Legal
Privacy
Rockbeach Currents is a reporting tool for athletic departments. It holds the revenue figures your own staff enter and records for the staff who enter them. It does not hold data about your ticket buyers, your donors, or your students.
Who we are
Rockbeach Currents is operated by Rockbeach, LLC. Where we hold personal data about your staff, we do so as your service provider and on your instructions — the School remains responsible for it, and we process it only for the purposes below.
What we hold
We hold two kinds of thing, and it is worth being precise about both.
Operational data. Revenue by category, goals, game results and attendance, sponsor accounts and their named contacts, pricing, and the notes people attach to their weekly figures.
Staff data. Names, work email addresses, job titles, hire and departure dates, and — for sales representatives — individual activity and sales figures, including how promptly each person filed.
What we do not hold
No ticket-buyer or donor personal data. No payment card details. No individual fan account information. No student records. We do not ask for any of it and the product has nowhere to put it.
Why we hold it
- To run the product for you and the people you have authorized
- To produce your reports, analyses and forecasts
- To keep backups and restore from them
- To diagnose faults — see the note on error reports below
We may publish aggregated, de-identified benchmarks across schools, such as an average renewal rate by conference. An aggregate never identifies a school and never exposes one school’s figures to another.
Artificial intelligence, stated plainly
Your weekly figures are sent to Anthropic to generate the written analysis and the AD Insights narrative. What is sent is the numbers and goals for the week being analyzed. Staff names, email addresses and rep-level records are not sent. The output is stored against your school and shown only to your own people.
Every company outside Rockbeach that touches your data is named on the subprocessors page, along with what specifically reaches them.
When something breaks
When a page fails we record the error, the page it happened on, and — if you were signed in — who you are, so we can tell whether it affected one person or everybody. If you use the help form, we keep what you wrote so nothing is lost between you asking and us answering.
Cookies
One cookie, and it is the one that keeps you signed in. It holds a random token and nothing about you. There is no advertising cookie, no third-party tracker and nothing shared with anybody for marketing. We also record which pages signed-in users visit, to see which parts of the product get used — that stays with us and is never sold. The cookie itself carries nothing about you; the sign-in record it points at, on our side, holds a little more, and the next section says exactly what.
The records the software keeps about itself
Running a product securely leaves a technical trail, and it is fair to say what is in it.
Sign-ins. Each active session records the IP address and browser it came from, and when it was last used. That is how we can tell a session apart from one that is not you, and how an account can be signed out everywhere.
Password resets. When somebody asks to reset a password, we record the IP address that asked, so a flood of requests against one account is visible.
Changes to your data. An audit log records who changed what and when, including the values before and after. It is what lets us answer “who changed this figure, and what was it before?” — a question a finance office is entitled to ask.
None of this is used to build a profile of anybody, none of it is sold, and none of it is shared for marketing. It is kept for as long as the account is, and goes when the account does.
Text messages
We ask, on the signup form and in your own account settings, whether we may text you. It is optional, unticked by default, and nothing about the product depends on your answer. We text about two things and nothing else: a reminder when your numbers have not been entered by your school’s close-out day, and occasional notes about changes to the product. Never marketing.
If you say yes we keep the exact sentence you were shown alongside your answer and the date, because the question later is never whether a box was ticked but what you agreed to. Reply STOP to any message and we record that too — the message you sent, the number it came from, and the fact that you have withdrawn. You can change your mind at any time in your account settings without asking anybody.
Your address and your browser
When you sign in we record the network address you came from and the browser you used, against that session. We do it so a session can be recognized and cut off if it is not yours — it is how somebody signed in twice in two places can be told apart. The same is recorded when a password reset is requested, for the same reason: a reset arriving from somewhere unexpected is the thing worth being able to see.
It is not used for anything else. Not analytics, not location, not advertising, and it is never sold or shared. It goes when the session does.
When a school signs up, the browser also tells us its time zone, and we keep that as the school's clock so dates and deadlines read in local time. It is a setting, not a record of you: a school administrator can see it and change it under Reporting & deadlines.
How long we keep it
- While your subscription is active, for as long as you need it
- 365 days after it ends, so a school coming back within a year finds its history intact
- After that we destroy it, backups included. No copy is kept for any purpose
You can ask us to delete sooner and we will, within 30 days, unless the law requires us to keep something. You can export your data at any time while your subscription is active.
Where it lives
In the United States, other than the phone-alert service noted on the subprocessors page, which is operated from Germany and receives only a school name and the type of request.
Your rights
Ask us what we hold about you, correct it, or have it deleted. Write to legal@rockbeachcurrents.com. If you are staff at a subscribing school, tell your administrator too — some of it is theirs to decide.
Changes
We will date any change at the top of this page and tell account holders about material ones before they take effect.