Privacy Policy

1. Introduction

This Privacy Policy describes how Athlead.AI ("we," "our," or "us") collects, uses, and shares information about you when you use our sports recruiting platform and related services (the "Services").

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, phone number, date of birth
• Profile Information: Academic information, athletic achievements, performance metrics, photos, videos
• Communication Data: Messages, feedback, and other communications with us or other users
• Payment Information: Billing details for paid services (processed by third-party payment processors)

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent on platform
• Device Information: IP address, browser type, operating system, device identifiers
• Cookies and Similar Technologies: See "Cookies and Tracking Technologies" below for details on the categories we use, their purpose, and your opt-out options

2.3 Information from Third Parties

• Social Media: Information from connected social media accounts
• Educational Institutions: Academic records and transcripts (with consent)
• Recruiting Partners: Information shared by colleges, coaches, and recruiting services

3. Cookies and Tracking Technologies

We use cookies, local storage, and similar technologies to operate, secure, and improve our Services. We group these into the categories below; you can manage non-essential categories from your browser or device settings, and where required by law we will request your consent before using non-essential categories.

• Strictly Necessary: Required for core platform functionality, including authentication, session management, security, and load balancing. These cannot be disabled without breaking the Services. Lifetime: session or up to 12 months.
• Functional: Remember preferences such as language, theme, and recently viewed content. Lifetime: typically up to 12 months.
• Analytics and Performance: Help us understand how the Services are used so we can improve them. Lifetime: typically up to 24 months. You can opt out via your browser settings or, where applicable, by exercising the opt-out rights described in Section 7.

We do not use cookies for cross-site advertising. If that changes, we will update this policy and obtain any additional consent required by law.

4. Artificial Intelligence

4.1 AI-Powered Features and Third-Party AI Providers

We use artificial intelligence to power features such as Alex, our AI assistant, along with recruiting insights, matching, and recommendations. Some of these features are operated using third-party AI and large language model ("LLM") service providers. To provide them, we share relevant personal information (such as your messages, prompts, and related profile or platform data) with these providers so they can generate responses and outputs for you. These providers process this information solely on our behalf and under contract, and are not permitted to use it to train their own models. This sharing is necessary to operate AI-powered features and is separate from the optional, consent-based use of your data for AI training described below.

4.2 Use of Your Information for AI Training

IMPORTANT: By using our Services, you consent to your data being used to train artificial intelligence agents that assist with recruiting, matching, and platform improvement. This includes:

• Profile Data: Athletic and academic information to improve matching algorithms
• Interaction Data: Platform usage patterns to enhance user experience
• Communication Data: Messages and feedback to train AI assistants
• Performance Analytics: Athletic metrics to develop predictive models

You may opt-out of AI training by contacting us at privacy@athlead.ai, though this may limit some platform functionality.

5. How We Use Your Information

We use your information to:

• Provide and improve our recruiting services
• Match student-athletes with appropriate opportunities
• Process payments and manage accounts
• Communicate with you about our services
• Train and improve AI systems
• Comply with legal obligations
• Protect against fraud and abuse

6. How We Share Your Information

6.1 With Your Consent

• Colleges and Recruiters: Profile information shared based on your preferences
• Coaches and Schools: Academic and athletic data for recruitment purposes

6.2 Service Providers

We share information with third-party service providers who help us operate our platform, including:

• Cloud hosting providers
• Payment processors
• Email service providers
• Analytics providers
• Third-party AI and large language model service providers (to operate Alex and AI-driven features, as described in Section 4.1)

6.3 Legal Requirements

We may disclose information when required by law or to protect our rights, safety, or property.

6.4 Google User Data and Limited Use

If you choose to connect a Google account (Gmail) to Athlead, we ask for access through Google's OAuth consent screen and access your Google user data only to provide email features inside Athlead. Using the gmail.readonly and gmail.send scopes and your basic Google profile (email address and name), we let you read and display messages and compose and send recruiting emails from your connected mailbox directly within Athlead. Athlead does not modify messages, read state, or labels in your Gmail mailbox.

We access this data only while providing those features, store OAuth tokens and any cached message data using encryption and strict access controls, and let you disconnect your Google account at any time, which revokes our access. We do not sell Google user data, do not use it for advertising, and do not transfer it except as needed to provide these features to you.

No AI training on Google data. Notwithstanding Section 4.2, we do not use data obtained through Google APIs, including the content of your Gmail messages, to train, develop, or improve any generalized or non-personalized artificial intelligence or machine-learning models. Humans do not read this data except where you expressly allow it, where required for security or to comply with applicable law, or in aggregate and de-identified form.

Athlead's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7. Age Requirements and COPPA Compliance

7.1 Age Restrictions and Guardian Confirmation

Children under 13 may not create an account. Users aged 13 to 17 may use Athlead. During sign-up we collect a parent or guardian's name and email and send them a link to confirm guardianship and accept our Terms of Use and this Privacy Policy on the minor's behalf. The minor's account is usable immediately, and the guardian's confirmation is recorded as the consent.

7.2 COPPA Compliance

We comply with the Children's Online Privacy Protection Act (COPPA) and do not knowingly collect information from children under 13. If we learn that we have collected information from a child under 13, we will delete that information promptly.

7.3 Parental Notification

Parents and guardians may contact us at privacy@athlead.ai to:

• Review their child's information (with proper verification)
• Request deletion of their child's account
• Ask questions about our data practices

8. Your Privacy Rights

8.1 General Privacy Rights

Depending on your location, you may have rights including:

• Access: Request a copy of your personal information
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your information
• Portability: Request your data in a portable format
• Opt-out: Opt-out of certain data uses, including AI training

8.2 California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Right to Know: You can request information about:

• Categories of personal information collected
• Categories of sources from which information is collected
• Business or commercial purposes for collection
• Categories of third parties with whom we share information
• Specific pieces of personal information collected about you

Right to Delete: Request deletion of personal information we have collected, subject to certain exceptions.

Right to Correct: Request correction of inaccurate personal information.

Right to Opt-Out: Opt-out of the "sale" or "sharing" of personal information for targeted advertising.

Right to Limit: Limit the use of sensitive personal information.

Right to Non-Discrimination: You will not receive discriminatory treatment for exercising your privacy rights.

Authorized Agents: You may designate an authorized agent to make requests on your behalf.

8.3 European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR):

Legal Basis for Processing: We process your data based on:

• Consent (for optional features like AI training)
• Contract performance (to provide our services)
• Legitimate interests (for platform improvement and fraud prevention)
• Legal obligations (for compliance requirements)

Your GDPR Rights:

• Access: Receive a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restrict Processing: Limit how we use your data
• Data Portability: Receive your data in a structured, machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time (where consent is the legal basis)

Data Protection Authority: You have the right to lodge a complaint with your local data protection authority.

8.4 Canadian Privacy Rights

If you are a Canadian resident, you have rights under applicable provincial and federal privacy laws:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate information
• Withdrawal of Consent: Withdraw consent for certain data uses
• Complaint Rights: File complaints with the Privacy Commissioner of Canada or provincial privacy commissioners

8.5 Other Jurisdictions

We respect privacy rights under applicable laws in other jurisdictions. If you believe you have additional rights under your local privacy laws, please contact us.

8.6 How to Exercise Your Rights

To exercise any of these rights:

• Email: privacy@athlead.ai
• Online Form: Available through your account settings
• Mail: Athlead.AI, Inc.

We will respond to your request within the timeframes required by applicable law (typically 30-45 days). We may need to verify your identity before processing your request.

9. Data Security

We implement commercially reasonable security measures to protect your information, including:

• Encryption of sensitive data
• Secure data storage and transmission
• Regular security assessments
• Access controls and authentication

However, no system is completely secure, and we cannot guarantee absolute security.

10. Data Retention

We retain your information for as long as necessary to provide our services, comply with legal obligations, and resolve disputes. Profile information may be retained even after account deletion to maintain recruiting records.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through our platform.

13. Contact Us

If you have questions about this Privacy Policy, contact us at:

• Email: privacy@athlead.ai
• Address: Athlead.AI, Inc.
• Phone: Available upon request