Smashr

Privacy Policy

Last updated: February 2026

1. Introduction

Smashr ("we", "us", "our") operates the Smashr club management platform. This Privacy Policy explains how we collect, use, disclose, and protect your personal information.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, organization name, and password (stored in hashed form).

Club Data

As part of using the Service, you may upload data about your club members, students, and staff, including names, contact information, photos, attendance records, and payment information.

Usage Data

We automatically collect information about how you use the Service, including IP addresses, browser type, pages visited, and timestamps.

Payment Information

Payment processing is handled by Stripe. We do not store your credit card details. Stripe's privacy policy governs their handling of payment data.

3. How We Use Your Information

We use your information to:

  • Provide and maintain the Service
  • Process subscription payments
  • Send transactional emails (account verification, password resets, billing)
  • Provide customer support
  • Monitor and improve the Service
  • Detect and prevent fraud or abuse

4. Data Sharing

We do not sell your personal information. We share data only with:

  • Service providers: Stripe (payments), Resend (email), Vercel (hosting), Neon (database)
  • Legal requirements: When required by law or to protect our rights

5. Data Retention

We retain your data for as long as your account is active. After account deletion, we retain data for up to 30 days before permanent deletion. Anonymized usage data may be retained longer for analytics purposes.

6. Data Security

We implement industry-standard security measures including encryption in transit (TLS), encrypted database connections, hashed passwords, and access controls. However, no method of transmission or storage is 100% secure.

7. Your Rights

You have the right to:

  • Access your personal data
  • Export your data in a portable format
  • Request correction of inaccurate data
  • Request deletion of your account and data
  • Withdraw consent for optional data processing

8. Data Processing for Club Operators

If you are a club operator using Smashr to manage member data, you are the data controller for your members' personal information. You are responsible for obtaining appropriate consent from your members and complying with applicable data protection laws.

9. Cookies

We use essential cookies for authentication and session management. We do not use tracking or advertising cookies.

10. Children's Privacy

Our Service is designed for club operators, not for direct use by children. Club operators who manage data for minors are responsible for obtaining parental consent as required by applicable law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service.

12. Contact

For privacy-related questions, contact us at privacy@smashr.club.