Privacy Policy

1. Who this applies to

CommishFlow ("we," "us") operates a web application for managing fantasy sports leagues. This policy covers two kinds of users:

• Commissioners — the person who creates and administers a league. Commissioners may sign up with an email and password, sign in with Google, or run a league anonymously with just a private link and password (no account).
• Members — people invited to join a league. Members never create an account; they provide a name and email to join and to return to their dues/vote pages later.

2. What we collect

We collect only what's needed to run the app:

• Account info (commissioners with an account): name, email, and a securely hashed password, via our authentication provider. If you sign in with Google, we receive your name and email from Google.
• Anonymous commissioner info: a league password (hashed, never stored in plain text) and a private access link. No email is required to run a league this way.
• Member info: name and email, provided when joining a league or when a commissioner adds you manually. This is used solely to identify you within that league (e.g. tracking dues status, draft-time votes) and to let you return to your member page later.
• League content: league name, sport, dues amount, draft times, payment method labels (e.g. "Venmo"), and similar league-configuration data entered by the commissioner.
• Usage analytics: we use a third-party analytics provider to understand how the app is used — which pages are visited and actions like signing up, joining a league, marking dues paid, or casting a draft vote. This includes standard analytics data such as approximate location (derived from IP address), device and browser type, and pages viewed. We do not currently show a cookie-consent banner; by using the site you're accepting this tracking as described here.

3. What we don't collect

• We never process or store payment information. Dues payments happen directly between members and commissioners through third-party services members and commissioners choose themselves (e.g. Venmo, PayPal). CommishFlow only displays the payment handle a commissioner enters and lets a commissioner mark a payment as received — no money, card numbers, or bank details ever pass through our systems.
• We don't sell your personal information to anyone.
• We don't use your data to send marketing email — reminder and notification emails are transactional (dues reminders, task-completion alerts a commissioner opts into) and directly tied to actions you or your league's commissioner take.

4. Who we share data with

We use a small number of service providers to run CommishFlow, each of which processes data on our behalf:

• Database and authentication provider — hosts our database and handles account sign-in.
• Analytics provider — usage analytics, as described above.
• Email delivery provider — delivers transactional emails (dues reminders, task-completion notifications). Your email address is shared with this provider solely to deliver these messages.
• Hosting provider — hosts the CommishFlow website.

We do not share your information with any other third party except as required by law.

5. How long we keep data

We retain league and member data for as long as the league exists in our system. A commissioner can delete a league at any time, which removes its associated data. If you'd like your personal information removed sooner, contact us using the details below.

6. Your choices

• Members can decline to provide dues/vote information beyond what's needed to join — though this may limit what a commissioner can track on your behalf.
• You can ask us to access, correct, or delete your personal information at any time by emailing us.
• Commissioners can delete an entire league (and its member data) from league Settings.

7. Children's privacy

CommishFlow is not directed at children under 13, and we do not knowingly collect personal information from anyone under 13.

8. Changes to this policy

We may update this policy as CommishFlow changes. We'll update the "Last updated" date above when we do. Continued use of CommishFlow after a change means you accept the updated policy.

9. Contact us

Questions about this policy or your data? Email us at privacy@commishflow.com.