Privacy Policy

SportGraphics is an independent software service. In this policy, “SportGraphics”, “we” and “us” mean the operator of the Service. Our Privacy Officer is responsible for this policy and can be reached at sportgraphics.outreach@gmail.com.

This Privacy Policy applies to SportGraphics websites, applications, accounts, billing flows, rendering tools, AI-assisted tools, storage features, support communications, and related services.

SportGraphics is responsible for the personal information we collect and determine how to use. If you use SportGraphics on behalf of a club, school, company, league, agency, or other organization, that organization may also be responsible for how it collects and uses personal information through the Service.

We may collect the following categories of information:

• Account information: name, email address, authentication identifiers, login provider details, account status, subscription tier, and settings.
• Club and roster information: club names, crests, colors, opponent names, match details, player names, numbers, positions, captain status, and other team metadata.
• Images and creative content: uploaded player photos, player likenesses, crests, backgrounds, reference designs, prompts, generated images, rendered exports, animation outputs, and other media you provide or create.
• Billing information: subscription plan, Stripe customer identifiers, checkout status, billing portal activity, payment status, invoice metadata, and limited payment details provided by our payment processor. We do not store full payment card numbers.
• Device and usage information: IP address, browser type, device information, pages viewed, feature usage, event logs, error logs, performance information, referring pages, and approximate location derived from IP address.
• Local storage data: roster, team configuration, cached image references, preferences, and related application state stored in your browser through local storage, IndexedDB, cookies, or similar technologies.
• Support communications: messages, feedback, bug reports, survey responses, and related contact details.

We collect information directly from you, from your organization, from other users authorized by your organization, from your browser or device, from authentication providers such as Google, from payment processors such as Stripe, and from service providers that help us operate the Service.

We use personal information to:

• provide, maintain, secure, and improve the Service;
• create, save, render, export, and manage graphics and videos;
• process uploaded media, remove backgrounds, generate images, analyze reference designs, and provide AI-assisted features you request;
• authenticate users, manage accounts, and prevent unauthorized access;
• process subscriptions, invoices, taxes, payments, and billing support;
• enforce plan limits, quotas, watermarks, and feature access;
• respond to support requests and communicate about the Service;
• detect, prevent, and investigate fraud, abuse, security incidents, and policy violations;
• debug errors, measure performance, and understand feature adoption;
• comply with legal, accounting, tax, and regulatory obligations; and
• protect the rights, safety, and property of SportGraphics, users, clubs, players, and others.

Where laws such as the GDPR or UK GDPR require a legal basis, we rely on one or more of the following: performance of a contract, legitimate interests, consent, compliance with legal obligations, and protection of vital interests where applicable.

Our legitimate interests include operating and securing the Service, improving features, preventing abuse, supporting customers, and developing a sustainable SaaS business, balanced against your rights and expectations.

We may disclose personal information to the following categories of recipients:

• Service providers: hosting, database, storage, authentication, security, analytics, email, rendering, image processing, AI, payment, billing, and support providers. Our main providers are Vercel (hosting), Supabase (database and sign-in), Amazon Web Services (file storage and video rendering), Stripe (payments), fal.ai (AI processing, see section 7), Google (sign-in with Google, Google Analytics and Google Fonts), Calendly (demo scheduling) and Resend (sending our emails).
• Payment processors: Stripe and related financial providers to process subscriptions, invoices, refunds, taxes, fraud checks, and billing portal activity.
• AI and media processing providers: providers that process images, prompts, reference designs, and generated outputs only as needed to perform requested features.
• Your organization and authorized users: if your account is used for a club or organization, content and account activity may be visible to authorized users or administrators.
• Legal and safety recipients: courts, regulators, law enforcement, professional advisers, or others where disclosure is required by law or reasonably necessary to protect rights, safety, and security.
• Business transaction parties: potential or actual buyers, investors, lenders, advisers, or successors in connection with a merger, acquisition, financing, restructuring, or sale of assets.

We do not sell personal information in the ordinary meaning of the word. We do not knowingly share personal information for cross-context behavioral advertising as that term is used under California privacy law.

Some features send images and text to third-party AI providers so they can perform the task you asked for. The in-app features run through fal.ai, which hosts the models:

• Background removal (every plan): each player photo you add is sent to fal.ai automatically to cut out the background.
• AI poses (Pro): the player’s photos and your pose description are sent to Google’s Gemini image model.
• AI backgrounds (Pro): your prompt, club name, colours and crest are sent to OpenAI’s image model.
• Design requests: when we build a design from a reference you send us, the reference image and related club details may be analysed with AI tools, including Anthropic’s Claude and OpenAI’s image models.

We don’t use your uploads to train AI models. The providers process the data to return the result, under their own terms and privacy commitments.

Only upload photos you have the rights and permissions to use. For a player under 18, that means permission from their parent or guardian. We ask you to confirm this before your first player photo upload.

We use these technologies:

• Essential: cookies that keep you signed in, remember your cookie choice and region, and local storage and IndexedDB that cache your roster, team settings and media so the app works. These are always on.
• Analytics: Google Analytics 4, loaded through Google Tag Manager, to understand how the Service is used. In the UK, the EEA, Switzerland and Brazil it only runs after you accept it in our cookie banner. Elsewhere it runs by default, and you can turn it off at any time. We also honour the Global Privacy Control browser signal.
• Cookieless measurement: Vercel Web Analytics and Speed Insights count visits and measure page performance without cookies.
• Campaign tags: if you arrive from a link with campaign tags, we keep them in your browser and add them to your account if you sign up, so we know which campaigns work.
• Third-party content: the design studio loads fonts from Google Fonts, and our demo page embeds the Calendly scheduler, which shows its own cookie banner.

You can change your analytics choice at any time: Cookie settings. You can also block cookies in your browser, but blocking essential cookies or local storage will stop parts of the Service from working.

We retain personal information for as long as reasonably necessary to provide the Service, maintain your account, comply with legal obligations, resolve disputes, enforce agreements, prevent fraud, maintain backups, and support legitimate business needs.

Some browser-local data remains on your device until you clear it or the application removes it. Deleted account or content data may remain in backups, logs, or archives for a limited period unless earlier deletion is required by law and technically feasible.

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. These measures may include authentication controls, access controls, encrypted transport, provider security features, monitoring, and backup practices.

No service can be guaranteed completely secure. You are responsible for using a strong password, protecting your login credentials, and controlling access to your account and devices.

Our service providers store and process personal information mainly in the United States, and we and they may also access it from other countries. These countries may have privacy laws that differ from those where you live.

Where required, we use appropriate safeguards for international transfers, such as contracts or other lawful transfer mechanisms.

Depending on where you live, you may have rights to access, correct, delete, export, restrict, object to, or withdraw consent for certain processing of personal information. You may also have the right to lodge a complaint with a privacy regulator.

You can update some account, roster, and team information inside the Service. To make a privacy request, email sportgraphics.outreach@gmail.com. This includes parents, guardians and players whose details or photos were added by a club. We may need to verify your identity before fulfilling a request. We may refuse, limit, or delay a request where permitted by law, such as where we must retain information for legal, security, billing, or fraud-prevention reasons.

If you’re unhappy with how we’ve handled your information, email us first. We’ll acknowledge your complaint within 30 days and tell you what we’ve done about it. You can also complain to the privacy regulator where you live.

Some U.S. state privacy laws provide rights to know, access, correct, delete, obtain a portable copy, opt out of certain processing, and appeal a denied request. We do not knowingly sell personal information or share it for cross-context behavioral advertising.

We also do not knowingly use sensitive personal information to infer characteristics about you except as necessary to provide requested features, secure the Service, or comply with law.

The Service is not directed to children under 13, and we do not knowingly collect personal information directly from children under 13. If you believe a child under 13 has provided personal information directly to us, contact us and we will take appropriate steps.

The Service may be used by adults to create graphics involving youth teams or minor players. If you upload or process a minor's name, image, likeness, or roster details, you are responsible for obtaining all required parental, guardian, club, school, league, or legal consent.

We may send service, account, billing, security, and administrative messages, such as notices about changes to these policies. We send marketing emails only where the law allows it, for example with your consent. You can opt out of marketing emails at any time with the unsubscribe link in each email or by contacting us. Even if you opt out of marketing messages, we may still send non-marketing messages related to your account or the Service. We send emails through Resend and don’t track whether you open them or which links you click.

The Service may link to third-party websites or integrate with third-party services. Their privacy practices are governed by their own policies, not this Privacy Policy.

We may update this Privacy Policy from time to time. If changes are material, we will take reasonable steps to notify you, such as by posting the updated policy, updating the date above, or providing in-app or email notice. Your continued use of the Service after an update means the updated policy applies to future processing.

Questions or requests about this Privacy Policy go to our Privacy Officer at sportgraphics.outreach@gmail.com.