DUGOUTPILOT

Privacy notice

Launch review draft — September 15, 2026. Review with qualified counsel before general commercial launch.

DugoutPilot is operated as DugoutPilot LLC (formation pending). Privacy questions and requests can be sent to support@dugoutpilot.com or 1751 N 193rd E Ave, Catoosa, OK 74015.

Information used by the application

• Account information: email, display name, memberships, roles, invitations, and security records. Analytics passwords are stored as salted password hashes, not readable passwords.
• Team information: organizations, teams, seasons, player profiles, roster links, batting/throwing side, notes, statistics, games, scouting data, pitch records, and uploaded files such as logos and import files.
• Operational information: import and synchronization status, audit events, errors, and session/device records. Hosting and email providers may also process technical information, such as network and delivery logs.
• Support correspondence and information you choose to provide when asking for help.
• Purchase information: selected plan, billing interval, subscription status, renewal date, Stripe customer and subscription identifiers, and limited checkout metadata. DugoutPilot does not store your full card number.

Why it is used and who can access it

The application uses this information to authenticate users, enforce workspace access, synchronize authorized data, generate analytics and reports, troubleshoot issues, and respond to requests. Members see information according to their workspace roles. Authorized support access should be limited to what is needed to investigate an issue.

The application is hosted through OpenAI Sites, with Cloudflare-backed application, database, and file services. Optional ChatGPT sign-in is handled by OpenAI. Stripe processes subscription payments and billing-portal activity. GoHighLevel may receive lead, customer, plan, organization, team, and onboarding status information for email-only customer communication. Support and transactional messages are handled by the configured email providers. GameChanger imports involve the third-party service and your Companion workflow; only synchronize information you are authorized to access.

People you share exported reports or observer links with may see the information included in those reports or links. Treat them as sensitive and share only with intended recipients. Information may also need to be disclosed to meet applicable legal obligations.

Cookies and browser storage

DugoutPilot sign-in uses a session cookie. The application also uses browser storage for preferences and saved game or lineup drafts. Optional ChatGPT sign-in, Stripe checkout, and hosting services may use their own essential cookies. Device-local drafts are not a server backup and may be lost if browser storage is cleared.

Youth player information

The service is intended for adults, but team records can contain information about youth players. Team administrators should provide only information necessary for baseball activities and obtain required permissions. Do not include medical records, government identifiers, or unnecessary personal contact information in notes or uploads. Parents and guardians can contact support with questions or requests concerning a player's information; verification and coordination with the relevant team may be necessary.

Retention, correction, export, and deletion

Account and team records are retained to operate the workspace and preserve its history. Deactivating a member does not automatically delete team statistics or shared records. Retention and deletion requests are reviewed for the relevant scope, other members' rights, security needs, and legal obligations. No fixed backup-retention period or automatic deletion deadline is promised in this draft.

Use Help & data requests to request access, correction, an export, deactivation, or deletion review. Support verifies identity and authority before disclosing or changing records. A request email alone does not establish ownership of a workspace.

Security and changes

Access controls and password protection reduce risk, but no online service can guarantee complete security. Report suspected unauthorized access promptly without sending passwords or secret links. This notice will be updated when the operator, providers, or information practices change; material changes will be communicated to affected account holders.