Skip to content

Privacy Policy

How Centro protects your data and respects your privacy

Last updated: March 14, 2026

Centro ("we," "us," or "our") operates the website withcentro.com, the Centro web application, and the Centro mobile application for iOS and Android (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our web application, or use our mobile app. By using the Service, you agree to the collection and use of information in accordance with this policy.

You must be at least 18 years of age to create an account on Centro. All accounts must be held by adults (club owners, coaches, parents, or administrators). Minors do not create accounts or interact with the Service directly.

1. Information We Collect

1.1 Information You Provide

  • Account Information: Name, email address, phone number, club or organization name, and role (owner, coach, parent, or player).
  • Player Information: Player names, dates of birth, team assignments, positions, jersey numbers, and development data provided by coaches or parents.
  • Payment Information: Billing details processed securely through Stripe. When a parent pays a club through Centro, the payment is processed via the club's connected Stripe Express account (Stripe Connect). Centro does not store credit card numbers on its servers. Payment data flows through Stripe's infrastructure directly to the club's connected account, with Centro's 2% platform fee deducted automatically.
  • Communications: Messages sent through our platform between coaches, parents, and club administrators. Real-time messages are transmitted through our messaging infrastructure provider, Pusher, which processes message content in transit to enable delivery.
  • Uploaded Files: Documents, waivers, logos, and other files uploaded to the platform are stored on Vercel Blob, a cloud-based file storage service provided by Vercel Inc.
  • Lead Form Data: Name, email, club name, and number of players submitted through our website contact forms.
  • Newsletter Subscriptions: Email addresses submitted to receive our newsletter.

1.2 Information Collected Automatically

  • Usage Data: Pages visited, features used, time spent, referring URLs, and interaction patterns.
  • Device Information: Browser type, operating system, device type, screen resolution, and IP address.
  • Hosting and Analytics Data: Our hosting provider, Vercel, automatically collects server-side analytics data including edge function execution logs, request metadata, and performance metrics as part of operating the infrastructure that serves the Service.
  • Cookies: We use essential cookies to maintain session state and preferences. See Section 8 (Cookie Policy) below.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • To provide, operate, and maintain our Service
  • To process registrations and payments
  • To facilitate communication between club members (coaches, parents, players, administrators)
  • To send service-related notifications (schedules, announcements, payment confirmations)
  • To respond to inquiries, support requests, and lead form submissions
  • To send newsletters (only with your opt-in consent; you can unsubscribe at any time)
  • To improve our Service, analyze usage trends, and develop new features
  • To detect, prevent, and address fraud, abuse, or technical issues
  • To comply with legal obligations

3. Children's Privacy (COPPA Compliance)

Centro is designed for use by youth sports organizations, and we take the privacy of children seriously. Our platform is used by coaches, parents, and club administrators to manage youth athletes. All accounts must be created by individuals who are at least 18 years of age. We comply with the Children's Online Privacy Protection Act (COPPA) and applicable state laws.

  • No direct child accounts: Children under 18 do not create accounts or interact with Centro directly. Player data is entered and managed by parents, coaches, or club administrators.
  • Parental consent: By registering a player, the parent or legal guardian provides consent for the collection of the player's information for the purpose of club management.
  • Limited data collection: We collect only the information necessary for club operations (name, date of birth, team assignment, emergency contact).
  • No marketing to children: We never send marketing communications to children or use children's data for advertising purposes.
  • Parental rights: Parents can request to review, update, or delete their child's personal information at any time by contacting us at support@withcentro.com.
  • Data retention: Player data is retained only for as long as the player is active in the club. Data is deleted upon request or when no longer needed for its original purpose.

4. How We Share Your Information

We do not sell your personal information. We may share information in the following limited circumstances:

  • Within your organization: Information is shared with authorized members of your club (e.g., coaches see roster data, parents see schedules).
  • Service providers: We use trusted third-party services to operate our platform:
    • Stripe — Payment processing via Stripe Connect. Clubs connect their own Stripe Express accounts to collect payments from parents. Payment data flows through Stripe's infrastructure to the club's connected account.
    • Clerk — Authentication and identity management
    • Vercel — Hosting, content delivery, server-side analytics, and file storage (Vercel Blob)
    • Neon — PostgreSQL database services
    • Pusher — Real-time messaging infrastructure. Chat messages are transmitted through Pusher's servers to enable real-time delivery between users.
    • Resend — Transactional email delivery (notifications, confirmations, invitations)
    • Upstash — Redis-based rate limiting and caching services
  • Legal requirements: We may disclose information if required by law, subpoena, court order, or governmental request.
  • Business transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of the transaction.

5. Data Security

We implement industry-standard security measures to protect your data, including:

  • Encryption in transit (TLS/SSL) and at rest
  • Secure authentication with Clerk (including multi-factor authentication)
  • PCI-DSS compliant payment processing through Stripe
  • Regular security audits and monitoring
  • Access controls limiting data access to authorized personnel

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

5.1 Data Breach Notification

In the event of a data breach that compromises your personal information, we will notify affected users within 30 days of discovering the breach, in compliance with Florida's data breach notification law (§501.171, Florida Statutes). Notification will be sent via email to the address associated with your account. Where required by law, we will also notify relevant regulatory authorities.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. When data is no longer needed, we securely delete or anonymize it.

  • Account data: Retained while your account is active. Deleted within 90 days of account closure upon request.
  • Payment records: Retained for 7 years as required by tax and financial regulations.
  • Lead form submissions: Retained for up to 12 months unless you request earlier deletion.
  • Newsletter subscriptions: Retained until you unsubscribe.
  • Chat messages: Retained while the associated club account is active. Deleted upon account closure.
  • Uploaded files: Retained while the associated club account is active. Deleted within 90 days of account closure upon request.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request that we correct inaccurate or incomplete data.
  • Deletion: Request that we delete your personal data (subject to legal retention requirements).
  • Portability: Request your data in a structured, machine-readable format.
  • Opt-out: Unsubscribe from marketing communications at any time.
  • Non-discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, contact us at support@withcentro.com. We will respond within 30 days.

8. Cookie Policy

Cookies are small text files stored on your device when you visit our website. We use the following types of cookies:

  • Essential cookies: Required for the website to function properly (session management, authentication). These cannot be disabled.
  • Preference cookies: Remember your settings, such as language preference (English/Spanish).
  • Analytics cookies: Help us understand how visitors use our website to improve the experience. These are anonymized.

You can manage your cookie preferences using our cookie consent banner, or through your browser settings. Disabling essential cookies may affect the functionality of our Service. For detailed information about each cookie we use, see our Cookie Policy.

9. California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights:

  • The right to know what personal information we collect, use, and disclose.
  • The right to request deletion of your personal information.
  • The right to opt out of the sale of personal information. We do not sell personal information.
  • The right to non-discrimination for exercising your CCPA rights.

California residents under 18 may request removal of publicly posted personal information by contacting us.

10. International Users

Centro is operated from the United States. If you access the Service from outside the United States, your information may be transferred to and processed in the United States where data protection laws may differ from those in your country. By using our Service, you consent to such transfer and processing.

11. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party site you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at:

Centro
Email: support@withcentro.com
Miami, Florida, United States