ScoreUp
SchoolsGamesLeaderboardsContactLog InSign Up
ScoreUp
Privacy PolicyTerms of ServiceCookie PolicyContact Us

© 2026 ScoreUp. All rights reserved.

← Back to Home

Privacy Policy

Last updated: April 2026

ScoreUp ("we," "our," or "us") operates a basketball statistics platform designed for high school basketball programs. This Privacy Policy explains how we collect, use, and protect your information when you use our service.

1. Information We Collect

Account Data: When you register, we collect your name, email address, and organizational affiliation. Coaches and administrators may also provide school or program details.

Game and Player Statistics: We collect basketball game data including player performance stats, box scores, play-by-play records, and team records that are entered by authorized users.

Usage Data: We automatically collect information about how you interact with our platform, including pages visited, features used, and device information such as browser type and operating system.

Contact Form Data: When you submit our contact form, we collect your name, email address, message content, and the subject of your inquiry. We also temporarily collect your IP address for spam prevention purposes. Your IP address is automatically deleted after 30 days. Resolved or spam-flagged submissions are permanently deleted after 180 days, and all submissions are permanently deleted after 365 days regardless of status.

2. How We Use Information

We use the information we collect to:

  • Provide, maintain, and improve our basketball statistics platform
  • Generate player and team analytics, leaderboards, and performance summaries
  • Generate AI-powered scouting reports using game and player data
  • Communicate with you about your account and service updates
  • Analyze platform usage to improve the user experience

3. Data Sharing

We do not sell your personal data to third parties. We may share data in the following limited circumstances:

  • AI Scouting Reports: Game and player statistics may be shared with Anthropic to generate AI-powered scouting reports. No personal account information is included in these requests.
  • Legal Requirements: We may disclose information if required by law or in response to valid legal processes.
  • Service Providers: We use trusted third-party services that may process data on our behalf under strict confidentiality obligations and Data Processing Agreements (DPAs):
  • Supabase, Inc. — Database hosting, authentication, and real-time data infrastructure (data stored in the United States)
  • Resend, Inc. — Transactional email delivery for contact form confirmations and admin notifications only (no marketing emails)
  • Anthropic, PBC — AI-powered scouting report generation using player names, jersey numbers, and game statistics (no account holder email addresses, credentials, or contact information is sent)
  • Vercel, Inc. — Application hosting and edge delivery network
  • Sentry (Functional Software, Inc.) — Error tracking and performance monitoring (no PII included in error reports)

4. Data Retention

We retain different categories of data for different periods based on their purpose:

  • Game & Player Statistics: Retained for the duration of organizational enrollment plus 1 year, to preserve historical records for programs and players.
  • Account Data: Retained as long as your account is active, plus 30 days after a deletion request is submitted.
  • Contact Form Submissions: IP addresses are automatically deleted after 30 days. Resolved or spam-flagged submissions are permanently deleted after 180 days. All submissions are permanently deleted after 365 days.
  • Audit Logs: Retained for a minimum of 1 year for security and compliance purposes.
  • AI Scouting Reports: Cached for up to 24 hours, then permanently deleted. Long-term report data follows the same retention as player statistics.

You may request deletion of your personal data at any time (see "Your Rights" below), and we will process such requests within 30 days.

5. Cookies

We use only essential session cookies required for authentication and maintaining your logged-in state. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. For more details, see our Cookie Policy.

6. Children's Privacy

ScoreUp is designed for use by adult coaches, administrators, and authorized scorekeepers. Minors (including high school players) do not create accounts or directly interact with the platform. Player information — limited to name, jersey number, grade level, and game statistics — is entered solely by authorized adult users on behalf of their programs.

We comply with the Children's Online Privacy Protection Act (COPPA) and do not knowingly collect personal information directly from children under 13. We do not collect email addresses, phone numbers, photos, geolocation, or biometric data from players. If you believe we have inadvertently collected personal information from a child under 13, please contact us immediately and we will promptly delete it.

7. Student Data and FERPA Compliance

ScoreUp may be used by coaches and administrators at educational institutions that receive federal funding. When used in this context, student-athlete data entered into the platform may be considered "education records" under the Family Educational Rights and Privacy Act (FERPA, 20 U.S.C. § 1232g).

When a school or school district authorizes the use of ScoreUp, we function as a "school official" with a legitimate educational interest under FERPA (34 CFR § 99.31(a)(1)). In this capacity, we commit to:

  • Use student data only for the purposes described in this Privacy Policy and as directed by the educational institution
  • Not re-disclose student personally identifiable information (PII) to additional third parties except as described in Section 3 (Data Sharing) of this policy
  • Comply with FERPA requirements regarding the protection and handling of student education records
  • Cooperate with educational institutions to respond to parent or eligible student requests to inspect, review, or amend education records
  • Return or delete student data upon request from the educational institution

Data collected about student-athletes is limited to: player name, jersey number, grade level (freshman, sophomore, junior, senior), and game performance statistics. We do not collect student email addresses, phone numbers, home addresses, Social Security numbers, photos, disciplinary records, grades, or any other academic information.

AI Scouting Reports:Player names, jersey numbers, and game statistics may be shared with our AI provider (Anthropic) to generate scouting reports. Schools should consider whether this data constitutes "directory information" under their FERPA policies. If a parent or eligible student has opted out of directory information disclosure, the school should notify us and we will exclude that student's data from AI report generation.

Educational institutions interested in a formal Data Processing Agreement (DPA) or Student Data Privacy Agreement (SDPA) may contact us at the address below.

8. Security

We take the security of your data seriously. Our measures include:

  • All data is encrypted in transit (TLS/HTTPS) and at rest (AES-256)
  • Row-Level Security (RLS) policies ensure users can only access data they are authorized to see
  • Access codes and sensitive credentials are hashed before storage
  • Regular security reviews and updates to our infrastructure

9. Data Breach Notification

In the event of a data breach involving your personal information, we will:

  • Notify affected individuals within 60 daysof discovering the breach, as required by the Texas Identity Theft Enforcement and Protection Act (Tex. Bus. & Com. Code § 521.053)
  • Notify the Texas Attorney General if 250 or more Texas residents are affected
  • Notify the relevant supervisory authority within 72 hours where required under the GDPR
  • Notify affected educational institutions promptly if student education records are involved, so they may fulfill their FERPA notification obligations
  • Provide a description of the breach, the types of data involved, and steps individuals can take to protect themselves

10. Your Rights

Under applicable data protection laws — including the Texas Data Privacy and Security Act (TDPSA), California Consumer Privacy Act (CCPA/CPRA), California Online Privacy Protection Act (CalOPPA), Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA), Connecticut Data Privacy Act (CTDPA), and the EU General Data Protection Regulation (GDPR) — you have the right to:

  • Access the personal data we hold about you
  • Delete your account and associated personal data (right to erasure)
  • Export your data in a portable format (data portability)
  • Correct any inaccurate information in your account
  • Withdraw consent for data processing at any time, without affecting the lawfulness of processing based on consent before withdrawal
  • Object to processing of your personal data
  • Restrict processing of your personal data in certain circumstances

Contact form submissions: You can request immediate, permanent deletion of all your contact form submissions at any time via our Contact page or by emailing us directly. Deletion requests are processed immediately and cannot be undone.

To exercise any of these rights, please contact us using the information below. We will respond to all data subject requests within 30 days.

11. Do Not Sell or Share My Personal Information

ScoreUp does not sell, rent, or share your personal information with third parties for their marketing purposes. We do not engage in cross-context behavioral advertising. Under the California Consumer Privacy Act (CCPA), you have the right to opt out of the sale or sharing of your personal information. Since we do not sell or share your data, no opt-out action is required. If you have questions, contact us using the information below.

12. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

  • Consent: Contact form submissions, cookie preferences
  • Contract performance: Account creation, game scoring services, team management
  • Legitimate interest: Platform security, fraud prevention, service improvement
  • Legal obligation: Compliance with applicable laws and regulations

13. Accessibility

ScoreUp is committed to ensuring digital accessibility for all users, including people with disabilities. We strive to conform to the Web Content Accessibility Guidelines (WCAG) 2.1 Level AA standards. If you experience any accessibility barriers while using our platform, please contact us and we will work to address the issue promptly.

14. Contact Information

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at: admin@scoreupstats.com

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. For material changes that affect your rights, we will make reasonable efforts to notify registered users via email. Your continued use of ScoreUp after changes are posted constitutes your acceptance of the revised policy.