Privacy Policy

1. Introduction

Fund My Squad ("we," "us," or "our") operates a fundraising platform for youth sports organizations, teams, and individual athletes. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and related services (collectively, the "Platform").

By using the Platform, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use the Platform.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you create an account, we collect your first name, last name, email address, and password.
• Profile Information: You may provide additional information such as phone number, profile photo, and notification preferences.
• Fundraiser Information: If you create a fundraiser, we collect details about your organization, team, fundraising goals, and campaign descriptions.
• Payment Information: When you make a donation or set up payouts, payment details are collected and processed by our payment processor, Stripe. We do not store your full credit card numbers on our servers.
• Communications: We collect information from your communications with us, including support requests, chat messages, and feedback.
• Contact Lists: If you choose to import contacts for sending invitations, we collect those contact details with your permission.

2.2 Information Collected Automatically

• Device Information: We collect information about the device you use to access the Platform, including device type, operating system, and unique device identifiers.
• Usage Data: We collect information about how you interact with the Platform, including pages visited, features used, and actions taken.
• Location Data: We may collect general location information based on your IP address.
• Cookies and Tracking: We use cookies and similar technologies to enhance your experience and collect analytics data.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Platform
• Process donations and manage fundraising campaigns
• Facilitate payouts to fundraiser organizers via Stripe Connect
• Send transactional emails, SMS messages, and push notifications
• Respond to your inquiries and provide customer support
• Send marketing communications (with your consent)
• Detect, prevent, and address fraud and security issues
• Comply with legal obligations
• Analyze usage patterns to improve user experience
• Generate anonymized, aggregated statistics

4. How We Share Your Information

We may share your information in the following circumstances:

• With Fundraiser Organizers: If you make a donation, we share your name and donation amount with the fundraiser organizer (unless you choose to donate anonymously).
• Service Providers: We share information with third-party vendors who perform services on our behalf, including payment processing (Stripe), email delivery (AWS SES), SMS services (Twilio), and analytics (Firebase).
• Legal Requirements: We may disclose information if required by law, court order, or government request.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
• With Your Consent: We may share information for other purposes with your explicit consent.

We do not sell your personal information to third parties.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit using TLS/HTTPS
• Encryption of sensitive data at rest
• Secure authentication through AWS Cognito
• PCI DSS compliance for payment processing through Stripe
• Regular security assessments and monitoring
• Access controls and audit logging

While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. When determining retention periods, we consider:

• The nature and sensitivity of the information
• Legal and regulatory requirements
• The purposes for which we process the information
• Whether the purposes can be achieved through other means

Donation records and financial transaction data are retained for at least 7 years for tax and legal compliance purposes.

7. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to legal retention requirements.
• Portability: Request a copy of your data in a portable format.
• Opt-Out: Unsubscribe from marketing communications at any time.
• SMS Opt-Out: Reply STOP to any SMS message to opt out of text communications.

To exercise these rights, please contact us at privacy@fundmysquad.com.

8. Children's Privacy

The Platform is designed to support youth sports fundraising, which may involve minors as participants. We take the following measures to protect children's privacy:

• Users under 18 must have a parent or guardian manage their account and provide consent.
• We collect only the minimum information necessary for participation in fundraising activities.
• Parents and guardians can review, modify, or delete their child's information by contacting us.
• We do not knowingly collect personal information from children under 13 without verifiable parental consent.

If you believe we have collected information from a child without proper consent, please contact us immediately.

9. Third-Party Services

The Platform integrates with third-party services that have their own privacy policies:

• Stripe: Payment processing and payout management. Stripe Privacy Policy
• AWS: Cloud infrastructure, authentication, and email services. AWS Privacy Policy
• Firebase: Real-time messaging and push notifications. Firebase Privacy Policy
• Twilio: SMS messaging services. Twilio Privacy Policy

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer data internationally, we implement appropriate safeguards to protect your information.

11. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected and how it is used
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your privacy rights

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at: