Privacy Policy

Who we are

Matchup is operated by Building 13 LLC, a limited liability company based in Dayton, Ohio. References to "we," "us," and "Matchup" in this policy refer to Building 13 LLC.

What we collect

We collect account and authentication information: name, email address, account and provider identifiers, password hashes for password accounts, and sign-in and consent records. Optional profile information can include a photo, phone number, city or area, sports interests, and other details you submit. Apple, Google, and Facebook sign-in provide identity information according to the provider and permissions; we do not receive your provider password. Available providers differ between native and web.

We process team and roster membership, invitations, schedules, availability, match results, messages, uploaded content, reports, blocks, and support correspondence. Content is visible to its intended recipients and authorized operators; some profiles, teams, and results may be public according to their visibility settings. Safety staff may review reported private messages.

For payments, Stripe handles card entry and processing. Matchup receives and stores order, payment, purchase, subscription, refund, and entitlement records, Stripe identifiers, and limited payment-method information where provided. Raw card numbers and security codes entered in Stripe's payment flow do not pass through Matchup's servers.

Notifications use your email, optional phone number and preferences, and account-linked web-push subscriptions or native device tokens and platform. We send notification content and delivery metadata to delivery providers. Native iOS uses Apple Push Notification service; Android uses Firebase Cloud Messaging. A browser push subscription differs from a native device token.

We collect usage and diagnostic information to understand features and fix problems: product events, page and navigation activity, device/browser and network information, errors, and performance timings. First-party navigation timing uses a pseudonymous account hash and is account-linkable. Plausible processes visits and product events, including approximate location derived from IP; Sentry and Laravel Nightwatch process error and performance diagnostics. Discover uses your home or joined venue, or a default area, to rank nearby activity. We do not send your IP address to a geolocation service for discovery or request device location access. Pseudonymous data is not necessarily anonymous. Provider payloads can include technical request information.

Before you create an account, a Team captain, League or Venue organizer, Organization operator, referee coordinator, or another authorized Matchup member may provide your name, email address, or roster details so they can invite you to a relevant Team, League, Venue, Organization, or officiating role. We process that information to address and deliver the invitation, show you what it concerns, prevent duplicate or abusive invitations, and connect your response to the correct account and role.

Invitation records and visibility

We record invitation lifecycle information such as who initiated an invitation, its intended Team, League, Venue, Organization, or role, when it was created or resent, delivery success or failure, expiration, revocation, and whether the recipient accepted or declined. Invitation links are protected as credentials; our lifecycle history stores protected fingerprints rather than plaintext copies of active links.

The sender and authorized operators for the relevant Team, League, Venue, or Organization may see the recipient information needed to manage the invitation and its current status. Matchup personnel and contractors may access invitation records when reasonably necessary for support, security, abuse prevention, delivery troubleshooting, or legal compliance. Invitation status is not made public.

How we use it

We use your information to operate Matchup — creating your account, managing your team and league participation, sending match reminders and score notifications, and displaying your profile to other players in your leagues.

We do not sell your personal information or use advertising pixels for cross-service targeted advertising. We use product analytics and first-party campaign attribution to understand how people find and use Matchup.

Third-party services

Matchup uses the following third-party services to operate:

• Apple and Google sign-in, including native sign-in SDKs — authentication; providers may also process technical and security information under their own policies
• Facebook Login — sign-in
• Twilio — SMS notifications
• Amazon Web Services Simple Email Service (SES) and Postmark — email delivery
• Apple Push Notification service and Firebase Cloud Messaging — push-notification delivery
• Stripe — payment processing and billing
• Google Maps Platform — venue lookup, venue locations, time zones, and weather forecasts; use is subject to the Google Privacy Policy
• Sentry — error and performance diagnostics
• Plausible — website and product analytics
• Laravel Nightwatch — operational diagnostics
• Anthropic and configured AI providers — AI-assisted chat, scheduling, and import features; submitted text, images, and relevant application context are sent for processing

We also use hosting, storage, search, and operational service providers. Authorized personnel and contractors access information as needed for support, security, and operation. Providers process the data needed for their services; some also have independent security or legal purposes under their own privacy policies. We may disclose information where required by law or necessary to protect people and the service.

Marsha, our AI helper

We ask for your permission before you first use Marsha. When you ask her something, we send your message, earlier messages in your conversation with her, and information that helps her answer, such as your name, teams, schedule, connected venues and Team Finder status, to Anthropic to generate a reply. We never send your email address or phone number. Anthropic processes this to answer you and, under its commercial terms, does not use it to train its models.

If you give one of her answers a thumbs down, that question and answer, and any note you add, are shared with the Matchup team so we can improve her. Bug reports and ideas you give her are passed to the team in your words.

SMS messaging and consent

You provide your phone number voluntarily in notification settings. The following consent disclosure is shown directly beside the phone-number field:

"By providing your phone number you agree to receive SMS notifications from Matchup. Msg & data rates may apply. Reply STOP to unsubscribe."

By saving a phone number, you consent to receive transactional SMS messages from Matchup related to your league activity — team invitations, score submission reminders, substitute requests, and similar notifications. We do not send marketing or promotional SMS. Message frequency varies based on your league activity.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All other use case categories exclude text-messaging originator opt-in data and consent; this information will not be shared with any third parties. Phone numbers are shared only with Twilio (our messaging provider) for the sole purpose of delivering the messages you have consented to receive.

You can opt out at any time by replying STOP to any message, or by removing your phone number from your profile. Reply HELP for help, or contact us at support@matchup.us.

For the complete opt-in workflow, a screenshot of the consent step, and our full SMS terms, see our SMS Notifications & Consent page.

Data retention

We retain account data while needed to provide the service. First-party navigation timing records are scheduled for deletion after 14 days. Admin AI chat messages older than 30 days are excluded from chat context and scheduled for deletion. Messages in your conversation with Marsha are scheduled for deletion after 90 days, and feedback on her answers after one year. Conversations with Ask Matchup, the assistant on our product pages, and notes saved from them are scheduled for deletion 180 days after the last message you send. Raw AI action arguments, results, errors, and undo data become eligible for scheduled deletion after seven days. AI action audit records are scheduled for pruning after 90 days. Uploaded workbook previews are scheduled to expire after 24 hours. Other retention depends on the record, operational needs, and legal obligations; we do not promise that all provider records or backups disappear immediately. You can initiate deletion in Profile or request it by email without signing in. Our account deletion instructions explain confirmation, Stripe subscription cancellation, and retained shared, payment, security, and moderation records.

Pre-account contact information and invitation lifecycle records are retained while an invitation is active and afterward for only as long as reasonably necessary to operate the invitation, honor recipient decisions, maintain security and audit history, prevent spam and abuse, and meet legal obligations. When that information is no longer needed, we delete or de-identify it. A recipient who does not have an account may request deletion by emailing support@matchup.us. We may retain limited records when required by law or when needed to document and enforce an opt-out, abuse report, or completed authority change.

Adult accounts and youth participation

Account holders must be 18 or older. Matchup is not directed to children. A captain, organizer, parent, or guardian may manage a minor's roster participation without creating an account for the minor. Minors must not hold accounts, use direct messages, receive push notifications, or provide location or other personal information directly to Matchup. Adults may supply limited roster information for participation. Contact support@matchup.us if you believe we hold information collected directly from a child or need help removing a minor's roster information.

Contact

Questions about this policy? Email us at support@matchup.us, or write to Building 13 LLC, 102 Forestview Drive, Dayton, OH 45459.