Paper Monkey Systems Scheduler

Paper Monkey Scheduler

Privacy Policy

Last updated September 8, 2026

This Policy explains how Paper Monkey Small Business Systems (“Paper Monkey,” “we,” “us,” or “our”) handles information when you use Paper Monkey Scheduler, sign in to your purchase history, or make a purchase.

1. The short version

Creating, checking, and exporting schedules happens on your device. If you choose Save to account after purchase, we also store the verified schedule, its rules, source filename if present, and any repair change log. This lets you sign in on another device and continue. The original spreadsheet file and generated downloads are not uploaded. We also store information needed for payment, account access, requested sign-in email, abuse prevention, and running the service.

2. Information kept on your device

Your browser saves the schedule and a few payment-return details so you can come back from Stripe without losing your work or paying twice. Clearing site data, using private browsing, changing browsers, or changing devices may remove that copy. A saved account copy can be reopened on another device. A purchase receipt alone cannot rebuild a schedule that was never saved or was deleted.

Reading your spreadsheet, building or checking the schedule, making changes, and creating PDF, Excel, and CSV files all happen on your device. Extra spreadsheet columns are ignored. Do not include player names, parent names, contact details, medical information, or other roster data.

3. Information we receive

When you pay, Stripe sends us the purchaser email, its customer and checkout reference numbers, what you bought, the amount and currency, whether payment was completed, and transaction times. We do not receive or store the full payment-card number.

Stripe collects your billing address to calculate applicable sales tax. Billing and tax details are available to us through Stripe for payment support and required tax reporting.

To let you sign in without a password, we store the purchaser email and protected, unreadable codes made from the account session and one-time sign-in link, along with when they expire and whether the link was used. If you request a sign-in link, Resend processes the email address and message needed to deliver it. Resend also processes alerts to our support inbox when a refund needs review. These alerts contain payment and request references, amounts, times, and the reason for review; they do not include your email address, schedule contents, or optional feedback.

Cloudflare and Render may process ordinary network and security information such as IP address, request time, browser characteristics, requested page, response status, and problem logs.

4. Why we use information

We use saved schedule data to reopen your work, verify its recorded rules, and prevent conflicting changes between devices. We use account and transaction information to process and confirm purchases; prevent duplicate charges, fraud, and misuse; protect purchase-history accounts; deliver requested sign-in messages; keep transaction and tax records; process requested refunds; understand optional feedback; fix problems; enforce these Terms; and comply with law.

5. Cookies, analytics, and advertising

The account uses one required sign-in cookie. It is protected so ordinary page scripts cannot read it. Your browser also saves the schedule and the record that opens a paid result. We do not use advertising pixels, behavioral advertising, cross-site tracking, or third-party audience analytics. We do not sell or rent personal information or share it for targeted advertising across different services.

6. Service providers

Render hosts the application and stores account, purchase, refund, and saved-schedule records. Cloudflare provides network routing and security. Cloudflare also stores private recovery copies of these service records. Stripe provides payment processing and sales-tax calculation and may provide receipts. Resend delivers requested sign-in messages and refund-review alerts to us. These providers process information under their own terms and privacy notices and only for the functions we use.

7. Retention and security

One-time links expire after 15 minutes, and sign-in sessions expire after 90 days. Expired sign-in records are routinely removed. Purchase and accounting records are kept as reasonably needed for transactions, fraud prevention, tax, legal, and dispute obligations. Schedules on your device remain until you clear them or the browser removes them. You can remove an account copy from My purchases without deleting your receipt or device copies. We keep saved seasons while you continue using your account. Signing in, using your signed-in account, or making another verified purchase keeps all its saved seasons active. After five years without account activity, we may remove saved schedules only after advance email notice and an opportunity to sign in and keep them or download copies. An old schedule does not expire just because you stop editing it. We record the most recent account activity time for this purpose. Account copies are stored separately from transaction records. Refund request times, decisions, amounts, and payment references form part of the transaction record. Optional feedback is kept separately; you can remove it from the request page without changing the refund record. Do not include sensitive information in feedback.

Restricted recovery copies can temporarily contain account copies or optional feedback you removed. We use them only for service recovery and keep restored information unavailable until deletion and account-access checks are complete.

We use encrypted connections, protected sign-in records, one-use links, restricted cookies, payment confirmation on our server, and access controls appropriate to the information. No system can be guaranteed completely secure.

8. Children’s information

The service is for adult league organizers and is not directed to children under 13. We do not knowingly request personal information from children. Use organization or team names, not a child’s name, as a team name. If you believe child information reached us, contact us so we can evaluate and delete it where appropriate.

9. Choices and requests

You can clear local schedule data with your browser controls and sign out from the Purchases page. Depending on applicable law, you may request access, correction, deletion, or a copy of personal information, or object to certain processing. Email hello@papermonkeysystems.com with “Scheduler Privacy Request” in the subject. We may need to verify the request.

10. Changes and contact

We may update this Policy as the service, providers, or legal requirements change. The date above identifies the current version. Questions may be sent to Paper Monkey Small Business Systems at the email above or PO Box 245, Palouse, WA.