How we collect, use, and protect your data

What we collect

When you create an account: your name, email, mobile number, and city/state. If you set up an Athlete Hub: whatever bio, stats, photos, recruiting details, and social links you choose to add. If you set up a Team: your organization's legal name, EIN, and contact details. If you're a brand contacting an athlete: your name, email, and brand information. If you use workout logging: the exercises, weights, reps, and other training data you choose to log. If you optionally add a photo to a logged workout: that photo, used only to generate a workout graphic for you to download or share, and not shown anywhere on your public Hub.

If you contact us, whether through our Contact page, a camp partnership request, or an account deletion request: your name, email, and the details of your message. You don't need an account to submit any of these.

If you give to an athlete through their Hub and ask them for a thank-you: your first name, email, and any message you choose to include. We use your email only to send that thank-you on the athlete's behalf, and the athlete does not see it unless you also choose to join their Fan Club. We delete it about a week after the thank-you is sent or declined, or after 30 days if it's never answered. Payments themselves happen off FundraisHER, and we don't track, process, or receive them.

We don't collect or store your payment card details directly. Subscription payments are handled entirely by Stripe.

If you turn on push notifications, your device or browser generates a subscription (an address and encryption keys used only to deliver a notification to that specific device) that we store so we can send it. Turning push off, or signing out and clearing that device's site data, removes it.

We also automatically collect some basic technical data as you browse, like which pages are viewed and when. This includes a real-time, anonymous indicator of which pages are currently active, visible only to platform admins as an aggregate count, not tied to your name or account.

When you sign a brand partnership contract through the Partnership Hub, we also record your IP address, device/ browser information, and a timestamp, alongside the agreement itself. This is part of maintaining a real, legally defensible signature record for both sides, not general tracking, and it's only collected at the moment you sign.

Minors and children's privacy (COPPA)

The account holder managing an athlete's Hub must be 18 or older, even when the athlete herself is a minor. For an athlete under the age of 13, the account must be created, owned, and exclusively maintained by her parent or legal guardian; a child under 13 cannot open or manage an account on her own.

The Children's Online Privacy Protection Act (COPPA) governs the online collection of personal information directly from children under 13. Because it's the parent or guardian, not the child, who creates the account and enters her details (name, sport, photo, bio, and similar information), COPPA's direct-collection requirements don't apply in the same way they would if a child were submitting that information herself. We still require that an under-13 athlete's account be exclusively adult-managed as a matter of platform policy, not just legal minimum, and the managing adult is solely responsible for what's entered and displayed.

Under COPPA, "personal information" includes a child's full name, photo or video, voice, school, and precise geolocation. Any information entered on a minor athlete's Hub, information of this kind included, is entered entirely at the account holder's discretion. We don't independently verify or moderate what's shared, so we rely on account holders to only share information they're comfortable being public.

Uploaded photos have their embedded location data (EXIF GPS metadata) automatically stripped on upload, regardless of who's uploading them.

FundraisHER doesn't offer public comments or direct messaging on any Hub, athlete or otherwise. All communication happens through links an athlete or her account holder chooses to share (for example, a contact form, social profile, or email address), not through anything built into the platform itself.

A parent or legal guardian can request permanent deletion of a minor athlete's profile, photos, and public footprint at any time; see "Account closure and data retention" below.

Parental control and profile privacy

Because this Athlete Hub may display personal information of a minor, account management must remain under adult supervision. As the managing parent or guardian, you retain full control over this profile at all times. You can edit visible information, set this Hub to private, or permanently delete the athlete profile and all associated media directly from your Account Settings or by emailing hey@fundraisher.com.

How we use it

To operate your account and the features you use: displaying your Hub, processing your subscription, sending you notifications and reminders you've opted into, and generating Social Media Captions from your activity when that feature is enabled. We also use aggregate browsing data to monitor site performance, catch and fix errors, and understand how the platform is being used. We don't sell your personal information.

Who we share it with

We use a small set of service providers to run the platform: Supabase (database and file storage), Stripe (payments), Resend (email delivery), Cloudflare (video hosting), OpenAI (generating Social Media Captions), Vercel (hosting and privacy-friendly, cookieless site analytics), and Sentry (error and performance monitoring, so we can catch and fix problems). If you enable push notifications, delivering them also means passing the notification's content through your browser or device maker's own push service (for example, Apple's or Google's), the same as any other site or app that sends you a push notification. Each only receives what it needs to do its job. We don't sell or share your data beyond what's needed to operate the service.

Cookies

We use a small number of cookies, all functional rather than for tracking or advertising: one to keep you signed in, and one that temporarily remembers a team's invite code while you finish creating your account, so you don't have to re-enter it. We don't use analytics or advertising cookies. If you view a highlight video on a Hub, that video is embedded from Cloudflare Stream and may set its own cookies as part of playback.

Public visibility

Your Athlete Hub is only reachable through a link you share yourself. There's no public search or directory anywhere on the platform. By default, your Hub also isn't indexed by search engines like Google; you can choose to turn that on in your Hub Builder settings if you want it discoverable that way. You can also set a password on your Hub for an additional layer of privacy; with a password set, visitors need it to view anything on your Hub at all.

Your choices

You can update most of your information directly in your account and Hub Builder settings. You can control which sections of your Hub are public, opt in or out of email and push notifications (and which categories of each you want to hear about), and control search engine visibility and password protection, all from your own dashboard.

Account closure and data retention

You can request account closure or permanent deletion of your data at any time through your account settings. Requests are reviewed and approved manually, not instantly, but once approved, the deletion itself is carried out in full: your profile, stats, media, and everything else you exclusively own is permanently erased from our production systems and file storage, consistent with your right to erasure under applicable law (including GDPR Article 17), typically within one month of your request.

A few categories are handled differently, as the law allows. Basic browsing analytics tied to your activity are anonymized rather than deleted outright, so aggregate, non-identifiable statistics (like total link clicks across the platform) can still be kept. Records of an executed brand partnership contract are a two-party agreement, not yours alone to erase, and may be retained to defend against a future dispute, the same as the minimal record that proves your deletion request was honored. If you were synced to a team, the team's own data is never deleted as part of your request, only your personal link to it. Backups aren't rewritten the instant a request is processed; they age out naturally on our normal retention schedule, and a record of deleted accounts is kept so that restoring an old backup can't undo a deletion.

One exception applies regardless: your username isn't released back for someone else to claim, even after deletion. It's not personal data on its own, and keeping it retired prevents someone else from later claiming a URL you may have already shared.

Changes to this policy

We may update this policy as the platform evolves. Material changes will be reflected here with an updated date.

Contact

Questions about your data or this policy? Reach out through our Contact page.