LegalLast updated September 23, 2026 · Version 2026-09-23

Privacy policy.

Thurzy is operated by Par72 Labs, LLC. This policy explains what we collect, why we collect it, and the choices you have. Plain language, not legalese.

Questions? privacy@thurzy.com

── Our commitment

We do not sell your information.

Final. Full stop.

Your league data is not our product. Thurzy makes money when organizers subscribe — not by selling player names, emails, phone numbers, or anything else you trust us with. We take that seriously, and this policy will not change on that point.

  • We never sell, rent, lease, or trade your personal information to third parties — for any purpose.
  • We do not share your data with data brokers, ad networks, or list buyers.
  • We do not use your roster, contact details, or usage data to build advertising profiles.
  • Service providers (payments, email, hosting) process data only on our instructions to run Thurzy. That is not a sale.

The short version.

  • We do not sell, rent, or trade your personal information to third parties. Ever.
  • We collect only what we need to run your league — contact info, schedules, RSVPs, and payment records.
  • League admins can see player data in their own group; we isolate data between groups.
  • You can request access, correction, or deletion by emailing us.

What we collect.

Account information

When you create an account or are invited to a group, we collect your name, email address, and (if you provide it) phone number. Passwords are stored as one-way hashes — we never see your plaintext password.

League and profile data

Organizers may add sport-specific profile fields (jersey number, skill rating, position). Group settings, schedules, rosters, RSVP responses, attendance, and payment ledger entries are stored to operate the service.

Payment information

For card payments, Stripe processes card details directly. Thurzy stores payment amounts, dates, method labels, and limited card metadata (last four digits and brand) for display. Subscription billing for Thurzy itself is handled by Polar.

Communications

We send transactional email and SMS (RSVP invites, reminders, receipts) via our delivery providers. We retain delivery status and audit logs; message content for routine notifications is not kept beyond 90 days.

Usage and device data

We collect standard server logs (IP address, browser type, timestamps) for security and debugging, with PII scrubbed where possible. If analytics are enabled, we use PostHog to understand product usage — not to build advertising profiles.

How we use it.

  • Provide, maintain, and improve Thurzy (scheduling, RSVPs, rosters, payments, notifications).
  • Authenticate users and keep accounts secure.
  • Send transactional messages you expect (invites, reminders, receipts, account notices).
  • Process subscription billing for league administrators.
  • Respond to support requests and troubleshoot issues.
  • Comply with legal obligations and enforce our terms.

We do not use your data for unrelated automated decision-making or profiling that produces legal effects.

Who we share with.

We do not sell your personal information — not now, not ever. We share data only with service providers that help us run the platform, under contracts that require them to protect it and use it solely for our instructions. That is not a sale.

League admins can see contact and profile data for players in their own group only — not other groups. We do not give third parties access to your roster for their own marketing.

Cookies & analytics.

The Thurzy app uses cookies and local storage for authentication (keeping you signed in). The marketing site does not set advertising cookies.

When enabled, we use PostHog for product analytics — page views, feature usage, and error rates. We configure it to avoid collecting unnecessary PII. We are implementing consent controls for analytics in regions that require them.

How long we keep it.

Active account data is kept while you use the service. After an account deletion request, we remove personal data within 30 days.

Payment ledger entries may be retained up to seven years for tax and accounting obligations. Audit logs and delivery tracking records are purged after 90 days.

More detail on encryption and retention lives on our security overview.

SMS & text messages.

If you provide a mobile number to your league administrator, you may receive transactional SMS from Thurzy on behalf of that league — RSVP invitations, reminders, payment notices, and similar operational messages. Consent is obtained when you give your number to the league for roster communications; it is not a condition of purchasing goods or services from third parties. Texts are currently sent under our former name, RosterHQ.

You can also opt in at https://uploads.rosterhq.us/sms/opt-in.html by entering your mobile number and checking the SMS consent box. Reply STOP to the RosterHQ number to opt out, HELP for help, and START to opt back in.

We do not sell, rent, or share your mobile information with third parties for their promotional or marketing purposes. SMS delivery providers (such as Telnyx) process messages only to deliver them on our instructions.

Message frequency varies by league activity. Message and data rates may apply. Reply STOP to opt out of SMS, HELP for help, or START to re-subscribe after opting out. See our Terms of Service for full SMS terms.

Your rights.

01

Access and portability

You can request a copy of the personal data we hold about you. Group admins can export rosters and payment history as CSV today; a full account export is on our roadmap.
02

Correction

Update your profile in the app, or ask your league admin to correct roster details. Email us if something is wrong and you cannot fix it yourself.
03

Deletion

Email privacy@thurzy.com (or security@thurzy.com for security-related requests) with the subject "Account deletion request." We delete personal data within 30 days, except payment records we must retain for accounting (typically seven years). Cancel active subscriptions first.
04

Opt out of SMS

Reply STOP to any RosterHQ league text to unsubscribe from SMS for that phone number. Reply START to re-subscribe. You can also ask your league admin to disable SMS on your roster profile. Message frequency varies by league schedule. Message and data rates may apply.
05

Opt out of marketing

We send product and account emails you need to use the service. We do not send unrelated advertising. We do not send unsolicited promotional SMS.
06

California residents (CCPA)

You have the right to know what we collect, request deletion, and opt out of sale. We do not sell personal information — there is nothing to opt out of. We have not sold personal information in the preceding 12 months and will not do so. Contact privacy@thurzy.com to exercise your other rights.
07

EEA / UK residents (GDPR)

You may have additional rights including objection, restriction, and complaint to your supervisory authority. We process data to perform our contract with you and for legitimate interests in running a secure, reliable service.

Children.

Thurzy is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us data, contact us and we will delete it.

International users.

We are based in the United States and process data on US-hosted infrastructure. If you access Thurzy from outside the US, your information may be transferred to and processed in the US. We take steps to protect it regardless of where you live.

── Contact

Changes & questions.

We may update this policy as the product evolves. We will post changes here and update the date above. Material changes will be communicated by email or in-app notice where appropriate.

Privacy requests: privacy@thurzy.com. General support: support@thurzy.com. Mail: Par72 Labs, LLC, United States.

privacy@thurzy.com →