Privacy Policy

1. Information We Collect

1.1 Information You Provide

When you create an account and use our services, we collect:

• Account Information: Name, email address, password (encrypted)
• Profile Information: Player or coach profiles, including biographical data, photos, statistics
• Contact Information: Phone number, school name, address, city, state
• Athletic Information: Position, height, weight, graduation year, GPA, test scores
• Media: Photos, videos, and other content you upload
• Payment Information: Processed securely through Stripe (we don't store card details)
• Communications: Messages, evaluations, and notes (encrypted where applicable)

1.2 Automatically Collected Information

When you use our platform, we automatically collect:

• Usage Data: Pages visited, features used, time spent, search queries
• Device Information: IP address, browser type, device type, operating system
• Log Data: Access times, error logs, performance data
• Cookies: Session tokens, preferences, analytics (see Cookie Policy)

1.3 Information from Third Parties

We may receive information from payment processors (Stripe), email service providers (Resend), and other service providers necessary to operate our platform.

2. How We Use Your Information

We use your information to:

• Provide Services: Create and manage your account, display profiles, enable searches
• Process Payments: Handle subscriptions, billing, and refunds
• Communicate: Send service updates, subscription notifications, password resets
• Improve Platform: Analyze usage patterns, fix bugs, develop new features
• Safety & Security: Prevent fraud, enforce terms, protect user safety
• Legal Compliance: Comply with laws, respond to legal requests
• Marketing: Send promotional emails (with your consent, opt-out available)

3. Information Sharing and Disclosure

3.1 Public Information

Player profiles marked as "public" are visible to:

• College coaches with active accounts
• Other authenticated users (based on your settings)
• Search engines (if you enable public visibility)

3.2 Private Information

We keep private and encrypted:

• Coach evaluations and notes
• Email addresses (unless you choose to share)
• Payment information
• Account credentials

3.3 Service Providers

We share data with trusted third parties who help us operate:

• Stripe: Payment processing
• Resend: Email delivery
• Vercel: Hosting infrastructure
• Database Providers: Data storage

These providers are contractually bound to protect your data and use it only for specified purposes.

3.4 Legal Requirements

We may disclose information when required by law, court order, or to protect rights, safety, and security.

4. Data Security

We implement industry-standard security measures:

• Encryption: HTTPS/TLS for data in transit, AES-256 for sensitive data at rest
• Authentication: Secure password hashing (bcrypt), JWT session tokens
• Access Controls: Role-based permissions, principle of least privilege
• Monitoring: Activity logging, anomaly detection
• Updates: Regular security patches and audits

While we strive to protect your data, no method of transmission over the Internet is 100% secure. Please use strong passwords and keep your credentials confidential.

5. Your Rights and Choices

5.1 Access and Update

You can access and update your information through your account settings at any time.

5.2 Data Portability

You can export your profile data in a machine-readable format (PDF/JSON) from your dashboard.

5.3 Delete Your Account

You can request account deletion by contacting support. We will delete your data within 30 days, except where required by law to retain it.

5.4 Marketing Opt-Out

You can unsubscribe from marketing emails via the link in each email or through account settings. We'll still send essential service emails.

5.5 Cookie Controls

You can control cookies through your browser settings. See our Cookie Policy for details.

6. Children's Privacy

Our platform is designed for high school students (typically ages 14-18) pursuing college recruitment. For users under 18, we recommend parental involvement. We comply with applicable privacy laws including COPPA where required. Parents can contact us to review, modify, or delete their child's information.

7. International Data Transfers

Your data may be transferred to and processed in the United States or other countries where our service providers operate. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

8. Data Retention

We retain your information:

• Active Accounts: As long as your account is active
• Inactive Accounts: Up to 2 years, then automatically deleted
• Payment Records: 7 years (legal requirement)
• Marketing Data: Until you opt out or 3 years of inactivity
• Backup Data: Up to 90 days in backup systems

9. Changes to This Policy

We may update this Privacy Policy periodically. We'll notify you of material changes via email or through the platform. Continued use after changes constitutes acceptance of the updated policy. We encourage you to review this policy regularly.

10. California Privacy Rights

California residents have additional rights under CCPA:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to access your personal information
• Right to delete your personal information
• Right to opt-out of sale (we don't sell your data)
• Right to non-discrimination for exercising privacy rights

To exercise these rights, contact us using the information below.

11. EU/UK Data Protection Rights

Under GDPR, EU/UK residents have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure ("right to be forgotten")
• Restrict processing
• Data portability
• Object to processing
• Lodge a complaint with supervisory authority

12. Contact Us

For privacy-related questions, concerns, or to exercise your rights: