Privacy Policy

Montclair Sports LLC ("Montclair Sports," "we," "us," or "our") operates montclairsports.io, the m. Pro Shop, Deuce Golf, Gravy Basketball, coaching dashboards, communications tools, and related websites, applications, products, and services (collectively, the "Services").

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when people browse our site, shop as guests, create accounts, join team workspaces, submit lead forms, communicate with us, or use our athletic-development tools.

For account, commerce, marketing, support, security, analytics, and direct customer relationships, Montclair Sports generally acts as a controller or business under applicable privacy laws.

When a school, club, team, academy, coach, athletic director, or other organization uploads or manages athlete, roster, training, communications, or program data through the Services, we may process that information on behalf of the organization under our agreement with them. In those cases, the organization may be the primary controller or business for that data.

Depending on how you use the Services, we may collect:

• Account and identity data, including name, email, password hash, OAuth identifiers from Google or Apple, role, organization, profile details, and authentication logs.
• Commerce data, including cart contents, order history, shipping address, billing contact details, phone number, payment status, refunds, fraud signals, fulfillment updates, and customer-service notes. We do not store full payment-card numbers on our servers.
• Athlete, team, and performance data, including roster information, program membership, practice logs, skill-development notes, training plans, activity data, communications, and analytics submitted by users or organizations.
• Lead, support, and communications data, including messages, preferences, consent records, survey responses, and support requests.
• Device, usage, and security data, including IP address, device and browser type, pages viewed, referring URLs, approximate location inferred from IP, cookies or similar identifiers, diagnostics, and event logs.
• Content you submit, including files, notes, comments, images, or other materials you choose to provide through the Services.

We collect information directly from you, from organizations or users who invite or manage you, from your use of the Services, from payment, authentication, hosting, analytics, and fulfillment providers, and from public or commercially available sources where permitted.

We use personal information to:

• Provide, operate, personalize, secure, troubleshoot, and improve the Services.
• Authenticate users, create accounts, manage roles and permissions, and enforce access controls.
• Process Pro Shop orders, guest checkout, payment status, tax, shipping, returns, refunds, fraud prevention, and customer support.
• Support coaches, teams, athletic directors, programs, guardians, and athletes with training, communications, analytics, and program workflows.
• Respond to inquiries, send transactional messages, provide service notices, and deliver support.
• Send marketing or product communications where permitted, with opt-out choices where required.
• Detect, investigate, and prevent security incidents, fraud, misuse, and illegal activity.
• Comply with law, enforce agreements, defend legal claims, and protect the rights, safety, and integrity of users, organizations, Montclair Sports, and others.

Where GDPR, UK GDPR, or similar laws apply, we rely on contract performance for accounts, orders, and requested Services; legitimate interests for security, product improvement, analytics, fraud prevention, and support; consent for optional marketing, cookies where required, and certain communications; and legal obligation for tax, accounting, compliance, and dispute handling.

We may share information with:

• Service providers and processors that host, secure, authenticate, analyze, support, deliver, fulfill, or maintain the Services, including providers such as Supabase, Vercel, Stripe, email services, analytics tools, and fulfillment or shipping partners.
• Organizations and authorized users in your workspace, such as coaches, athletic directors, team administrators, guardians, or teammates, according to permissions and product features.
• Payment, fraud, tax, app-store, OAuth, and checkout providers as needed to process transactions or authentication.
• Legal, safety, and compliance recipients when required by law, subpoena, court order, regulator request, or to protect rights, safety, property, users, or the Services.
• Business transaction recipients if we are involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, subject to appropriate safeguards.

We do not sell personal information for money. We do not knowingly sell or share personal information of minors. If we use advertising or analytics technologies that are considered a sale, sharing, or targeted advertising under applicable law, we will provide legally required opt-out controls.

We use cookies and similar technologies to keep users signed in, remember cart and session state, secure the Services, understand usage, measure performance, and improve reliability. Browser controls may allow you to block or delete cookies, but some Services may not work properly without required cookies.

We retain personal information for as long as needed to provide the Services, maintain accounts, process orders, comply with legal and accounting obligations, resolve disputes, enforce agreements, protect security, and maintain appropriate business records.

Commerce records are generally retained for tax, accounting, fraud, and order-support purposes. Workspace and athlete data retention may also depend on the organization that controls the workspace, our agreement with that organization, and applicable law.

We use technical and organizational safeguards designed to protect personal information, including encryption in transit, role-based access, least-privilege practices, managed hosting providers, monitoring, and security review. No system is perfectly secure, so users should use strong, unique passwords and report suspected issues promptly.

The Services are not directed to children under 13 for direct self-registration. Schools, clubs, teams, guardians, coaches, and other program administrators are responsible for obtaining required permissions before submitting information about minors or students.

Because our Services may involve athlete and roster data, organizations should use the Services consistently with applicable student privacy, youth sports, consent, safeguarding, and organizational policies. We will support lawful deletion, access, and correction requests as required and as permitted by our contracts.

Depending on your location, you may have rights to access, correct, delete, port, restrict, or object to certain processing of your personal information; withdraw consent; opt out of sale, sharing, targeted advertising, or certain profiling; and appeal a privacy decision.

To exercise privacy rights, email legal@montclairsports.io. We may need to verify your identity and may direct organization-controlled workspace requests to the relevant school, club, team, or program administrator.

Montclair Sports is based in the United States. If you access the Services from outside the United States, your information may be processed in the United States and other countries that may have different data-protection laws. Where required, we use appropriate safeguards for international transfers.

We may update this Privacy Policy from time to time. When we do, we will post the updated policy with a new effective date and provide additional notice where required by law.

Montclair Sports LLC

Email: legal@montclairsports.io