Privacy Policy

Last updated: August 27, 2026

This Privacy Policy explains how Commish HQ (“we,” “us,” or “our”) collects, uses, and shares information when you use Commish HQ (the “Service”). By using the Service you also agree to our Terms of Service.

1. Information we collect

  • Account information — your name, email, and password (stored hashed), or the profile details from a sign-in provider (Google, Discord).
  • League data — data we pull from the fantasy platform you connect (Sleeper or ESPN): teams, rosters, matchups, scores, and transactions. For ESPN, we store your connection credentials in encrypted form.
  • Chat data — where you connect a group chat, we receive messages from that chat to generate league “memory” and to power the interactive bot. Raw messages are held in a short-lived buffer and distilled into summarized lore.
  • Billing information — handled by Stripe. We receive subscription status and identifiers; we do not store your full card number.
  • Technical data — session cookies for authentication, and basic logs and error reports used to operate and secure the Service.
  • Usage data — aggregate, cookieless analytics about how the Service is used: pages viewed, and a small set of milestone events such as creating an account, connecting a league, generating content, and starting checkout. These records contain no name, email, league name, or account identifier.

2. How we use information

To provide and operate the Service; to sync your league and generate and deliver content; to power the interactive bot and league memory; to process payments and manage subscriptions; to communicate with you (e.g. account, billing, and trial emails); to secure the Service and prevent abuse; and to maintain and improve the Service.

3. AI processing

To generate content and answer questions, relevant data (such as league standings, matchups, and distilled league memory) is sent to third-party AI providers that run the underlying models. These providers process the data to return a result. We do not use this to build advertising profiles.

4. Service providers we share with

We share data with vendors that help us run the Service, only as needed to provide it:
  • Stripe — payment processing.
  • Anthropic, OpenAI, and Google — AI model providers (content generation and embeddings).
  • Resend — transactional email.
  • Sentry — error monitoring.
  • Vercel — hosting, and cookieless usage analytics.
  • Telegram, Discord, Slack — content delivery to the chat destination you choose.

We do not sell your personal information.

5. Data retention

We keep account and league data while your account is active. Raw chat messages are retained in a buffer for a short period (currently about 7 days) before being purged; distilled memory derived from them is kept to provide continuity. You can request deletion of your account and associated data (see “Your rights”).

6. Security

We use industry-standard measures to protect your data, including encryption of sensitive credentials and hashed passwords. No method of transmission or storage is completely secure, but we work to protect your information and limit access to it.

7. Your rights

You may access and update your account information in the app, and you can request a copy or deletion of your data by contacting us. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA; we will honor applicable requests.

8. Cookies

We use cookies that are necessary for authentication and to keep you signed in. We do not use them for third-party advertising. Our usage analytics are cookieless and do not track you across other sites.

9. Browser extension

The Commish HQ browser extension reads exactly two cookies from your signed-in ESPN session and sends them to your own account so your private league stays readable. It has no content scripts, reads no other cookie, and accesses no browsing history. Full detail, including retention and how to revoke it, is in the Browser Extension Privacy Policy.

10. Children

The Service is not directed to individuals under 18, and we do not knowingly collect their personal information.

11. International users

The Service is operated from, and data is processed in, the United States. By using the Service you understand your information may be processed there.

12. Changes to this policy

We may update this policy from time to time. We’ll revise the “Last updated” date and, for material changes, provide notice as required.

13. Contact

Questions or requests? Contact us at support@commishhq.ai.