Privacy Notice — Franchise HQ

Last updated: May 28, 2026

This Privacy Notice explains how Franchise HQ ("we", "us", "our"), the operator of the Franchise HQ service (the "Service"), collects, uses, and shares your personal data. We act as the data controller for the information described below.

1. Information We Collect

Account data: email address, display name, password hash, authentication provider identifiers.
League content: leagues, teams, players, and other content you create within the Service.
Support communications: messages you send us.
Usage and device data: IP address, browser type, pages viewed, timestamps, and similar telemetry collected automatically.
Billing data: subscription status and identifiers we receive from Paddle. Payment card details are processed by Paddle and are not stored on our systems.

2. How We Use Your Data

To create and operate your account and provide the Service (contract performance).
To maintain security, prevent fraud and abuse (legitimate interests).
To improve the Service and develop new features (legitimate interests).
To respond to support requests (contract performance / legitimate interests).
To send transactional and, where permitted, marketing communications (consent, where required).
To comply with legal obligations (legal obligation).

3. How We Share Your Data

We share personal data only with the following categories of recipients:

Service providers / subprocessors: hosting, database, authentication, analytics, and support tooling providers.
Merchant of Record (Paddle): for sale of the product, subscription management, payments, tax compliance, and invoicing.
Professional advisers: legal, accounting, and similar advisers.
Authorities: where required by law or to protect our rights.

4. International Transfers

Your data may be processed in countries outside your own. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

5. Retention

We retain personal data for as long as your account is active and for a reasonable period thereafter to comply with legal obligations or resolve disputes. When data is no longer needed it is deleted or anonymised.

6. Your Rights

Depending on your location, you may have rights to access, correct, delete, restrict, or port your personal data; to object to certain processing; to withdraw consent; and to lodge a complaint with your supervisory authority. To exercise these rights, contact us through the support channels in the app. We aim to respond within one month.

7. Security

We use appropriate technical and organisational measures, including encryption in transit and access controls, to protect your data.

8. Cookies

We use essential cookies and similar technologies to keep you signed in and operate the Service. We may also use limited analytics cookies to understand aggregate usage. You can manage cookies through your browser settings.

9. Changes

We may update this Privacy Notice from time to time. Material changes will be communicated through the Service.

10. Contact

Questions about this notice? Contact us through the support channels in the app.