Privacy
SeasonKit is built for youth and team operations where privacy has to be the default. Guardian access, donor anonymity, sponsor review details, payment records, safety notes, and finance exports are limited by role.
Public Raise pages show only approved campaign, participant, donor wall, and sponsor information. Private emails, processor IDs, and raw payment details stay off public pages.
Signed-in Pay, Cart, and Wallet views show each family's own balances, receipts, credits, and refund history without exposing another family's records.
Admin and finance views expose operational evidence only to authorized users, and later modules remain separated until their access model is ready.
Third-party travel partners
SeasonKit Travel uses Duffel as the hotel and flight search-data provider. When you search travel, SeasonKit may share the destination, dates, traveler count, room count, and similar search inputs with Duffel so it can return hotel and flight options; SeasonKit does not send raw payment card data, donor records, safety notes, or unrelated guardian records for travel search.
Current affiliate brands enabled for this environment: none. SeasonKit may share outbound click context, search terms, dates, and group size with an enabled partner link provider when you choose a booking handoff. See the affiliate disclosure for how commissions and travel partner links work.
Your rights
You can request access, correction, or deletion of account profile data. Signed-in users can delete their own account from Account settings, which calls the self-service POST /api/account/delete endpoint to anonymize profile and guardian contact PII while preserving financial and receipt records required for financial retention.
Children's data
SeasonKit collects participant data via coaches, not directly from children. For any participant under 13, we require a parent or legal guardian to acknowledge our data practices via the guardian invite email before the participant's photo is displayed on public fundraising pages. Guardians can request data deletion at any time via the rights section above.