Privacy Policy

TaskHockey is hockey team operations software for coaches, general managers, and scouts at junior, college and semi-pro clubs. It is operated by the TaskHockey team in Michigan, USA (“TaskHockey,” “we,” “us”).

This policy explains what information we collect when you use the TaskHockey website and app (the “Service”), why we collect it, who helps us process it, and the choices you have. It should be read together with our Terms of Service.

Account information. Your email address, your name (if you provide it), and a password, which is stored as a secure hash by our authentication provider. We never see your password in plain text.

Team data you enter (“Customer Data”). The team and roster information your staff adds, which can include:

• team name, league, and season;
• player names, positions, statuses, and stats;
• contracts, salaries, and other team finances;
• lineups, trade proposals, and development plans;
• film notes, recruiting notes, and scouting reports.

Trade-sharing details. If you share a trade proposal, we store the recipient name, email address and/or phone number, and message you enter, along with a simple log of when and how the trade was shared.

Billing information. Payments are handled by Stripe. We receive and store a Stripe customer ID, a subscription ID, and your plan and subscription status. We do not receive or store your full card number; Stripe collects that directly.

Technical information. Like most websites, our hosting and database providers automatically record basic request data (such as IP address, browser type, and timestamps) in server logs for security, debugging, and abuse prevention.

We use the information above only to:

• create and secure your account and sign you in;
• provide the Service and show your team’s data back to you;
• process your subscription, free trial, and plan changes;
• send trade proposals when you ask us to;
• send service emails, such as sign-up confirmation and account notices;
• respond to support requests;
• keep the Service secure, prevent abuse, and fix problems; and
• comply with the law.

No ads, and we don’t sell your data. We do not sell or rent personal information, we do not share it for cross-context behavioral advertising, and we do not show ads in the Service. We do not use your Customer Data for any purpose other than providing the Service to you.

We rely on a small number of service providers (“processors”) who handle data on our behalf and only as needed to run the Service:

• Supabase: database and authentication. Stores your account and all Customer Data (Postgres, hosted in the United States).
• Vercel: hosts and serves the website and app, and keeps short-lived request logs.
• Stripe: processes payments, subscriptions, and the customer billing portal. Stripe’s own privacy policy applies to the payment details you give it.
• AI tagging provider (only when you run Film AI tagging): receives still frames taken from the game video you choose, and returns suggested moments. Film can show players who are minors. We send only the frames needed for the run, not your roster or notes.
• Google (Gemini API) (only when you import stats from a screenshot): reads the uploaded image. See Third-party AI processing; Google may use submitted images to improve its services.
• Resend (optional): sends trade-proposal emails when you choose “Send email” from the Service.
• Twilio (optional): sends trade-proposal text messages when you choose “Send text” from the Service.

We may also disclose information if required by law, to protect the rights, safety, or property of our users or others, or as part of a sale or reorganization of the business (in which case this policy will continue to apply to your information).

When you choose to import player stats from a screenshot, the image you upload is sent to Google (Gemini API), which acts as our processor to read the text and numbers in the image and return them to us. We only send the image you select, not your roster, notes, or other account data. Nothing is sent unless you check the acknowledgement box next to the upload.

Google may use submitted images to improve its services. We currently use Google’s free Gemini API tier, under which Google’s terms allow it to use submitted content (and may involve human review) to improve and develop its products. Google’s own terms and privacy policy apply to that use. Do not upload screenshots containing sensitive personal information, such as medical details, home addresses, contact information, or images of minors beyond what is needed to read the stats.

Importing from a team-site link or a CSV file does not use this AI service. If we change AI providers or terms, we will update this section.

When you create a share link for a trade proposal, anyone with the link can view that proposal, without signing in, until you revoke or regenerate the link. The shared page shows only the trade summary (team names, league, the players and assets involved, status, and date). It does not show the rest of your roster, notes, ratings, or other team data.

Only share links with people you trust, and revoke a link when you no longer want it to work.

We use only the cookies needed to keep you signed in (authentication session cookies). We do not use advertising cookies or third-party tracking or analytics cookies. If you block cookies, you won’t be able to sign in.

Stripe may set its own cookies on its checkout and billing pages for fraud prevention, under Stripe’s policies.

We keep your account and Customer Data for as long as your account is open. If you cancel your subscription, your data stays in your account so you can come back, unless you ask us to delete it.

When you ask us to delete your account, we delete your account and Customer Data from our live database within 30 days. Copies may remain in our providers’ routine backups for a limited period until they are overwritten. We may keep limited billing records (for example, invoices held by Stripe) as long as required for tax, accounting, or legal purposes.

You can view and edit your team data in the Service at any time. To request a copy (export) of your data, correction, or deletion of your account and data, email us at support@taskhockey.com from the email address on your account. We will respond within a reasonable time, and in any case within the time required by applicable law.

Depending on where you live, you may have additional privacy rights under local law. We will honor those requests as required. You can manage or cancel your subscription at any time from the billing portal in the Service.

Player information in TaskHockey is entered by team staff, not by the players themselves. The team that enters the data controls it and is responsible for having the right to enter and use it (for example, under team, league, school, or player agreements) and for handling requests from its players. If you are a player and want information about you corrected or removed, please contact your team first. You can also email us at support@taskhockey.com and we will work with the team to address your request.

The Service is intended for adult team staff (coaches, general managers, scouts, and administrators). It is not directed to children, and we do not knowingly allow anyone under 18 to create an account.

Junior-level rosters may include players who are minors (typically 16 or 17 years old). In that case, the team is responsible for having any permission required to enter the player’s information, and should limit what it enters to what is needed for normal team operations. We do not knowingly collect personal information directly from children under 13. If you believe a child’s information has been entered inappropriately, contact us at support@taskhockey.com and we will help remove it.

Game film and clips can show minors. Film you upload stays in your team’s account. If you run AI tagging, frames from that film are sent to our AI tagging provider as described above.

We use reasonable safeguards to protect your information, including encrypted connections (HTTPS), hashed passwords, and database access rules that limit each account to its own team’s data. Access to production systems is limited to what is needed to run and support the Service.

No system is perfectly secure, so we cannot guarantee absolute security. Please use a strong, unique password and tell us right away at support@taskhockey.com if you think your account has been compromised. If a breach affects your personal information, we will notify you as required by law.

TaskHockey is based in the United States, and your information is stored and processed in the United States. If you use the Service from outside the U.S., you understand that your information will be transferred to and processed in the U.S., where data protection laws may differ from those in your country.

We may update this policy from time to time. When we do, we will change the effective date at the top of this page, and for material changes we will notify account holders by email or in the Service before the changes take effect.

Questions or requests about privacy? Email support@taskhockey.com. TaskHockey is operated by the TaskHockey team, Michigan, USA.