Legal

Privacy Policy

Last updated: June 10, 2026

This Privacy Policy explains how ChooseASquare (“ChooseASquare,” “we,” “us,” or “our”) collects, uses, and shares information when you visit our website, create an account, run a fundraiser, or participate in a contest (collectively, the “Services”). ChooseASquare is operated by [TODO: legal entity name], located at [TODO: business address].

ChooseASquare is a platform that lets organizations run fundraising “squares” games and similar contests (such as Super Bowl Squares, playoff/series squares, calendar fundraisers, and recurring number-club raffles). We never take a cut of your fundraiser and we never hold or process the money exchanged between participants and organizers — supporters pay organizers directly (for example, by Venmo, PayPal, check, or cash). We do use a third-party payment processor (Stripe) to bill organizers for their paid subscription plans.

1. Information we collect

Information you provide

Account information: name, email address, password (stored hashed by our authentication provider), and optional profile photo. If you sign in with Google, we receive basic profile information from Google.
Organization information: organization name, a public URL slug, branding (logo, colors, banner), and the payment handles you choose to display to your supporters (e.g., Venmo/PayPal usernames, check or cash instructions).
Contest & participation data: contests and grids you create, squares or dates claimed, participant display names and (optionally) emails, payment-status notes you record, and rosters/contact lists you save.
Subscription & billing information: when an organizer purchases a paid plan or add-on, our payment processor (Stripe) collects and processes payment-card details. We do not store full card numbers; we store a customer reference, the plan/add-on purchased, billing interval, and subscription status.
Communications: messages you send to support and feedback you submit.

Information collected automatically

Usage & device data: pages viewed, actions taken, approximate location derived from IP address, browser type, and device information.
Cookies & similar technologies: we use cookies and local storage that are necessary to keep you signed in and to remember your preferences. [TODO: confirm whether any analytics or marketing cookies are used, and add a cookie banner/consent mechanism if required in your markets.]

2. How we use information

Provide, operate, and maintain the Services (create accounts, run contests, draw numbers, calculate winners, display results).
Process organizer subscription payments and manage plans, add-ons, renewals, and cancellations.
Communicate with you about your account, transactions, security, and support requests.
Personalize and improve the Services, including troubleshooting and analytics.
Protect the Services, prevent fraud and abuse, and enforce our Terms.
Comply with legal obligations.

We rely on the following legal bases where applicable: performance of a contract, our legitimate interests, your consent, and compliance with law. [TODO: confirm GDPR/UK-GDPR and US state-law applicability and update bases accordingly.]

3. How we share information

We do not sell your personal information. We share information only as described here:

With organizers and participants: contest information is shared between the organizer running a contest and the participants in it (for example, an organizer can see who claimed which squares and any payment notes; participants can see the contest board and results).
Service providers: we use trusted vendors to run the Services, including Supabase (database, authentication, file storage), Stripe (organizer subscription payments), Google (optional sign-in), our hosting/CDN provider [TODO: e.g., Vercel], and a sports-data provider used to populate teams and schedules [TODO: name the provider]. These providers process data on our behalf under their own terms and privacy policies.
Legal & safety: we may disclose information to comply with law, respond to lawful requests, or protect the rights, property, or safety of ChooseASquare, our users, or the public.
Business transfers: in connection with a merger, acquisition, financing, or sale of assets, information may be transferred as a business asset.

4. Payments & money

ChooseASquare does not collect, hold, escrow, or transmit the funds exchanged between participants and organizers. Those payments are made directly between supporters and organizers using the methods the organizer chooses. We are not a party to those transactions and are not responsible for them. Organizer subscription payments to ChooseASquare are processed by Stripe; please review Stripe’s privacy policy for how it handles payment data.

5. Data retention

We retain information for as long as your account is active and as needed to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. You can request deletion of your account as described below. Some information may persist in backups for a limited period and where retention is required by law. [TODO: define specific retention periods.]

6. Security

We use administrative, technical, and organizational measures designed to protect your information, including encryption in transit, row-level access controls in our database, and access restrictions. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

7. Your rights & choices

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent. You can update much of your profile information in your account settings, or contact us to exercise your rights. We will not discriminate against you for exercising these rights.

[TODO: add California (CPRA), Virginia/Colorado/etc., and EU/UK specific disclosures and a “Do Not Sell or Share” statement as applicable. We currently do not sell personal information.]

8. Children’s privacy

The Services are intended for organizers who are adults. We do not knowingly collect personal information from children under[TODO: 13 / 16 — confirm threshold]. Participants in a fundraiser may include minors who claim squares through an organizer; organizers are responsible for obtaining any necessary parental consent and for complying with applicable laws. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

9. International users

We operate in the United States and our service providers may process data in the United States and other countries. If you access the Services from outside the United States, you understand your information may be transferred to and processed in the United States. [TODO: add an international data-transfer mechanism (e.g., SCCs) if you serve EU/UK users.]

10. Third-party links

The Services may link to third-party sites and services (such as payment apps). We are not responsible for the privacy practices of those third parties.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version with a new “Last updated” date and, where required, provide additional notice.

12. Contact us

Questions about this Privacy Policy or your information? Reach us through our contact form [TODO: add a dedicated privacy contact email before launch] or by mail at [TODO: business mailing address].