Security
A short, honest summary
Squad data is sensitive. A club is entitled to ask where it sits and who can read it, so this page answers that plainly rather than in marketing language.
Who can read your data
Every table is protected by row level security in the database itself, not by checks in the app. A request carrying your session can only ever return your own rows, and that is enforced by Postgres rather than by our code remembering to filter.
Club plans are the one exception, by design: scenarios saved by coaches in your club are readable by the others in it. Nothing crosses between clubs.
Where it sits
Data is held in Supabase, on Postgres, encrypted in transit and at rest. Payments run through Stripe and we never see or store a card number.
Scouting notes are stored as you wrote them, in plain text, so that you can read them back. Treat them the way you would treat a written report on a player.
The analysis
When you ask for an analysis, the shape on the board and the notes on the players involved are sent to Anthropic to produce the answer. Nothing is sent unless you ask for an analysis, and the measurements work without it.
Deleting everything
Delete account, on the account page, removes your login, every team and player, every saved scenario, and cancels any active subscription. It happens immediately and we keep no copy.
What we do not claim
Possivo is a young product. We have not been through SOC 2 or ISO 27001, and we are not going to imply otherwise. If your club needs a formal review before it can adopt a tool, write to us and we will tell you honestly what we can and cannot answer today.