Privacy Policy

This Privacy Policy applies to Upplii's public websites, platform, accounts, support interactions, and services. Clubs and organizations that use Upplii may maintain their own privacy notices and responsibilities for information they collect and control.

Upplii handles some information for its own account administration, billing, support, security, product, website, and business purposes. Clubs and organizations determine many purposes for member, guardian, participant, roster, registration, program, league, and team information.

For organization-controlled records, Upplii generally provides the technology and processes information on the organization's behalf. Requests about organization-controlled records may need to be directed to the applicable organization.

Depending on how Upplii is used, we may collect or process:

• Account, identity, contact, organization, and role information.
• Member, roster, guardian, dependent, household, date-of-birth, and age-eligibility information.
• Registration responses, waivers, acknowledgements, consents, policies, and custom information requested by an organization.
• Team, league, season, program, tournament, schedule, attendance, and participation information.
• Support communications, website forms, files, images, and documents intentionally uploaded.
• Subscription records, transaction records, payment status, payment amounts, currency, processor identifiers, receipt information, fees, refunds, and dispute status.
• Device, browser, log, IP address, security, analytics, usage, cookie, local storage, and similar technical information.

Organizations are responsible for limiting custom fields and uploaded materials to information they are authorized to collect.

Upplii uses Stripe for online payment processing where configured by an organization. Payment-card details are processed by the payment processor rather than stored directly by Upplii. Upplii retains transaction records needed to operate the service, including payment status, amount, currency, processor references, receipt information, fees, refunds, and dispute status.

• Directly from users.
• From clubs and organization administrators.
• From guardians or authorized representatives.
• Through platform activity and support interactions.
• From connected service providers.
• Through cookies, local storage, session storage, logs, and similar technologies.

Upplii uses personal information to:

• Provide, operate, secure, and support the platform.
• Create accounts and enable club and sports-management workflows.
• Process registrations, payments, subscriptions, receipts, and billing records.
• Send service communications and support responses.
• Detect fraud, abuse, security threats, and technical issues.
• Debug, measure, and improve performance and feature usage.
• Meet legal, accounting, regulatory, contractual, dispute, and enforcement obligations.
• Protect users, organizations, Upplii, and the service.

Upplii seeks meaningful consent where required. Organizations, administrators, guardians, and authorized representatives must have appropriate authority when they submit information about another person. Consent may be withdrawn where applicable, subject to legal, contractual, and operational restrictions.

Upplii may process child information when provided by a club, organization, guardian, or authorized adult. The organization and submitting adult are responsible for appropriate authority and notices. Child information should be used only for the applicable activity and related administration. Privacy questions involving a child may require verification through the relevant organization or guardian.

Upplii may disclose information:

• To the organization through which a user participates.
• To authorized organization administrators and personnel.
• To service providers needed to operate Upplii.
• To payment processors.
• Where directed or consented to by the user.
• To comply with legal obligations or investigate security, fraud, or abuse.
• In connection with a legitimate corporate transaction, with appropriate safeguards.
• To protect rights, safety, users, organizations, Upplii, and the service.

Upplii does not sell personal information as a business policy.

Upplii uses service providers to operate the platform, including Vercel for hosting and deployment, Supabase for database, authentication, and storage services, Stripe for payment processing, Resend for transactional email, PostHog for product analytics where configured, and Sentry for error monitoring. Service providers may process information only as needed to provide services to Upplii, comply with law, protect security, or as otherwise permitted by their agreements with Upplii.

Some providers and infrastructure may process or store information outside Canada, including in the United States. Information processed in another country may be subject to that country's laws. Upplii does not publish security-sensitive infrastructure details in this policy.

Upplii uses cookies, local storage, session storage, logs, and similar technologies for essential service operation, authentication, security, workspace selection, preferences, browser return flows, performance, and analytics.

The current implementation includes authentication and workspace cookies, Supabase/Auth session handling, browser storage for pending signup, registration, navigation, and preference flows, Sentry error monitoring when configured, and PostHog product analytics when configured. Upplii does not currently provide an in-app cookie consent centre.

Upplii may send service messages such as account, invite, registration, payment, security, support, and organization workflow communications. Optional promotional communications, if sent, may be unsubscribed from using the included mechanism or by contacting support. Some operational messages may still be necessary to provide the service.

Upplii retains information only as long as reasonably necessary to provide the service, follow organization instructions, meet legal and accounting obligations, maintain security, resolve disputes, enforce agreements, and support operational records. Account closure and deletion may result in deletion, anonymization, restricted access, or retention where required. Organizations may retain records under their own policies.

Upplii uses reasonable administrative, technical, and organizational safeguards designed to protect personal information. No service can be guaranteed to be perfectly secure, and users and organizations are responsible for using appropriate account controls and protecting credentials.

Upplii investigates privacy and security incidents and provides notices where legally required. Not every harmless technical event will result in an individual notice.

You may request access, correction, deletion where applicable, information about Upplii's practices, or withdrawal of consent where applicable by contacting support.upplii@gmail.com. Upplii may need to verify identity before responding. Requests about club-controlled records may be referred to the applicable organization.

Privacy concerns should first be directed to Privacy Contact, Upplii Inc. at support.upplii@gmail.com.

Upplii may update this Privacy Policy from time to time. When changes are material, Upplii will communicate them through reasonable methods and update the effective date.