Privacy Policy

Last Updated: April 13, 2026

1. Introduction

AmpaSports ("Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Whisl platform, including our website, mobile application, and related services (collectively, the "Service").

Please read this Privacy Policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use the Service.

2. Information We Collect

2.1 Personal Information You Provide

When you register for an account or use the Service, we collect:

  • Identity Information: Name, email address, phone number, date of birth
  • Authentication Data: Azure Active Directory credentials and tokens
  • Organization Information: Organization name, type, address, tax identification
  • Certification Information: Referee certifications, qualifications, license numbers
  • Payment Information: Bank account details, payment card information (processed by our payment processor)
  • Profile Information: Profile photo, bio, preferences, availability

2.2 Information Collected Automatically

When you use the Service, we automatically collect:

  • Location Data: GPS coordinates during active assignments, venue locations, travel distances
  • Device Information: Device type, operating system, unique device identifiers, mobile network information
  • Usage Data: Pages visited, features used, time spent on the Service, interaction data
  • Log Data: IP address, browser type, access times, referring URLs

2.3 Information from Third Parties

We may receive information from:

  • Azure Active Directory: Identity verification and authentication data
  • Payment Processors: Payment transaction data and verification
  • Background Check Providers: Verification of certifications and credentials (with your consent)

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Create and manage your account
  • Process referee assignments and match qualified referees to games
  • Verify attendance using GPS geofencing
  • Process payments and distribute funds
  • Calculate distances and optimize assignment logistics
  • Generate performance analytics and reports
  • Facilitate ratings and reviews
  • Send notifications about assignments, payments, and updates
  • Detect and prevent fraud, abuse, and security incidents
  • Comply with legal obligations and enforce our Terms of Service
  • Provide customer support and respond to inquiries
  • Conduct research and analysis to improve our Service
  • Send marketing communications (with your consent)

4. How We Share Your Information

4.1 With Other Users

To facilitate assignments, we share:

  • Referee profiles, certifications, and ratings with organizations
  • Organization names, venue information, and ratings with referees
  • Contact information necessary for assignment coordination
  • Check-in status and location verification

4.2 With Service Providers

We share information with third-party service providers who perform services on our behalf:

  • Microsoft Azure: Cloud hosting, authentication, and database services
  • Payment Processors: Payment processing and disbursement (e.g., Stripe)
  • Communication Services: Email and SMS notification delivery
  • Analytics Providers: Service usage analysis and improvements
  • Map Services: Location and mapping functionality

4.3 For Legal Reasons

We may disclose your information if required to do so by law or in response to:

  • Legal processes (subpoenas, court orders)
  • Governmental or regulatory requests
  • Protection of our rights, property, or safety
  • Protection of others' rights, property, or safety
  • Investigation of fraud or security issues

4.4 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information is transferred and becomes subject to a different privacy policy.

5. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

  • Encryption of data in transit using TLS/SSL
  • Encryption of sensitive data at rest
  • Azure Active Directory for secure authentication
  • Regular security audits and vulnerability assessments
  • Access controls and authentication requirements
  • Secure payment processing through PCI-compliant providers
  • Regular backups and disaster recovery procedures

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to:

  • Provide the Service and fulfill the purposes described in this policy
  • Comply with legal, tax, and accounting obligations
  • Resolve disputes and enforce our agreements
  • Maintain accurate financial and business records

After account deletion, we may retain certain information in anonymized or aggregated form for analytical purposes and to comply with legal obligations.

7. Your Rights and Choices

7.1 Access and Correction

You have the right to access and update your personal information through your account settings or by contacting us.

7.2 Data Portability

You can request a copy of your personal information in a structured, machine-readable format.

7.3 Deletion

You can request deletion of your account and personal information, subject to legal retention requirements and legitimate business interests.

7.4 Location Services

You can disable location services through your device settings, but this will limit certain Service functionality, particularly GPS check-in verification.

7.5 Marketing Communications

You can opt out of marketing emails by clicking the unsubscribe link or adjusting your notification preferences. You cannot opt out of transactional communications related to your use of the Service.

7.6 Do Not Track

We do not currently respond to "Do Not Track" signals from web browsers.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer your information internationally, we implement appropriate safeguards, including using Microsoft Azure's data protection and compliance frameworks.

9. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to Know: You can request information about the categories and specific pieces of personal information we collect
  • Right to Delete: You can request deletion of your personal information
  • Right to Opt-Out: You can opt out of the "sale" of personal information (we do not sell personal information)
  • Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights

To exercise these rights, please contact us at privacy@whisl.com.

11. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

  • Right of access to your personal data
  • Right to rectification of inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to restriction of processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent
  • Right to lodge a complaint with a supervisory authority

Our legal basis for processing your information includes:

  • Contract: Processing necessary to provide the Service
  • Legitimate Interests: Fraud prevention, security, and Service improvement
  • Consent: Marketing communications and certain data processing activities
  • Legal Obligation: Compliance with applicable laws

12. SMS and Text Messaging

Whisl offers SMS text message notifications as part of the Service. This section describes how we collect, use, and protect your phone number and messaging data.

12.1 Phone Number Collection and Use

We collect your mobile phone number when you create a Whisl account and complete phone verification via a one-time passcode (OTP). Your phone number is used solely to:

  • Verify your identity during account registration
  • Send transactional SMS notifications about game assignments, schedule changes, check-in reminders, and payment updates
  • Send referee no-show alerts and position re-listing notifications
  • Deliver time-sensitive operational messages related to your use of the Service

12.2 No Sharing or Selling of Phone Numbers

We do not sell, rent, loan, trade, lease, or otherwise transfer your phone number or SMS opt-in data to any third party for marketing or promotional purposes. Your phone number is shared only with our SMS service provider (Twilio) for the sole purpose of delivering messages on our behalf. Twilio processes your phone number under strict data processing agreements and does not use it for any other purpose.

12.3 Message Frequency and Costs

Message frequency varies based on your activity on the platform (e.g., game assignments, schedule changes, payment confirmations). You may receive multiple messages per week during active periods and fewer during off-seasons. Message and data rates may apply. Please consult your mobile carrier's plan for details on messaging charges.

12.4 Consent and Opt-Out

By creating a Whisl account and verifying your phone number, you consent to receive SMS messages from Whisl. Consent is not a condition of purchase, though certain Service features (such as real-time assignment alerts) require SMS to function.

You may opt out of SMS notifications at any time by:

  • Replying STOP to any SMS message from Whisl
  • Disabling SMS notifications in your in-app Settings
  • Contacting us at support@whisl.app

After opting out, you will receive a single confirmation message. You will no longer receive SMS messages unless you re-enable notifications or text START to resume.

For help, reply HELP to any SMS message or contact us at support@whisl.app.

13. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

  • Maintain your session and keep you logged in
  • Remember your preferences and settings
  • Analyze usage patterns and improve the Service
  • Provide personalized content and recommendations

You can control cookies through your browser settings. Disabling cookies may limit certain Service functionality.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last Updated" date. We encourage you to review this policy periodically. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

15. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Data Protection Officer

AmpaSports

123 Sports Way
San Francisco, CA 94105
United States

Email: privacy@whisl.com

Phone: +1 (800) WHISL-01

By using Whisl, you acknowledge that you have read, understood, and agree to this Privacy Policy and consent to the collection, use, and disclosure of your information as described herein.