Privacy Policy
Effective September 4, 2026 · Last updated September 4, 2026
This Privacy Policy explains what personal information Plaibook Technologies, Inc. (“Plaibook”, “we”, “us”) collects through the Plaibook websites and applications (the “Service”), how we use and share it, how long we keep it, and the choices and rights you have. It applies to coaches, club administrators, players, parents and guardians, and visitors to plaibook.soccer. Information about players under 18 is covered here and in our Children’s Privacy Notice.
1. Who is responsible
Plaibook Technologies, Inc. is the controller of information about coaches, administrators, parents and visitors, and of account information for players. For roster and performance information that a Club enters about its players, the Club decides what to collect and share, and Plaibook processes it on the Club’s behalf as a service provider or processor. Where a law gives you rights against a controller, you can exercise them through your Club or directly with us; we will help either way.
2. Information we collect
| Category | Examples | Source |
|---|---|---|
| Account information | Name, email address, password (hashed), role, profile photo, preferences, club membership | You, or the club that invites or creates your login |
| Club and roster information | Player names, ages, jersey numbers, positions, photos, player and parent contact emails, availability, injury and welfare notes, match statistics, ratings, development plans, coaching notes | Coaches and administrators, roster imports |
| Content you create | Training plans, tactical board diagrams, gameday decks, uploaded documents and images, video links, Tekki conversations | You |
| Payment information | Card brand, last four digits, expiry, billing address, invoice history. Full card numbers are handled by Stripe and never reach our servers | You, Stripe |
| Usage and device information | Pages and features used, actions taken, timestamps, IP address, browser and device type, approximate location derived from IP, crash and performance data | Automatically, when you use the Service |
| Communications | Support requests, contact-form submissions, survey answers, email delivery and open events | You, our email provider |
3. How we use information
| Purpose | Legal basis (where GDPR or UK GDPR applies) |
|---|---|
| Provide and operate the Service, including creating clubs, logins, rosters and shared links | Performance of a contract |
| Personalize AI Features (Tekki) with your Club’s context so answers are about your team | Performance of a contract; legitimate interests |
| Process payments, send invoices and receipts, prevent fraud | Performance of a contract; legal obligation |
| Send account, billing, security and portal notifications | Performance of a contract; legitimate interests |
| Send product updates and coaching content by email (you can opt out at any time) | Consent; legitimate interests |
| Secure the Service, detect abuse, enforce our Terms | Legitimate interests; legal obligation |
| Understand how the Service is used and improve it, using aggregated or de-identified data where possible | Legitimate interests |
| Comply with law, respond to lawful requests, establish or defend legal claims | Legal obligation; legitimate interests |
4. AI processing
When you use Tekki or another AI Feature, relevant parts of your Club’s information (for example roster, results, plans, the question you asked and recent conversation) are sent to the AI provider that generates the response. Our providers currently include OpenAI, Anthropic and Google, under terms that prohibit them from using your data to train their models and that require deletion after processing, subject to short abuse-monitoring retention set by the provider. We do not use your Club’s information to train AI models ourselves.
6. Players, parents and share links
A player or parent login shows only the linked player and only the sections the Club has turned on (for example role, stats, ratings, development plan, gameday plan). Share links (for tactics, gameday plans and development plans) open a read-only page for anyone who has the link; treat them like any other link you send. Clubs can revoke a login or link at any time.
7. How long we keep information
| Information | Retention |
|---|---|
| Account and Club information | For as long as the account or Club is active, then deleted or anonymized within 90 days of deletion, except as below |
| Backups | Rolling encrypted backups are retained for up to 35 days after data is deleted from the live system |
| Billing records and invoices | Seven years, to meet tax and accounting obligations |
| Security, access and audit logs | Up to 12 months |
| Support communications | Up to 3 years after the case is closed |
| Tekki conversations | Until you delete them or your account is deleted |
8. Security
We protect information with encryption in transit (TLS) and at rest, role-based access scoped to each Club, row-level database security, hashed passwords, forced password changes for team-provisioned logins, least-privilege access for staff, and monitoring of our providers’ security programmes. No system is completely secure; if we learn of a breach affecting your information we will notify you and any regulator as required by law.
9. International transfers
We are based in the United States and our providers process information there. If you use the Service from the European Economic Area, the United Kingdom, Switzerland or another region with data-transfer rules, your information will be transferred to the United States. Where required we rely on the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, and our providers’ certifications under the EU-US Data Privacy Framework.
10. Your rights and choices
Depending on where you live you may have the right to access, correct, delete, export or restrict the use of your personal information, to object to certain processing, to withdraw consent, and to complain to a supervisory authority. You can update most account information in Settings, delete your account from Settings or by contacting us, and unsubscribe from marketing email using the link in any message. Transactional emails (billing, security, portal notifications) are part of the Service and continue while your account is active.
California residents. Under the CCPA/CPRA you have the right to know what personal information we collect, use and disclose (described above), to delete it, to correct it, to opt out of sale or sharing (we do not sell or share personal information), to limit use of sensitive personal information (we use it only to provide the Service), and not to be discriminated against for exercising these rights. We honour Global Privacy Control signals as an opt-out of sale or sharing. You may use an authorized agent; we will verify the request with you. We do not respond to “Do Not Track” browser signals because there is no common standard for them.
European and UK residents. Our legal bases are listed above. You may lodge a complaint with your local data-protection authority. We do not make decisions with legal or similarly significant effects based solely on automated processing.
To exercise any right, email support@plaibook.soccer from the address on your account. We respond within 30 days (45 days for California requests, extendable once with notice) and may ask for information to verify your identity. Parents and guardians can exercise rights for a child; see our Children’s Privacy Notice.
11. Children
Clubs enter information about players under 18, and sometimes under 13, with the knowledge and consent of the player’s parent or guardian obtained through the club’s own registration. We do not knowingly collect information directly from a child under 13, and a child under 13 may not hold their own login; a parent or guardian holds it. If we learn that we have collected personal information from a child under 13 without appropriate consent, we delete it. Our Children’s Privacy Notice has the full detail.
12. Changes to this policy
We will post any changes here and update the dates above. If a change materially reduces your rights or changes how we use existing information, we will notify you by email or in the Service before it takes effect.
13. Contact
Plaibook Technologies, Inc., a Delaware corporation. Privacy questions and requests: support@plaibook.soccer.