1. Introduction
ExCaliburr ("we," "us," or "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our Service. We operate in compliance with applicable Ohio privacy law and follow best practices aligned with the California Consumer Privacy Act (CCPA) and General Data Protection Regulation (GDPR) where applicable.
By using ExCaliburr, you consent to the data practices described in this policy. If you do not agree, please discontinue use of the Service.
2. Information We Collect
Account Information: When you register, we collect:
- Club or organization name
- Email address
- Password (stored in encrypted form — we never store plaintext passwords)
- Subscription plan and billing status
Usage Data: We may automatically collect:
- Browser type and version
- IP address and general geographic location (city/state level)
- Pages visited and features used within the Service
- Date and time of access
- Device type and operating system
Payment Information: Payment processing is handled by Stripe, Inc. We do not store credit card numbers or full payment details on our servers. Stripe's privacy policy governs the handling of your payment data.
3. What We Do NOT Collect
- We do not collect skater names, personal details of skaters, or any information entered into the queue management interface
- We do not sell your personal information to third parties
- We do not use your data for advertising purposes
4. How We Use Your Information
We use the information we collect to:
- Create and manage your account
- Process subscription payments and send receipts
- Provide customer support and respond to inquiries
- Send important service announcements and updates
- Enforce our Terms of Service
- Improve and develop new features of the Service
- Comply with legal obligations under Ohio and federal law
5. Legal Basis for Processing (GDPR)
For users in the European Economic Area, our legal bases for processing personal data include:
- Contract: Processing necessary to fulfill your subscription agreement
- Legitimate Interests: Improving the Service and preventing fraud
- Legal Obligation: Complying with applicable laws
- Consent: Where you have given explicit consent
6. Data Sharing and Disclosure
We do not sell your personal information. We may share your information with:
- Stripe: For payment processing
- Supabase: For authentication and database hosting (data stored on secure US servers)
- Law enforcement: When required by valid legal process, court order, or applicable Ohio or federal law
- Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred with appropriate notice to you
7. Data Retention
We retain your account information for as long as your account is active or as needed to provide the Service. If you cancel your account, we will delete or anonymize your personal data within 90 days, except where retention is required by law (such as financial records, which Ohio law may require us to retain for up to 7 years).
8. Data Security
We implement industry-standard security measures to protect your information, including:
- HTTPS/TLS encryption for all data in transit
- Encrypted password storage (bcrypt hashing)
- Secure third-party infrastructure (Supabase, Vercel)
- Access controls limiting who can access your data
9. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your personal data ("right to be forgotten")
- Portability: Request your data in a portable format
- Objection: Object to processing of your data in certain circumstances
- Withdrawal of Consent: Withdraw consent at any time where processing is based on consent
To exercise any of these rights, contact us at support@calibursolutions.com. We will respond within 30 days.
10. Children's Privacy
The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately and we will delete it. This policy is consistent with the federal Children's Online Privacy Protection Act (COPPA).
Note: While skaters at ice clubs may be minors, the account holder (club administrator) must be 18 or older. Skater names entered into the queue are stored only on the local device and are not transmitted to our servers.
11. Cookies and Tracking
We use minimal cookies necessary for the Service to function, including:
- Authentication cookies: To keep you logged in to your account
- Session cookies: Temporary cookies deleted when you close your browser
We do not use advertising cookies, cross-site tracking, or third-party analytics that share your data. You may disable cookies in your browser settings, but this may affect your ability to use the Service.
12. Third-Party Links
The Service may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any personal information.
13. Ohio-Specific Provisions
ExCaliburr operates in compliance with Ohio law, including:
- Ohio Data Protection Act (ORC § 1354): We maintain a cybersecurity program that reasonably conforms to industry standards
- Ohio Breach Notification Law (ORC § 1349.19): In the event of a data breach affecting Ohio residents, we will notify affected users within 45 days as required by law
- Ohio Consumer Sales Practices Act: We do not engage in unfair or deceptive acts or practices in connection with the Service
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email at least 30 days before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.
15. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy, please contact us:
ExCaliburr
Ohio, United States
Email: support@calibursolutions.com
Response time: within 2 business days