Privacy Policy

Effective date: July 11, 2026 · Last updated: July 14, 2026

1. Introduction and scope

This Privacy Policy describes how Hedgehog Software LLC, a Wyoming limited liability company doing business as Evaluio ("Evaluio," "we," "us," or "our"), collects, uses, discloses, and otherwise processes personal information in connection with our websites, applications, and related services that link to this Policy (collectively, the "Services").

Evaluio provides a software platform that enables soccer academies and similar youth sports organizations to manage teams, coaches, players, and player evaluations. This Policy applies to personal information we process as a commercial service provider. Where we process personal information on behalf of a customer organization (for example, player or parent data entered by a club), that organization is typically the data controller (or "business") and we act as a processor (or "service provider"), except as otherwise described herein.

By accessing or using the Services, you acknowledge the practices described in this Policy. If you do not agree, please do not use the Services.

2. Categories of information we collect

We collect personal information from you, from the organization that invites or manages your account, and automatically from your devices when you use the Services. The categories we may collect include:

2.1 Account and identity information

  • Name, email address, and authentication identifiers
  • Role within an organization (for example, club administrator or coach)
  • Profile preferences such as preferred language and notification settings

2.2 Organization and billing information

  • Academy or club name, timezone, logo, and related configuration
  • Subscription status, plan identifiers, and limited billing metadata. Payment card details are processed by our payment processor (Stripe) and are not stored in full by Evaluio

2.3 Sports operations data

  • Player names, team assignments, and parent or guardian contact email addresses as provided by the customer organization
  • Coach names, contact details, team assignments, and invitation records
  • Evaluation content, including assessment questions, scores, written feedback, completion status, and generated reports (including PDF attachments)
  • Support tickets and related correspondence

2.4 Technical and usage information

  • IP address, browser type, device type, operating system, and approximate location derived from IP
  • Log data such as timestamps, pages or API endpoints accessed, referrers, and error diagnostics
  • Cookies and similar technologies used for authentication, security, and essential product functionality
  • Aggregated, privacy-focused website analytics (page views, referrers, and interaction events collected via a self-hosted analytics tool that does not use cookies or track you across other websites)

We do not intentionally collect special categories of data beyond what a customer elects to enter into evaluation free-text fields. Customers are responsible for ensuring they have a lawful basis to provide any such information.

3. Sources of personal information

  • Directly from you, when you create an account, update settings, submit support requests, or otherwise communicate with us
  • From customer organizations, when an administrator invites coaches, imports rosters, or records evaluations
  • From service providers, such as authentication (Clerk), payments (Stripe), email delivery, and hosting infrastructure
  • Automatically, through cookies, logs, and similar technologies when you interact with the Services

4. How we use personal information

We use personal information to:

  • Provide, operate, maintain, and improve the Services, including evaluation workflows, reporting, and administrative tools
  • Authenticate users, enforce role-based access, and protect the security and integrity of the Services
  • Process subscriptions, invoices, and related customer communications
  • Send transactional messages (for example, coach invitations, evaluation completion notices to parent email addresses on file, and support replies), and optional product updates where permitted
  • Diagnose errors, monitor performance, prevent fraud and abuse, and comply with legal obligations
  • Enforce our Terms of Service and investigate suspected violations

Where applicable law requires a legal basis, we rely on one or more of the following: performance of a contract; legitimate interests in operating a secure SaaS product; consent (where required); and compliance with legal obligations.

5. How we share personal information

We do not sell personal information. We may disclose personal information in the following circumstances:

  • Within the customer organization. Authorized administrators and coaches may access data consistent with their roles and team assignments.
  • Service providers and subprocessors. Vendors that host infrastructure, provide authentication, process payments, deliver email, or support operations, under contractual confidentiality and security obligations.
  • Parents or guardians. Where a club enables evaluation completion emails and a parent email is on file, we may send evaluation-related notices and attachments on the club's instruction.
  • Legal and safety. When we believe disclosure is required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Evaluio, our users, or others.
  • Business transfers. In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, subject to appropriate confidentiality protections.
  • With consent. In other cases where you or the customer organization direct us to share information.

6. Children and youth sports data

The Services are designed for use by adult administrators and coaches acting on behalf of sports organizations. Evaluio does not knowingly market the Services directly to children, and children are not intended to create accounts.

Customer organizations may enter information about minor players (and parent or guardian contacts) in order to operate evaluations. Those organizations are solely responsible for:

  • Obtaining all required consents and authorizations from parents or legal guardians where required by law (including, where applicable, the Children's Online Privacy Protection Act and analogous state or international laws)
  • Providing any required notices to parents or guardians regarding the organization's use of Evaluio
  • Ensuring that only necessary information is uploaded and that access within the organization is appropriately limited

If you believe we have collected personal information from a child in a manner not permitted by law, please contact us and we will take appropriate steps to delete such information where required.

7. Cookies and similar technologies

We use essential cookies and similar technologies to authenticate sessions, maintain security, remember preferences, and operate the Services. Authentication may be provided by third-party identity providers that set their own cookies subject to their policies.

For website analytics, we use a self-hosted, privacy-focused analytics tool (Umami) that does not use cookies, does not collect personal profiles, and does not share data with third-party advertising networks. Analytics data is aggregated and used solely to understand how the Services are used and to improve them.

You may be able to control cookies through browser settings. Disabling essential cookies may prevent you from using parts of the Services. For additional product-specific cookie details, see our Cookies page where available.

8. Data retention

We retain personal information for as long as reasonably necessary to provide the Services, fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods may vary based on the nature of the data and our relationship with the customer.

Upon account termination or a verified deletion request, we will delete or de-identify personal information within a commercially reasonable period, except where retention is required or permitted by law (for example, billing records, security logs, or litigation-related holds).

9. Security

We implement administrative, technical, and organizational measures designed to protect personal information, including encryption in transit, access controls, authentication, and monitoring practices appropriate to the nature of the Services.

No method of transmission or storage is completely secure. We cannot guarantee absolute security, and you use the Services at your own risk with respect to residual security risks inherent in internet-based systems.

10. International transfers

We may process and store information in the United States and other countries where we or our service providers operate. Those jurisdictions may have data-protection laws that differ from the laws of your country. Where required, we implement appropriate safeguards for cross-border transfers.

11. Your privacy rights

Depending on your location and the role in which we process your information, you may have rights to:

  • Access a copy of personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of personal information
  • Object to or request restriction of certain processing
  • Request portability of certain information
  • Withdraw consent where processing is based on consent
  • Opt out of certain sharing or targeted advertising, where applicable law provides such a right (Evaluio does not sell personal information)

If your information was provided by a club or academy, we may redirect your request to that organization, or process it in cooperation with that organization, because they may be the controller of the data.

To exercise rights, contact hello@evaluio.com. We may need to verify your identity before fulfilling a request. You may also have the right to lodge a complaint with a supervisory authority in your jurisdiction.

12. California and other U.S. state disclosures

If you are a resident of California or another U.S. state with a comprehensive privacy law, you may have additional rights regarding access, deletion, correction, and appeal of a refused request. We do not sell personal information or share it for cross-context behavioral advertising as those terms are commonly defined under such laws.

Categories of personal information we collect are described in Section 2. We collect and disclose such information for the business purposes described in Sections 4 and 5.

13. Third-party links and services

The Services may link to or integrate third-party services (for example, identity providers or payment portals). Their privacy practices are governed by their own policies. We are not responsible for the content or practices of third parties we do not control.

14. Changes to this Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, provide additional notice (for example, via email or an in-product message). Your continued use of the Services after the effective date of a revised Policy constitutes acceptance of the updated terms to the extent permitted by law.

15. Contact us

Questions about this Privacy Policy or our privacy practices may be directed to:

  • Hedgehog Software LLC (d/b/a Evaluio)
  • 30 N. Gould St. Ste R
  • Sheridan, WY 82801, United States
  • Email: hello@evaluio.com
  • Subject line: Privacy Request

This document is provided for general informational purposes and does not constitute legal advice. You should consult counsel for advice specific to your circumstances and jurisdiction.