Privacy Policy

This policy applies to personal information handled through the Futsal Edmonton platform by the Edmonton Futsal League and Edmonton Women's Futsal League, including information relating to players, coaches, club owners and managers, league officials, referees, administrators and other authorized users.

Depending on your role, we may collect account and contact information, registration and roster information, date of birth, address and phone information, profile photos, consent choices, eligibility and discipline records, match and event information, communications, and technical information needed to operate and secure the platform.

For authorized league finance users, the platform may also receive financial account information through Plaid, including institution information, account names and masked identifiers, balances and transaction information. Futsal Edmonton does not receive or store your online-banking username or password.

We use personal information only for reasonable league and platform purposes, including registration, roster and eligibility administration, scheduling, competition operations, communication, safety and discipline processes, player services, financial administration, reconciliation, fraud prevention, security, compliance and recordkeeping.

Where consent is required, Futsal Edmonton seeks consent that is appropriate to the information and purpose involved. Optional choices, such as public player-profile visibility, media use and direct marketing, are handled separately from required league administration.

Authorized finance users must provide an explicit consent before starting a new Plaid bank connection. That consent covers the collection, processing and storage of financial data required for the league finance and reconciliation functions.

Plaid is used to securely connect authorized financial accounts to the league finance workspace. Plaid Link handles the bank authentication flow. Futsal Edmonton receives only the data authorized through that connection and uses it for the approved finance purpose.

Plaid access tokens are stored server-side in Supabase Vault and are not exposed to the browser after connection. Finance and Plaid functions also require multi-factor authentication for authorized users.

Plaid maintains its own end-user privacy policy. You can review it directly on Plaid's website before or during the connection process.

Authorized Futsal Edmonton administrators may connect a Google account and the organization's YouTube channel using Google OAuth. The connection is used only to provide league media and broadcast functions requested by the administrator, including creating, scheduling, updating and managing YouTube live broadcast events associated with Futsal Edmonton matches.

Depending on the permissions approved during Google OAuth, Futsal Edmonton may receive basic Google account information and YouTube channel or broadcast information needed to identify the connected account and perform the requested YouTube actions. Futsal Edmonton does not request a Google password and does not use Google user data for advertising.

OAuth access and refresh tokens may be stored securely on Futsal Edmonton's server-side systems so the authorized connection can continue to function. Access is limited to authorized administrators and service providers required to operate the integration. Google user data is not sold and is not shared with third parties for advertising or unrelated purposes.

An authorized user may revoke Futsal Edmonton's Google access at any time through their Google Account permissions. Revoking access stops future API access, subject to records that must be retained for legitimate security, audit or legal purposes.

Futsal Edmonton's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Futsal Edmonton uses service providers to operate the platform, including cloud hosting, database, authentication, email, payment and financial-data providers. These providers currently include services such as Vercel, Supabase, Plaid, Resend and Stripe where applicable.

Some service providers may process or store information outside Canada, including in the United States. Information handled in another jurisdiction may be subject to the laws of that jurisdiction. Futsal Edmonton limits provider access to the purposes required to deliver the applicable service.

Futsal Edmonton uses role-based access controls, authenticated access, multi-factor authentication for administrative and financial functions, encrypted network connections, managed cloud infrastructure and restricted server-side access to sensitive credentials. No security measure can eliminate all risk, but controls are reviewed and strengthened as the platform evolves.

Personal information is kept only as long as reasonably required for the purpose for which it was collected, for legitimate league operations, or for legal, tax, accounting, dispute, insurance, safeguarding or governing-body requirements. Information that is no longer required is deleted, anonymized or otherwise securely disposed of.

You may contact Futsal Edmonton to ask about personal information associated with your account, request a correction, withdraw an optional consent, or request deletion where the information is no longer required to be retained. Some records cannot be deleted immediately where retention is required for legal, accounting, eligibility, discipline, safety or dispute purposes.

Suspected unauthorized access, loss or disclosure of personal information is reviewed by league administration. Where required, Futsal Edmonton will take appropriate containment, notification, remediation and regulatory steps.

This policy may be updated as the platform, league operations, legal requirements or service providers change. Material changes will be reflected by a new effective date or policy version.