Squadify
Legal
Privacy
What Squadify collects, why it has it, who else sees it, and how to get it back or get rid of it.
Last updated 21 September 2026
Who Squadify is
Squadify is operated by Sidiali Sports LLC, a Washington limited liability company. Where this policy says "Squadify", that is the company.
Two different relationships
Squadify sits in two positions and they are worth separating, because the answers differ.
This website. If you join the waitlist or email Squadify, Squadify decides what happens to those details. That is Squadify as controller.
A club's portal. The squad, the documents, the fees, the photographs — that is the club's data about its own people. The club decides what to collect and why; Squadify holds and processes it on the club's instructions. That is Squadify as processor and the club as controller. If you are a player asking why a club holds something about you, the club is who decides, and Squadify will point you to them.
What this website collects
- Waitlist submissions — your email, and optionally your club and a note about what you run. Squadify also records the IP address the request came from and the plan you were reading, so it is clear which enquiries are real and where they came from.
- Email you send Squadify.
There is no analytics script on this site, no advertising pixel and no third-party cookie. Squadify does not know who you are until you tell Squadify.
Waitlist details are used to contact you about Squadify and nothing else. They are not sold, rented or passed to anyone for marketing. Ask and Squadify will delete your entry.
What a club's portal holds
A club decides what it records. The portal is built to hold:
- Staff accounts — name, email, a hashed password, optionally a phone number, and when they last signed in.
- Players — name, squad number, positions, hometown, and the phone number or email address they sign in with. Optionally a photograph.
- Sign-in codes — stored hashed, expiring in minutes, and burned when used.
- Availability and attendance — who was asked to what, what they answered, and any note they left.
- Coach-only assessments — ratings, shortlist notes and development reports. These are visible to staff, and a report only reaches the player it is about when a coach sends it.
- Agreements — the exact document a player was shown, their typed name, their drawn signature, and the date, IP address and browser it was signed from. That last part is what makes a typed name evidence rather than a claim.
- Fees — what a player owes, what they have paid, and a Stripe customer reference. Card numbers never reach Squadify. Payment details are entered on Stripe's own pages.
- Messaging consent — the exact wording a player agreed to, when, and by which route, along with any later request to stop.
- Media — photographs and video a club uploads, and which players have viewed an album.
- An audit log — who changed what, so a club can answer "who did this?"
Who else sees it
Only the services that make the product work. Squadify does not sell data to anyone, and none of these are advertising companies.
| Who | What they get | Why |
|---|---|---|
| DigitalOcean | Everything, at rest | The servers and database the portal runs on |
| Stripe | Name, email, payment details | Taking season fees and sponsorships. Card details go to Stripe directly. |
| Resend | Email address, message content | Sending sign-in codes and notices by email |
| Twilio / Bird / WhatsApp | Phone number, message content | Sending sign-in codes and notices by text, where a club uses them |
| Object storage | Photographs and video | Holding a club's media |
Squadify will also hand over data if the law requires it. If that ever happens and Squadify is permitted to say so, Squadify will tell the club.
Players under 18
Squadify does not verify anyone's age and has no children's-privacy features. A club that registers minors is responsible for having the consent it needs from a parent or guardian, and for deciding what is appropriate to record about a child. If that describes your club, take advice before you start — this is the part of the product most likely to carry obligations Squadify has not anticipated.
How long it is kept
- While the club is a customer — the club decides. Deleting a player in the portal deletes their record and everything hanging off it.
- Sign-in codes — minutes.
- Sessions — a fortnight, then swept.
- After a club leaves — the database is kept for 30 days so a club that changes its mind or needs an export is not stranded, then delete it. Backups roll off within a further 7 days.
- Waitlist entries — until you ask Squadify to remove them, or until it is clear the conversation is over.
Getting your data, or getting rid of it
A club can have everything it holds — squad, fixtures, stats, plans, signed agreements — on request, in a form readable without Squadify. There is no charge and no questions asked — email Squadify and it is sent.
A player wanting a copy of what is held about them, or wanting it corrected or removed, should ask their club, because the club decides. If a club asks Squadify to help, Squadify will.
Security
Passwords are hashed with scrypt and never stored in a form that can be reversed. Sign-in codes are hashed too. Session tokens are held as hashes, so a stolen database cannot be used to impersonate anyone. The portal is served over TLS only. Each club's data lives in its own database, on its own process — clubs are not sharing a table.
If you find a problem, email hello@squadify.club with "security" in the subject and Squadify will confirm Squadify has it within one working day.
Where data is held
Servers are in the United States. If your club or your players are elsewhere, that is an international transfer and may carry obligations for you — worth checking before you sign up rather than after.
Changes
If this changes in a way that matters, customers will be emailed rather than left to notice. The date at the top always reflects the current version.
Contact
Sidiali Sports LLC, DBA Squadify — Washington, USA
hello@squadify.club