Privacy Policy

Last Updated: May 2026

1. Introduction

Welcome to Reffi.io ("Reffi," "we," "our," or "us"). Reffi is a two-sided marketplace that connects referees and officials with leagues and sports organizations. We are committed to protecting your privacy and being transparent about our data practices. This Privacy Policy explains how we collect, use, share, and safeguard your information when you access or use our website at reffi.io (the "Platform"). By using the Platform, you agree to the practices described in this policy.

2. Information We Collect

2.1 Personal Information You Provide

When you create an account — whether as a referee or a league/organization — we collect information you voluntarily provide, including:

  • Full name and email address
  • Phone number
  • Location (city, state, and/or ZIP code)
  • Profile photos
  • Sports experience, certifications, and qualifications
  • Availability and scheduling preferences
  • Organization name and details (for league accounts)
  • Messages sent through the Platform's messaging feature
  • Reviews and ratings you submit about other users

2.2 Payment Information

Payment processing on Reffi is handled entirely by Stripe, Inc. ("Stripe"). When you add a payment method or set up payouts, your financial information — including credit card numbers, bank account details, and billing addresses — is collected and stored directly by Stripe. Reffi does not receive, process, or store your full payment card numbers or bank account details. We receive only limited transaction data from Stripe, such as the last four digits of a card, transaction amounts, and payment status, to display in your account and facilitate our services.

2.3 Usage and Device Information

We automatically collect certain information when you access the Platform, including your IP address, browser type and version, operating system, referring URLs, pages viewed, actions taken on the Platform, timestamps, and general device information. This data helps us understand how users interact with the Platform and improve our services.

3. How We Use Your Information

We use the information we collect to:

  • Operate and maintain the Platform and your account
  • Match referees with leagues and game opportunities based on location, availability, sport, and qualifications
  • Facilitate payments between leagues and referees, including subscription billing for organizations and game-based payouts to referees via escrow
  • Enable communication between referees and leagues through in-platform messaging
  • Display reviews, ratings, and profile information to relevant users on the Platform
  • Send transactional notifications about game applications, assignments, payments, and account activity
  • Send occasional product updates and announcements (with opt-out options)
  • Detect and prevent fraud, abuse, and security incidents
  • Ensure platform safety and enforce our Terms of Service
  • Analyze usage patterns to improve features and user experience
  • Comply with legal obligations

4. Information Sharing

4.1 Between Users on the Platform

Reffi is a marketplace, and certain information is shared between users to facilitate connections. When a referee applies for a game or is matched with a league, the league may see the referee's name, profile photo, qualifications, certifications, ratings, and relevant experience. Similarly, referees may see league/organization names, locations, game details, and ratings. Messages exchanged through the Platform are visible to the participants in that conversation.

4.2 Service Providers

We share information with trusted third-party service providers that help us operate the Platform. These providers are contractually obligated to use your data only for the purposes of providing services to Reffi. Our key service providers include:

  • Stripe — payment processing, subscription management, and escrow payouts
  • Supabase — authentication, database hosting, and infrastructure
  • Railway — website hosting and content delivery
  • Resend — transactional email delivery (account confirmations, game notifications, payment receipts)
  • Sentry — application error monitoring and performance diagnostics
  • Analytics providers — to understand Platform usage and performance

4.3 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We never have and never will.

4.4 Legal Requirements

We may disclose your information if required to do so by law, regulation, court order, or other governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to a legal process.

4.5 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change via email or a prominent notice on the Platform.

5. Data Security

We take the security of your information seriously and implement industry-standard safeguards, including:

  • All data transmitted between your browser and the Platform is encrypted using TLS/SSL
  • User authentication and data storage are managed through Supabase, which provides enterprise-grade security including row-level security, encrypted storage, and secure authentication flows
  • Payment data is handled by Stripe, which is PCI DSS Level 1 certified — the highest level of payment security compliance
  • Access to user data is restricted to authorized personnel on a need-to-know basis

While we strive to protect your information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, but we are committed to promptly addressing any security incidents.

6. Location Data

Location information is central to how Reffi works. Referees provide their location and service area so we can match them with nearby game opportunities. Leagues provide game locations so referees can find relevant assignments. We use this location data to power location-based search and matching features on the Platform. We do not track your real-time GPS location. Location data is based on the city, state, and/or ZIP code you provide in your profile.

7. Payment Data

All payment processing is performed by Stripe. Leagues pay for subscriptions and game fees through Stripe, and referee payouts are managed through Stripe's escrow and payout infrastructure. Reffi does not store credit card numbers, bank account numbers, or other sensitive financial data on our servers. For details on how Stripe handles your payment data, please refer to Stripe's Privacy Policy.

8. Cookies and Tracking Technologies

We use cookies and similar technologies on the Platform for the following purposes:

  • Essential cookies — required for authentication, session management, and core Platform functionality. These cannot be disabled without impacting your ability to use the Platform.
  • Analytics cookies — help us understand how users interact with the Platform, which pages are most visited, and where users encounter issues. This data is aggregated and anonymized where possible.

You can control cookie preferences through your browser settings. Disabling essential cookies may prevent you from using certain features of the Platform. Our Platform does not currently respond to "Do Not Track" browser signals.

9. Children's Privacy

Reffi is intended for users who are at least 18 years of age. We do not knowingly collect personal information from anyone under the age of 18. While referees on our Platform may officiate youth sports games, all registered users — both referees and league/organization representatives — must be 18 or older to create an account. If we learn that we have collected personal information from a person under 18, we will take steps to delete that information promptly. If you believe a minor has provided us with personal information, please contact us immediately at support@reffi.io.

10. Third-Party Services

The Platform integrates with and relies on the following third-party services. Each has its own privacy policy governing how it handles your data:

We may also integrate additional analytics or monitoring tools in the future. Any additional third-party services will be reflected in updates to this policy.

11. Data Retention

We retain your personal information for as long as your account is active or as reasonably necessary to provide our services. Specifically:

  • Active accounts — your profile data, game history, reviews, and messages are retained for the duration of your account.
  • Account deletion — when you delete your account, we will remove your personal information from our active systems within 30 days. Some data may be retained in backups for a limited period or as required by law.
  • Transaction records — payment transaction records may be retained for up to 7 years as required for tax, legal, and compliance purposes.
  • Anonymized data — we may retain anonymized, aggregated data that can no longer identify you for analytical and improvement purposes indefinitely.

12. Your Rights and Choices

12.1 Access and Update

You can access and update your personal information at any time through your account settings on the Platform.

12.2 Account Deletion

You may request deletion of your account by contacting us at support@reffi.io. Upon deletion, your profile, personal data, and associated content will be removed in accordance with Section 11 above.

12.3 Communication Preferences

You can opt out of promotional emails by clicking the "unsubscribe" link in any marketing email. You will continue to receive transactional communications related to your account activity, game assignments, and payments, as these are necessary to operate the Platform.

12.4 State Privacy Rights

If you reside in a state with consumer privacy legislation (such as California, Virginia, Colorado, Connecticut, or others), you may have additional rights including the right to know what data we collect, the right to delete your data, and the right to opt out of the sale of personal information. As stated above, we do not sell personal information. To exercise any of these rights, please contact us at support@reffi.io.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this page and, where appropriate, by sending you an email notification or displaying a prominent notice on the Platform. Your continued use of the Platform after any changes constitutes your acceptance of the updated policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Reffi.io

Email: support@reffi.io