Privacy Policy

OrangeSlice Sport is operated by OrangeSlice Sport LLC ("we", "us", "our"). This policy covers the OrangeSlice Sport website at orangeslicesport.com and the OrangeSlice Sport application.

Organizations control their own data. When a club, academy, league, or team uses OrangeSlice Sport, that organization decides what information to collect about its families and why. We process that information on the organization's behalf and in order to run the service. For questions about why your organization collects something — or to have a record changed — contact the organization first. You can always contact us as well, at support@orangeslicesport.com.

Not every organization collects every category. Medical notes and emergency contacts, for example, are optional fields that an organization chooses whether to use.

OrangeSlice Sport is used to manage youth athletes, and many of them are children, including children under 13. This section explains how their information is handled.

Children do not create accounts

Accounts on OrangeSlice Sport are for adults. An athlete profile for a minor is created by a parent or legal guardian, or by an organization that has authorization from a parent or guardian to do so. Children do not sign up, and we do not knowingly collect information directly from a child.

What is collected about a minor, and why

• Name, date of birth, team, position, and jersey number — to place an athlete on the correct roster, confirm age eligibility for a division, and run schedules and evaluations.
• Photograph and biography, where the organization or parent provides them — to identify the athlete on rosters and team pages.
• Allergies, medications, dietary notes, other medical notes, and emergency contacts, where an organization chooses to collect them — so coaches and staff can respond appropriately at a practice, game, or trip.
• Evaluation and development records — tryout scores, coach notes, progress reports, and measurables, kept so an athlete's development can be tracked across seasons.

Contacting an athlete directly

An organization can record an athlete's own contact details and mark that athlete as contactable. If it does, that athlete may receive communications from the organization directly — for example team messages and schedule changes. This is the organization's choice, and it is the organization's responsibility to have the parent's or guardian's permission before enabling it. Most organizations communicate with the parent or guardian instead. A parent can ask the organization, or us, to turn this off.

What we never do

• We do not sell personal information, including a child's, and we never have.
• We do not use children's information for advertising — not behavioral advertising, not targeted advertising, not ad profiling. There is no advertising technology in the product.
• We do not condition a child's participation on disclosing more information than the organization needs to run its program.

Parental review, correction, and deletion

A parent or guardian may review the information held about their child, correct it, or ask that it be deleted, and may refuse to allow further collection of it.

• Start with your organization — they maintain the roster and can update or remove a record directly.
• You can also email support@orangeslicesport.com and we will help, working with your organization to carry out the request.
• Some information may be retained where we are required to keep it, such as records of payments made.

Organizations must have consent

Organizations agree, as a condition of using OrangeSlice Sport, that they have the lawful basis and the parental or guardian consent required to collect participant information, upload it, and communicate with the people they contact. That obligation is part of our Terms of Service and of the messaging terms organizations accept in the product.

We use information to:

• provide the service — rosters, registration, scheduling, lessons, and evaluations;
• facilitate payments between families and organizations, and provide receipts;
• send transactional and program-related communications;
• provide support and respond to questions;
• secure the service, prevent fraud and abuse, and investigate incidents;
• operate, troubleshoot, and improve the product;
• comply with law and enforce our terms.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising, and we do not run advertising in the product.

We may use aggregated or de-identified information — which does not identify any person or organization — to understand usage and improve the service.

Some features use third-party AI providers to draft or interpret content. This matters for privacy, so we describe it plainly.

• Progress reports and evaluations. When a coach uses the AI interview to draft a progress report, the athlete's name, age, position, the coach's notes, and prior report history for that athlete are sent to our AI provider to generate the draft.
• Voice interviews. If a coach uses the voice option, the recorded audio is sent to a speech provider for transcription and to generate spoken questions.
• Scanned evaluation sheets and images. Photographed tryout sheets are sent to an AI provider to read the handwriting, which can include athlete names and numbers. Uploaded images may be sent to generate descriptive text.
• Imports and parsing. Pasted rosters, uploaded contact files, and schedule text are sent to an AI provider to map columns and extract records, which can include names, dates of birth, emails, and phone numbers.

AI output is a draft. Coaches and administrators are responsible for reviewing it before it is sent to a family. AI providers act as our service providers and are listed in the next section. We do not use AI to make automated decisions that produce legal or similarly significant effects about anyone.

• Card and bank account numbers are collected directly by Stripe and never stored on our servers. Payment details are entered into Stripe's own payment forms; they do not pass through OrangeSlice Sport systems.
• What we store is limited to non-sensitive references — Stripe identifiers for a customer, payment, or subscription, plus the amount, currency, date, and status of a payment. We do not store card numbers, expiration dates, security codes, bank account numbers, or routing numbers.
• Stripe is independently responsible for the payment data it collects. Stripe uses that information as a controller in its own right, under its own terms. See the Stripe Privacy Policy.
• Each organization holds its own Stripe account and is the merchant of record for the payments its families make. We do not hold or move those funds. See the payment relationship section of our Terms.

We share information with the providers below, only as needed for them to perform their function for us. We do not sell information to them or to anyone else.

This list changes as the product changes. We keep this page current and will note material additions in the "last updated" date at the top; organizations are notified of material changes as described in our Terms.

We may also disclose information when required by law, to respond to lawful requests, to protect the rights and safety of people using the service, or in connection with a merger, acquisition, or sale of assets — in which case we will say so before information becomes subject to a different policy.

Each organization's records live in its own separate database. Rosters, contacts, schedules, evaluations, and payment records for one club are not stored alongside another club's. Every request to the application is scoped to a single organization's database, resolved from the signed-in user's own credentials — so one organization's staff cannot query, search, or export another organization's data.

To be precise about what this is and is not: the separation is enforced by the application and by using a distinct database per organization. Those databases run on shared database infrastructure that we administer, and our own administrators can access them to operate the service and provide support.

• While the account is active. We keep an organization's records — rosters, contacts, registrations, evaluations, communications, and payment records — for as long as the organization maintains its account, because youth sports records are meant to follow an athlete across seasons.
• Deletion on request. An organization can delete a contact or an athlete record at any time, and a parent can ask for their family's records to be deleted. See your rights and choices.
• When an organization leaves. The organization may request a copy of its data within 30 days of termination. After that we delete the organization's database in the ordinary course.
• Shorter-lived records. Some operational records expire automatically — sign-in history after 90 days and administrative audit records after 30 days, for example.
• What we keep longer. Records of payments, and anything we are required to retain by law or need to resolve a dispute, may be kept after other information is deleted. Backups are rotated on their own schedule, so deleted information can persist briefly in backups before being overwritten.

We take security seriously, and we would rather be accurate than impressive:

• The website and application are served over HTTPS, so traffic is encrypted in transit.
• Data stored in our database and file storage is encrypted at rest by those providers using their standard encryption.
• Passwords are stored only as salted bcrypt hashes — never in a readable form.
• Access is role-based. Coaches see only the teams assigned to them, and parents see only their own athletes. Permissions are re-checked on every request rather than trusted from a stored token.
• Each organization's data is in its own database, as described above.
• Administrative actions are recorded to an audit log, and payment webhooks are signature- verified and replay-protected.

We do not hold a security certification. We are not SOC 2, ISO 27001, or PCI-DSS certified, and we do not claim to be. Card data is handled by Stripe, which maintains its own PCI compliance.

No system is perfectly secure. If you believe an account has been compromised or you have found a vulnerability, email support@orangeslicesport.com and we will respond quickly.

Whoever you are and wherever you live, you can ask us to:

• Access — tell you what information we hold about you or your child.
• Correct — fix information that is wrong or out of date.
• Delete — remove your information, subject to what we must legally keep.
• Export — provide a copy in a commonly used format.
• Opt out of non-essential communications — unsubscribe from campaign email using the link in any message. Transactional notices about a payment or a registration you have made will still be sent.

How to exercise them. Email support@orangeslicesport.com from the address on your account, or call +1 (512) 537-5665. Tell us what you want and which organization you are involved with. We will verify who you are before acting — usually by confirming details already on the record — and will respond within 45 days. There is no charge, and we will not treat you differently for asking.

Because your organization controls its own records, we will often carry out a request together with them. Contacting your organization directly is usually the fastest route for a roster or contact-detail change.

We are based in Texas, and the Texas Data Privacy and Security Act informs how we handle these requests.

Residents of other states may have additional or different rights under their own state's privacy law — including rights to access, correct, delete, obtain a copy of, or opt out of certain processing of their personal information, and to appeal a decision we make about a request.

Rather than guess at which law applies to you, we extend the choices described in your rights and choices to everyone who asks. If you believe you have a right under your state's law that we have not honored, email support@orangeslicesport.com and we will address it.

We do not sell personal information and we do not process it for targeted advertising, so there is nothing to opt out of in those categories.

Here is exactly what is set, and by whom:

• Sign-in. The application stores your sign-in token in your browser's local storage, not in a cookie. It is what keeps you signed in, and clearing your browser data signs you out.
• Preferences. The application stores small preferences locally in your browser — theme, language, and the season you last selected. These stay on your device.
• Google Analytics. This website and the OrangeSlice Sport application use Google Analytics to measure traffic and understand which pages are used. It sets first-party cookies and collects page views, approximate location derived from IP address, and browser and device information. This is the only third-party analytics or tracking technology we use.

There is no advertising, retargeting, or ad-network tracking anywhere in the product. No advertising pixels, no data brokers, no cross-site profiling.

You can block or delete cookies in your browser settings, and Google offers an opt-out browser add-on for Analytics. Blocking cookies does not affect your ability to use the service. We do not currently respond to browser "Do Not Track" signals, as there is no common standard for them.

OrangeSlice Sport is intended for use in the United States. Our infrastructure and the providers we use store and process information in the United States. If you access the service from outside the United States, you understand that your information will be transferred to and processed in the United States, where privacy laws may differ from those where you live.

We may update this policy as the product changes or the law does. When we do, we will update the "last updated" date at the top of this page. For a material change — a new category of information, a new purpose, or a new kind of sharing — we will give notice to organizations by email or in the product before the change takes effect.

Changes take effect on the date stated. Continued use of the service after that date means the updated policy applies.

Privacy questions and requests are handled by our privacy contact at OrangeSlice Sport LLC:

• Email: support@orangeslicesport.com
• Phone: +1 (512) 537-5665

For help with a charge, a refund, or a registration, Support is the faster route.