Repline Privacy Policy
Last updated: October 15, 2026
Repline is operated by Repline LLC (“Repline”, “we”, “us”). This policy explains what information Repline handles, how we use and protect it, and the choices you have.
1. Who this policy covers
Repline is used by hockey advisory agencies (“agencies”) to manage their work with players and families.
- Agency users: people who sign in to Repline. We are responsible for the information we collect about you to run your account.
- Players, parents, guardians and other contacts: agencies add information about you to Repline, and you may submit information directly through forms, signing requests or payment pages an agency sends you. The agency decides what information to collect and how to use it. Repline stores and processes it on the agency's behalf and under its instructions. Questions about your information should go to the agency first. We'll help them respond.
2. Information we collect
From agency users
- Account details: email address and password (passwords are handled by our authentication provider and never stored in plain text), name, and organization details you add.
- Billing details for your Repline subscription. Card details are entered with Stripe and are never stored by Repline.
Information agencies add or collect through Repline (“customer data”)
- Player profiles: name, date of birth, citizenship, height and weight, team, league and position, school and academic information (such as GPA, graduation year and test scores), contact details and home address, social media handles, game and career history, and notes.
- Documents and media: contracts and signed agreements, transcripts, medical and other documents, photos and videos.
- Contacts: parents, guardians, billing contacts and others, with names, phone numbers, email addresses, relationships, and country and province (used to work out sales tax on invoices).
- Communications: emails and text messages sent through Repline, replies received by text, and whether emails were delivered, opened or clicked.
- Billing records: invoices, payment plans and payment status. Card payments are processed by Stripe; Repline never sees or stores card numbers.
- Form and signing information: answers and files submitted through intake forms an agency sends, and signature activity on agreements.
Collected automatically
- Cookies: we use only the cookies needed to keep you signed in. We don't use advertising or tracking cookies, and we don't use third-party analytics.
- Error diagnostics: when something goes wrong, technical details about the error are sent to our error-monitoring provider so we can fix it.
- Email engagement: when emails are sent through Repline, our email provider reports delivery, opens and link clicks.
3. Information about minors
Many players whose information is stored in Repline are under 18. Agencies are responsible for having the authority and any consents needed, including from a parent or guardian, before adding a minor's information or contacting them through Repline. Repline is not directed at children, and children do not create Repline accounts.
4. How we use information
- To provide Repline: storing records, generating documents, sending agreements for signature, sending invoices and messages the agency requests, and syncing with tools the agency connects.
- To send service emails: account and security emails, invitations, notifications and digests you've turned on, and onboarding messages about your account.
- To keep Repline secure, investigate problems and fix errors.
- To meet legal obligations.
We do not sell personal information. We do not use customer data for advertising. We do not use customer data to train AI models, and Repline does not currently send customer data to any AI service.
5. Service providers we share information with
We share information only with the providers needed to run Repline, and only what each one needs:
| Provider | Purpose | Information involved |
|---|---|---|
| Supabase | Database, file storage and sign-in | All Repline data |
| Vercel | Application hosting | Requests to the app |
| Sentry | Error monitoring | Technical error details, which may include data on the screen when an error occurs |
| Resend | Email delivery | Recipient names and addresses, email content, delivery and engagement |
| Twilio | Text messages | Phone numbers and message content |
| BoldSign | Electronic signatures | Agreements and signers’ names and email addresses |
| Stripe | Payments | Payer email and invoice details; card details are entered with Stripe |
Only if an agency connects them:
| Provider | Purpose | Information involved |
|---|---|---|
| QuickBooks (Intuit) | Accounting | Customer names, emails and phone numbers, invoices and payments |
| Wave | Accounting | Customer names and emails, invoices and payments |
| Monday.com | One-time import into Repline | Data the agency chooses to import |
Other providers:
- Browser push notifications are delivered through the push service of your browser or device.
- Videos linked from YouTube or Vimeo are loaded from those sites when viewed.
- Public game schedules are retrieved from league data providers. No personal information is sent to them.
Each provider handles information under its own privacy and security terms. We may also disclose information where required by law, or as part of a merger or sale of our business, in which case this policy would continue to apply.
6. Where information is stored
Repline's data is stored with Supabase in Canada (Central). Some providers, including Sentry, Stripe, Resend and Twilio, process information in the United States. Information may therefore be stored or processed outside your province or country, where local laws may allow authorities to access it.
7. How we protect information
- Encryption: all connections use HTTPS. Stored data is encrypted at rest by our hosting provider.
- Separation between agencies: each agency's data is separated at the database level, so one agency cannot access another's.
- Access within an agency: roles control who can view or change information (owner, representative, read-only). Agencies can restrict each player's profile to the representatives assigned to them.
- Files: documents, contracts and videos are stored privately and opened through links that expire after an hour. Video share links can be revoked at any time and expire after 90 days. Profile photos and logos are stored at hard-to-guess web addresses, so they can appear in player profiles and PDFs.
- Connected tools: keys for connected accounting tools are encrypted.
- Logging: security-relevant actions are recorded in an audit log that agency users cannot alter.
No system is perfectly secure. If a breach affects your personal information and creates a real risk of significant harm, we will notify affected agencies, and individuals and regulators as required by law.
8. How long we keep information
- We keep customer data for as long as the agency's account is active.
- When an agency deletes its account, its data is permanently deleted from our systems right away. Copies in our hosting provider's backups are removed within 7 days.
- Audit logs are kept for 12 months for security purposes, then deleted.
- Agencies can delete individual players, contacts, documents and videos at any time.
9. Your choices and rights
Agency users can:
- update their information in Settings;
- export their organization's data (players, contacts, contracts and documents) from Settings → Account;
- delete their account from the same page;
- turn notification digests off in Settings;
- unsubscribe from product emails using the link in each email.
Families and contacts can:
- unsubscribe from an agency's emails using the link in each email;
- stop text messages by replying STOP.
Depending on where you live, including under Canada's PIPEDA and Québec's Law 25, you may have the right to access or correct your personal information, withdraw consent, or ask that it be deleted. If an agency stores your information, contact the agency. You can also contact us, and we'll help or forward your request.
10. Changes to this policy
We'll post any changes here and update the date above. For significant changes, we'll notify agency users by email or in Repline.
11. Contact
Our privacy officer is Taylor Bold, reachable at privacy@repline.io.