Privacy Policy

Last updated: April 10, 2026

Grandstand (“Grandstand,” “we,” “us”) provides an AI-powered sports media platform for professional athletes. This Privacy Policy explains what information we collect when you use our mobile app, website, and related services, how we use it, and the choices you have.

1. Information we collect

We collect information you provide directly, information created as you use Grandstand, and information from social platforms you choose to connect.

• Account information. Name, phone number, email address, sport, tour, and the answers you give during onboarding.
• Content and conversations. Messages you exchange with our AI agents (Stu, Mack, Clive) over SMS and in the app, including media you upload, captions you approve, and posts you publish.
• Social account data. When you connect a social account through our partner Bundle.social, we receive public profile information, engagement metrics, and post history from Instagram, TikTok, X/Twitter, or YouTube. Grandstand never stores your social platform passwords or OAuth tokens — those remain with Bundle.social.
• Device and usage data. App version, operating system, anonymous crash diagnostics, and push-notification tokens.

2. How we use your information

• To provide and operate the Grandstand service.
• To personalize the content our AI agents generate for you, including captions, recaps, and newsletters.
• To schedule and publish the posts you approve to the social platforms you have connected.
• To send you SMS check-ins, content drafts, and service updates.
• To improve the product and fix issues.
• To comply with legal obligations.

3. How we share your information

Grandstand does not sell your personal information. We share data only with the service providers required to run the product:

• Supabase — authentication, database, and file storage.
• Anthropic (Claude) — AI model provider for our Stu, Mack, and Clive agents.
• Bundle.social — social account connections and post publishing to Instagram, TikTok, X/Twitter, and YouTube.
• Twilio — SMS delivery.
• Resend — email delivery (newsletters, account notices).
• Vercel, Inngest — application hosting and background job processing.
• Stripe — payment processing for Fan Fund contributions and premium subscriptions.

4. How we protect your information

All traffic to and from Grandstand is encrypted in transit using TLS 1.2 or higher. Data at rest is encrypted on our hosted infrastructure providers. Access to production systems is limited to employees and contractors who need it to operate the service.

5. Your choices

• Disconnect a social account. You can disconnect any connected account at any time from within the Grandstand app. When you do, we revoke our access through Bundle.social.
• Opt out of SMS. Reply STOP to any Grandstand text message to unsubscribe from SMS.
• Turn off push notifications. Use the Settings screen inside the Grandstand app, or your device's system settings.
• Delete your account. You can permanently delete your Grandstand account and associated data from the Settings screen inside the app, or by emailing support@grandstand.io. Deletion is irreversible.

6. Children

Grandstand is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us information, please contact us and we will delete it.

7. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the app or by email. The “Last updated” date at the top of this page will always reflect the latest revision.

8. Contact us

Questions about this Privacy Policy or our data practices? Email us at support@grandstand.io.