⚠ DRAFT — not yet reviewed by an attorney. Placeholder for launch; have a lawyer review before you rely on it, especially the processor/DPA and children's-data sections.

Privacy Policy

Last updated: 2026

Who we are

Leythos ("we," "us") operates a hosted platform for shooting and sportsmen's clubs. This policy explains what we collect and how we handle it.

Two kinds of data

1. Prospect / marketing data. When you submit our "get a demo" form, we collect the details you provide (club name, your email, and anything you write) so we can build your demo and contact you.

2. Club member data (we act as a processor). When a club uses the Service, it may enter data about its members and shooters (names, emails, scores, roles). The club is the controller of that data; we process it on the club's behalf solely to provide the Service. Each club's data is stored in its own isolated database.

How we use data

To provide, operate, secure, and improve the Service.
To communicate with account holders about their account and the Service.
To send transactional messages (e.g. login links, "scores posted" alerts) that members can control.
We do not sell personal data.

Service providers (subprocessors)

We rely on a small set of vendors to run the Service, each handling data only to provide their function:

Cloudflare — hosting, storage, and database.
Stripe — subscription and payment processing.
Resend — transactional email delivery.
Printful — merchandise fulfillment (only when a club sells merch).

Retention

We keep club data for as long as the account is active and for a reasonable period afterward to allow export, then delete it. Prospect data is kept only as long as needed to follow up.

Security

Each club's data is isolated in its own database, scoring is computed server-side, admin access uses real logins (not shared passwords), and we take automatic backups. No system is perfectly secure, but we take reasonable measures to protect your information.

Your choices & rights

Clubs can export or request deletion of their data at any time. Individuals may unsubscribe from non-essential emails using the link in each message, or contact the club (the data controller) about their information.

Children's data

The Service is used by clubs that may include junior (under-18) members. Clubs are responsible for obtaining any required parental consent for members under 13 before entering their information. [TODO — confirm COPPA posture with counsel; the club's nonprofit exemption does not automatically transfer to a for-profit operator.]

Contact

Questions about this policy: [email protected]. Mailing address: TODO — business mailing address, City, ST ZIP.