Privacy Policy

Last updated: August 7, 2026 · Touchline is a product of Castellum LLC.

This Privacy Policy explains how Castellum LLC (“we,” “us”) collects, uses, and protects information in connection with the Touchline platform (the “Service”). We built Touchline to minimize personal data — especially for young players.

Privacy-first by design. Players are identified by a moniker (a nickname or jersey identifier), not by full personal profiles. We do not require a child’s full name, address, or contact details to use the Service. Clubs are responsible for obtaining guardian consent before adding a player, and for not entering more personal data than needed.

Our role: clubs are the data controller

Your club decides what information to put into the Service and is the “controller” of that information. Castellum LLC acts as a “processor,” handling data on your club’s behalf to provide the Service. If you are a parent or player with questions about your data, please contact your club first.

Information we collect

Account data: for club managers, coaches, and staff — email address, display name, and hashed password.
Club and team data: club name, location (state/city), season, teams, and cohorts.
Player data (moniker-based): a moniker, age group/position, coach assessments, development goals and tasks, training logs, and optional wellness check-ins. A guardian email is stored only when a club chooses to enable guardian reports and records consent.
Video: match or training clips a club uploads for analysis, stored in cloud object storage.
Usage and technical data: standard log data (e.g., IP address, browser type, timestamps) used to operate and secure the Service.

How we use information

To provide and maintain the Service (rosters, assessments, plans, analytics, video analysis).
To generate AI-assisted development plans, training sessions, and video insights at your request.
To process subscriptions and billing through our payment processor.
To send transactional email (confirmations, password resets, and guardian reports you enable).
To secure, troubleshoot, and improve the Service.

We do not sell personal information, and we do not use player data to build advertising profiles.

AI processing

When you use AI features, relevant content (for example, assessment attributes or uploaded video frames) is sent to our AI provider to generate output that is returned to you and stored with your club’s data. AI output is assistive and should be reviewed by a coach (see our Terms).

Service providers (subprocessors)

We use trusted providers to run the Service, under agreements that protect your data:

Microsoft Azure — cloud hosting, database, and video storage.
Stripe — subscription payments (we never store full card numbers).
An email delivery provider for transactional messages.
An AI provider for the AI-assisted features described above.

[Confirm the exact subprocessor list and locations with counsel before launch.]

Children’s privacy

The Service is designed for use by clubs and coaches, not for direct use by children under 13, and its moniker-first design avoids collecting children’s personal details. Clubs must obtain verifiable parental/guardian consent as required by applicable law (such as COPPA in the United States) before entering any information about a minor or enabling player logins for minors. If you believe a child’s personal information was provided without proper consent, contact us and we will delete it.

Data retention and deletion

We retain club data for as long as the club account is active. A club manager can permanently delete the entire club and all associated data at any time from Club Settings; deletion removes teams, players, assessments, videos, and logins. After account closure, residual copies in backups are purged on a rolling basis.

Security

We use industry-standard measures including encryption in transit (HTTPS), hashed passwords, per-club data isolation, and access controls. No system is perfectly secure, but we work to protect your data and to notify affected clubs of material incidents as required by law.

Your choices and rights

Depending on your location, you or your club may have rights to access, correct, or delete personal information, or to object to certain processing. Because clubs control player data, we will route such requests to the relevant club and assist as processor. Contact us or your club to exercise these rights.

Changes to this Policy

We may update this Policy from time to time; material changes will be communicated through the Service or by email.

Contact

Privacy questions: admin@touchlinecoaching.com.