected] for platform account matters or if you need help reaching the correct controller.

• Account data: email address, display name, password hash, optional profile image, OAuth identifiers when you use Google sign-in.
• League data: league name, subdomain, sport type, branding, schedules, teams, game results, and content you publish on your league site.
• Player data (on behalf of Leagues): registration details, waiver acceptance records, payment status metadata, and statistics you or League admins enter.
• Billing data: subscription plan, Stripe customer and payment method tokens (card details are held by Stripe, not Leagzr).
• Technical data: IP address, browser user agent, session cookies, and diagnostic logs needed to operate and secure the service.

• Provide, maintain, and improve the platform and league sites.
• Authenticate users and enforce account security.
• Process subscriptions and, where enabled, league registration payments via Stripe.
• Send transactional emails (verification, password reset, league notifications).
• Comply with legal obligations and respond to lawful requests.
• Detect abuse, fraud, and security incidents.

Where the GDPR applies, we rely on: (a) contract — to provide the service you signed up for; (b) legitimate interests — security, product improvement, and fraud prevention, balanced against your rights; (c) consent — where required (e.g. non-essential cookies or marketing, when offered); and (d) legal obligation — where we must retain or disclose data by law.

We use the following subprocessors to run the platform. Leagues should review this list as part of their own accountability obligations when using Leagzr as a processor:

• Self-hosted PostgreSQL — Primary application database (accounts, league data, audit logs); data may be processed in Leagzr-operated VPS (region configured per deployment).
• Stripe — Leagzr subscription billing and league payment processing (Stripe Connect); data may be processed in United States / global.
• Resend — Transactional email (verification, password reset, league notifications); data may be processed in United States.
• Cloudflare R2 — Object storage for uploaded media (logos, photos, documents); data may be processed in Global (edge locations).
• Grafana Cloud (optional) — Infrastructure and application observability (metrics, logs, traces); data may be processed in Canada / global (Grafana Labs regions).
• Google OAuth (optional) — Optional social sign-in for league admin accounts; data may be processed in United States / global.

We will update this list when subprocessors change materially. Enterprise customers may request prior notice where contractually agreed.

We retain personal data only as long as needed for the purposes above, to comply with law, or to resolve disputes. League operational data is retained while the League's subscription is active and for a limited period afterward unless the League requests earlier deletion, subject to legal holds (e.g. signed waivers where retention is required). Detailed retention schedules are documented in our internal records of processing and will be published in a future update.

Depending on your location, you may have rights to access, rectify, erase, restrict, or port your personal data, and to object to certain processing. You may also lodge a complaint with your supervisory authority. Platform account requests: [email protected]. League player data requests: contact your League controller first.

We and our subprocessors may process data in the United States and other countries. Where required, we use appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.

Remonter Solutions Inc. · Leagzr · [email protected]