Privacy Policy

How ARQ collects, uses, shares, retains, and protects personal information.

Effective: 2026-05-21
Last updated: 2026-05-20

Privacy Policy

Effective date: 2026-05-21 Last updated: 2026-05-20

This Privacy Policy explains how Clearty Technologies, LLC ("ARQ," "we," "us," or "our") collects, uses, shares, retains, and protects personal information when you use https://arqstats.com, our APIs, and any related services (collectively, the "Service"). By using the Service you agree to this Policy. If you do not agree, do not use the Service.

The Service is intended for users 18 years of age or older. We do not knowingly collect personal information from anyone under 13, and the Service is not directed to children.

1. Information we collect

We collect information in three ways:

A. Information you provide

Account information — email address, display name, and password hash (managed via Supabase Auth).
League / team / player data — league names, team names, rosters, player names, jersey numbers, schedules, and any other content you enter as a Commissioner, Captain, or Tracker.
Game events — every event logged during a game (scores, fouls, timeouts, substitutions, corrections) and metadata such as the timestamp and the actor who logged it.
AI prompts and conversations — text you type into ARQ's AI features (analytics queries, corrections, narrative summaries).
Sponsor information — if you sign up as a sponsor, the contact name, business name, website, and any logos or creative you provide for placement.
Support communications — anything you send us by email or in-app messaging.

B. Information collected automatically

Device and connection — IP address, user agent, browser type, operating system, device type, screen size, language, timezone, and referring URL.
Usage — pages viewed, features used, buttons tapped, errors encountered, approximate session duration.
Cookies and similar technologies — see our Cookie Notice.

C. Information from third parties

Authentication providers — if you log in with a third-party identity (e.g. Google), we receive the identifiers and email that provider returns.
Analytics and error monitoring — aggregated usage and error reports from the providers listed on our Sub-processors page.

2. How we use your information

We use personal information to:

Provide the Service — create your account, render the leagues you have access to, log and display game events, route AI requests.
Operate the AI features — send your prompts (and the relevant game context) to our AI sub-processor (Anthropic) so the AI can answer your question or perform the requested action. See AI Disclosure.
Communicate with you — confirm your account, respond to support requests, send transactional emails (password resets, league invitations, sponsor confirmations) and (with your consent where required) product updates.
Maintain safety and integrity — detect and prevent fraud, abuse, security incidents, and violations of our Terms of Service.
Improve the Service — analyze aggregated usage to fix bugs, prioritize features, and improve performance. We do not train AI models on your data.
Comply with law — respond to lawful requests, enforce our terms, and exercise legal rights.

3. Legal bases (for users where this applies)

In jurisdictions that require a lawful basis to process personal data, we rely on:

Performance of a contract — to deliver the Service you signed up for.
Legitimate interests — to keep the Service secure, prevent abuse, and improve product quality, balanced against your rights.
Consent — for optional features (e.g. marketing emails); you can withdraw consent at any time.
Legal obligation — to comply with applicable law.

ARQ does not currently market to or knowingly accept users in the EU/UK. If that changes, this section will be expanded.

4. How we share information

We do not sell your personal information.

We share personal information only as follows:

Sub-processors — service providers that run infrastructure on our behalf (hosting, database, AI, email, error monitoring). They process data only on our instructions and under written agreements. See the current list at Sub-processors.
Other users in your league — content you create inside a league (rosters, game events, sponsor placements) is visible to the other members of that league according to its privacy setting (public or private league).
Sponsors — if your league has sponsors, sponsor placements display the sponsor's content to viewers of that league. We do not share viewer-level personal information with sponsors; we may share aggregated, de-identified impression metrics.
Public listings — if a league is set to public, the league name, location (if entered), team names, schedules, standings, and player names appear on public pages and may be indexed by search engines. Set the league to private to prevent this.
Business transfers — if ARQ is involved in a merger, acquisition, financing, or asset sale, personal information may be transferred as part of that transaction. We will give you notice before your information becomes subject to a different privacy policy.
Legal and safety — when we believe in good faith that disclosure is required by law, necessary to protect the rights, property, or safety of ARQ, our users, or others, or to enforce our terms.

5. AI features

ARQ's AI features use Anthropic's Claude API. When you use these features:

The text of your prompt and the relevant game context (e.g. the current game's events) are sent to Anthropic.
Anthropic processes the request under its API terms and does not use your data to train its models.
AI output may be inaccurate, incomplete, or out-of-date. Treat AI output as a suggestion, not a source of truth. See AI Disclosure for more detail and guidance on what not to paste into the chat.

6. Data retention

We retain personal information for as long as your account is active and as long as needed to provide the Service. After account deletion:

Account credentials — deleted within 30 days.
Profile information — deleted within 30 days.
League content created by you — by default, anonymized rather than deleted, because game events are shared across the league and other members rely on the historical record. Contact us to request full deletion of specific items.
Backup copies — purged within 90 days from rolling backups.
Logs containing IP addresses — retained no longer than 90 days.

We may retain limited information longer if required for legal, accounting, or fraud-prevention purposes.

7. Security

We use commercially reasonable administrative, technical, and organizational measures to protect personal information:

TLS in transit; encryption at rest at the database layer (Supabase).
Role-based access controls and Postgres row-level security to isolate league data.
Append-only event logs (no in-place edits or deletes at the application layer).
Secrets scanning and SAST scanning in CI on every push.
Quarterly review of vendor and access lists.

No system is completely secure. If you believe your account has been compromised, contact us at security@arqstats.com. To report a vulnerability, see our security.txt.

8. Your choices

Access and update — sign in and edit your profile, or contact us.
Delete your account — request deletion at privacy@arqstats.com. See § 6 for what gets removed vs. anonymized.
Email preferences — unsubscribe from non-transactional emails via the link in any message; transactional emails (password resets, league invitations) are required to use the Service.
Cookies — see Cookie Notice.

9. California residents

This section provides the disclosures required by the California Consumer Privacy Act (as amended by the CPRA).

9.1 Categories of personal information collected

In the last 12 months we have collected the following categories of personal information from California residents. Categories below correspond to those defined in Cal. Civ. Code § 1798.140.

Category	Examples	Collected?	Source	Purpose
A. Identifiers	Email, account ID, IP address	Yes	You; automatic	Provide Service, security
B. Customer records	Name	Yes	You	Provide Service
C. Protected classifications	Age, gender	No	—	—
D. Commercial information	Sponsor purchase history	Yes (sponsors only)	You	Provide Service
E. Biometric information	—	No	—	—
F. Internet activity	Pages viewed, clicks, session metadata	Yes	Automatic	Provide Service, analytics
G. Geolocation	Coarse geolocation derived from IP	Yes	Automatic	Security, analytics
H. Sensory data	—	No	—	—
I. Professional / employment	—	No	—	—
J. Education	—	No	—	—
K. Inferences	Engagement signals	Yes	Derived	Product improvement
L. Sensitive personal information	Account login credentials	Yes (credentials only)	You	Provide Service

9.2 Sale or sharing of personal information

We do not sell personal information for money. We do not "share" personal information for cross-context behavioral advertising as that term is defined under the CPRA.

9.3 Your California rights

If you are a California resident, you have the right to:

Know what personal information we have about you, the sources, the purposes, and the categories of recipients.
Access a copy of that information in a portable format.
Correct inaccurate personal information.
Delete personal information, subject to legal and operational exceptions.
Limit use and disclosure of sensitive personal information (in our case, the only sensitive category we collect is your login credentials, which we use solely to authenticate you).
Opt out of sale or sharing — not applicable because we do not sell or share as defined.
Non-discrimination — we will not deny service, charge a different price, or provide a different quality of service because you exercised a right.

To exercise any of these rights, submit a request via Your Privacy Choices or email privacy@arqstats.com. We will verify your identity by matching the email on the request with the email on the account. You may authorize an agent to submit a request on your behalf with proof of authority.

We will respond within 45 days. If we need an extension we will tell you within that window.

9.4 Notice of financial incentive

We do not currently offer financial incentives in exchange for personal information.

9.5 Shine the Light

California residents may request information about disclosures of personal information to third parties for those third parties' direct marketing purposes. We do not make such disclosures, so we have nothing to report.

10. International transfers

ARQ is operated from the United States. Our sub-processors host data primarily in the United States. If you access the Service from outside the United States, you consent to the transfer of your information to the United States, where data-protection law may differ from your home jurisdiction.

11. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the Last updated date at the top and, for material changes, notify you by email or in-app notice before the change takes effect. Continued use after the effective date constitutes acceptance.

12. Contact

Clearty Technologies, LLC 663 N 132nd St, PMB 7321, Omaha, NE 68154 Privacy: privacy@arqstats.com Security: security@arqstats.com General legal: legal@arqstats.com