Privacy Policy

This policy explains what RosterGraph collects, why, and the choices you have. It covers rostergraph.com, app.rostergraph.com, and the media kits and agency pages published through them. It applies to our customers and to the athletes whose public profiles appear in RosterGraph.

What we collect

• Account details. Your name, email address and password (stored only as a one-way hash), and your company's name and whether it's a brand or an agency.
• What you add. Athletes you track, with the sport, school and division you enter; your roster, lists, tags and media kits; and your agency page's details, such as its contact email, website and logo.
• Athlete data. For athletes added to RosterGraph, public data from their Instagram, TikTok and YouTube profiles, collected through our data provider InsightIQ: profile details, follower counts, engagement, recent posts and estimated audience demographics. Where a platform provides a contact email, we store it but never show it on public pages.
• Sign-in data. Your IP address and browser details when you sign in, which we use to keep you signed in and to limit repeated sign-in attempts.
• Visits to published pages. When someone opens a media kit or agency page, we count the visit and clicks on its buttons and athletes, with the referring website, country and type of device, so the company that published it can see how it's doing. We don't store the visitor's IP address: the IP and browser details are hashed with a random key made for that day, so a visitor is counted once a day. While a day's key exists, only we hold it. We delete each day's key after two days, and once it's also gone from our database backups, no one, including us, can tie those visits to an IP or to visits on other days.
• Tracked links. A company can make a link for one recipient and label it (for example, with a brand's name). Visits through that link, including by anyone it's forwarded to, are counted under that label, and whoever made the link can get an email when it's opened. The label is the company's own note; we don't check who actually opened the link. To keep counting the visit under that label as the visitor moves between the company's pages, the browser keeps the link's code in session storage until the tab is closed.

How we use it

To run RosterGraph: search, lists, rosters, media kits and agency pages; to refresh athlete stats; to send account emails such as sign-up confirmations, password resets and team invitations; to keep accounts secure and fix errors; to show companies how their published pages are doing; and to answer you when you contact us. We don't sell personal information, and we don't use advertising or third-party analytics trackers.

Who can see it

• Members of your company see its lists, roster and media kits.
• Signed-in customers can see athlete profiles in Discover.
• Anyone with the link can see a published media kit or agency page.
• Service providers that run RosterGraph for us (hosting, our database, file storage, email delivery through Resend, error reports through Sentry, and InsightIQ) process data only on our instructions.
• Authorities, where the law requires it.

Cookies

The app uses cookies only to keep you signed in. When you open a tracked link, its code is kept in that browser tab's session storage, so your visit stays counted under that link as you move between the company's pages; the tab's session storage is cleared when you close it. The marketing site sets no cookies.

How long we keep it

We keep account data while your account is open and delete it when you close it, apart from anything we must keep for legal or accounting reasons. Athlete data stays while customers track the athlete, and we refresh it when it's viewed and more than 30 days old. Individual page visits are deleted after 90 days; only daily totals are kept after that. The daily keys used to count visitors are deleted after two days.

If you're an athlete

You can ask us to correct your profile or remove it from RosterGraph. Email legal@rostergraph.com with your social handles and we'll handle it.

Your choices

Depending on where you live, you may have the right to see, correct, export or delete the personal data we hold about you, or to object to how we use it. Email us to make a request; we may need to confirm who you are first.

Children

RosterGraph is for businesses and isn't meant for children. If you believe we hold data about a child under 13, contact us and we'll delete it.

Changes to this policy

When we change this policy we'll update the date above, and for significant changes we'll let account owners know by email.

Contact

Privacy questions and requests: legal@rostergraph.com. See also our Terms of Service.