Legal

Privacy
Policy

Effective August 7, 2026

1. Who we are

Rostrix, LLC. (trading as "ROSTRIX", "we", "us") provides software that helps baseball and softball teams build player cards, manage rosters, schedules, and team budgets. Rostrix, LLC. is the data controller for the personal information described in this notice, meaning we decide what data is collected and why. This policy explains what information we handle and why. Questions? Email hello@rostrix.org.

2. Information we collect

  • Account information — name, email address, password credentials, and account role (player, parent, coach, club manager, admin).
  • Player profile information — provided by you or your team: photo, birthday, age, school, grade, home address, positions, statistics, and other-team affiliations.
  • Parent and player contact details — phone numbers and emails used for team communication.
  • Team information — rosters, schedules, events, RSVPs, budgets, and compliance documents you upload.
  • Community content — blog comments and reviews you choose to post.
  • Technical data — log data, device and browser information, and basic usage analytics needed to operate and secure the service.
  • Billing data — subscription status and plan. Card numbers are handled by our payment processor; we never store full payment card details.

3. How we use information

  • Create and display player and team cards you generate.
  • Operate rosters, schedules, RSVPs, budgets, and compliance tracking.
  • Authenticate users and enforce role-based access.
  • Process subscriptions, discounts, and free-access grants.
  • Respond to support requests and send service-related notices.
  • Detect abuse, prevent fraud, and secure the platform.
We do not sell personal information, and we do not use player data for advertising.

3a. Legal basis for processing

Where data protection law requires a legal basis, we rely on:
  • Performance of a contract — creating your account, generating cards, running rosters, schedules, and budgets, and providing support.
  • Legitimate interests — securing the platform, preventing fraud and abuse, and improving the service.
  • Consent — optional communications and any information an adult chooses to provide about a minor athlete.
  • Legal obligation — tax, accounting, and record-keeping duties, and responding to lawful requests.
You may withdraw consent at any time; this does not affect processing already carried out.

4. Children's privacy

ROSTRIX is used by youth sports organizations, so profiles may describe athletes under 13. Accounts must be created and managed by an adult — a parent, guardian, coach, or club manager — who is responsible for obtaining any consent required before entering a minor's information. Children may not create their own accounts. Sensitive fields such as home address, birthday, school, grade, and parent/player contact details are restricted to team coaches and managers and are never shown on public cards. A parent or guardian may request review, correction, or deletion of their child's information at any time by emailing hello@rostrix.org.

5. Sharing and disclosure

We share information only as needed to run the service:
  • Within your team — coaches and club managers can see roster and contact information for their own teams.
  • Publicly, by your choice — a card you publish or share via link or QR code is viewable by anyone with that link.
  • Service providers / subprocessors — hosting, database, storage, email, and analytics providers acting on our instructions.
  • Merchant of Record (Paddle) — our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders and handles payments, subscription management, invoicing, tax compliance, refunds, and related customer service inquiries. When you buy from us, Paddle collects and processes your billing details as an independent controller under its own privacy notice (paddle.com/legal/privacy); we receive only order status, plan, and limited billing metadata, never full payment card numbers.
  • Professional advisers — legal, accounting, and audit advisers where necessary.
  • Legal — when required by law or to protect rights, safety, and the integrity of the service.
  • Business transfer — as part of a merger, acquisition, or sale of assets, with notice to you.

6. Data retention

We keep information for as long as your account is active and as needed to provide the service. After account deletion we remove or anonymize personal data within 30 days, except where we must retain records for legal, accounting, or dispute-resolution purposes.

7. Security

Data is transmitted over encrypted connections and stored with row-level access controls that restrict records to the users and teams entitled to see them. Uploaded photos and documents are stored in access-controlled buckets. No system is perfectly secure, so please use a strong, unique password and tell us immediately if you suspect unauthorized access.

8. Your rights and choices

You can view and edit your information from your profile page at any time. Depending on where you live, you may also have the right to request access, correction, deletion, a portable copy, or restriction of processing of your personal information. Email hello@rostrix.org and we will respond within 30 days.

9. Cookies and similar technologies

We use strictly necessary cookies and local storage to keep you signed in and remember preferences, plus limited analytics to understand feature usage. We do not run third-party advertising trackers.

10. Changes to this policy

If we make material changes we will update the effective date above and, where appropriate, notify you by email or in the app. Continued use after changes take effect means you accept the updated policy.

11. Contact

Rostrix, LLC. (trading as ROSTRIX) — hello@rostrix.org