This Privacy Policy describes how MVPLedger™ LLC ("we," "us") collects, uses, and shares information when you use MVPLedger™ (the "Service"). We respect your privacy and only collect what we need to run the Service.

United States only. The Service is offered solely to users located in the United States, and your information is processed and stored in the United States. The Service is not intended for users in the European Economic Area, the United Kingdom, or other jurisdictions outside the United States.

1. Information We Collect

Account info: name, email, password (hashed), and organization role.
Club, roster and operations data you upload: organization, season, program and team records; household and guardian details (names, emails, phone numbers); player records including name and, where your club enters it, date of birth or age used for registration eligibility; roster assignments and history; registration records and the responses to your club's own registration questions; waiver acceptance evidence; RSVP and attendance records; tryout evaluation scores and notes recorded by your club's staff; schedule, facility, communication and document records; and dues, balances, expenses, receipts and audit history.
Payment metadata: amounts, dates, methods, and statuses. We do not collect or store bank account numbers, card numbers, or payment credentials. Payment rails (Venmo, Zelle, CashApp, Stripe) handle that directly.
Bank account data (via Plaid): if your club chooses to link a bank account, we use Plaid to connect to it on a read-only basis. We receive transaction history, account name, and institution name to power reconciliation. We never see or store your bank login credentials — you enter those directly with Plaid — and money never moves through MVPLedger™.
Imported records: if your club's treasurer uploads CSV exports from other platforms (e.g., Venmo, PlayMetrics, TeamSnap, SportsEngine, LeagueApps), we store the transaction details in those files — payer names, emails, amounts, dates, and memo text — as part of your club's books. The treasurer is responsible for having the right to upload this data; we process it only to provide the Service.
Usage data: pages visited, clicks, browser type, IP address, and timestamps, for product analytics and security.
Cookies: a session cookie to keep you signed in, and minimal analytics cookies. See our Cookie Policy.

2. How We Use Information

To provide, maintain, and improve the Service.
To send transactional emails (portal links, dues reminders, monthly statements, password resets, billing receipts).
To detect, prevent, and respond to fraud, abuse, and security incidents.
To comply with legal obligations.

We do not sell your personal information. We do not use Customer Data to train AI models that benefit other customers.

3. Youth Participant Data and Children's Privacy

Accounts are for adults. MVPLedger™ accounts are created and used by adults — organization staff, coaches and parents/guardians. The Service is not directed to children, and we do not knowingly allow a child to create an account or to submit information to us directly.

Clubs do record youth participant information. Because MVPLedger™ is used to run a youth sports organization, your club's authorized adults enter information about youth participants as part of normal operations — for example a player's name, date of birth or age used to check registration eligibility, team and roster assignments, answers to the club's own registration questions, waiver acceptance evidence, RSVP and attendance records, and tryout evaluation scores recorded by staff. This information is entered by the club (or by a parent/guardian on their own household's behalf), is Customer Data belonging to your organization, and is processed by us only to provide the Service to that organization.

Your club's responsibility. The organization decides what it collects and is responsible for having the authority and any parental permission required to collect and use it, and for not entering sensitive information the club does not need. We ask clubs to enter only what their operations genuinely require.

If we learn that information was collected directly from a child under 13 in a manner requiring verifiable parental consent that was not obtained, we will delete it. Parents and guardians may ask their organization, or contact us at support@mvpledger.com, about the information held about their household.

4. Sharing Your Information

We share information only with:

Service providers we use to run MVPLedger™ — cloud hosting, email delivery, AI processing, error monitoring, and payment processing (for our own subscription billing). These providers are contractually bound to keep your data confidential and use it only on our behalf.
Your club: data you upload is visible to authorized roles within your organization (owners and admins, treasurers, registrars, board viewers where permitted, assigned coaches and team staff limited to their own teams, and parents/guardians limited to their own household).
The public: only the data you intentionally surface on a Public Transparency Page.
Law enforcement when required by valid legal process.
In a business transfer: if MVPLedger™ is acquired or merged, your data may transfer, subject to this Policy.

5. Your Rights

You can:

Access and download all your data from Settings → Data Export.
Correct any record directly inside the app.
Permanently delete your organization and all associated data from Settings → Danger Zone.
Request a copy or deletion by emailing support@mvpledger.com.

California residents (CCPA/CPRA): you have the right to know what we collect, request deletion, correct inaccurate information, and opt out of any sale or sharing for cross-context behavioral advertising. We do not sell or share your personal information for cross-context behavioral advertising.

6. Data Retention

We retain your data for as long as your account is active. When you delete your organization, all club-owned data (teams, families, expenses, payments, audit log) is deleted from active systems within 30 days, and from backups within 90 days. We may retain a minimal record (e.g., transaction history) longer where required by law.

Bank connection data: when you unlink a bank account, we revoke the connection with Plaid immediately and delete the stored access credentials. Imported transaction records you've already reconciled remain part of your club's books until you delete them or your organization. We review this retention policy periodically.

7. Security

We use encryption in transit (HTTPS/TLS), encrypted storage at rest, access controls, and audit logging. No system is 100% secure; you are responsible for using a strong unique password and keeping access to your account safe. If we become aware of a breach affecting your data, we will notify you and applicable authorities as required by law.

8. Data Location

The Service is operated in the United States, and your information is processed and stored on infrastructure located in the United States.

9. Changes to This Policy

We will post updates here with a new "Last updated" date and notify you of material changes by email or in-app.

10. Contact Us

Privacy questions or requests: support@mvpledger.com.