Privacy Policy

1. Information we collect

Account information. Name, email address, password (stored as a one-way hash), and role (athlete, parent, admin).

Player profile. The recruiting details you choose to provide: position, graduation year, academics, physical attributes, statistics, honors, highlight video links, and target schools.

Gmail OAuth tokens. To send email from your Gmail account, you authorize us via Google OAuth. We request two scopes:

• gmail.send — to send recruiting emails you have reviewed and approved, from your Gmail account.
• userinfo.email — to read your Google account's email address so we can identify which account is connected. This grants no mailbox access of any kind.

We do not read your Gmail inbox. Coach replies are logged manually by you on the Responses page.

Tokens are stored encrypted and used solely for the above purposes. You can revoke access anytime in your Google account settings. College Soccer Reach's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Coach directory. Names, titles, and work email addresses of college coaches collected from publicly available athletic staff directories.

Usage and tracking. When a coach opens your email or clicks your highlight link, our tracking records an open or click event tied to your send. We log send status, bounces, and unsubscribes to operate the service.

2. How we use information

• Operate the service: generate drafts, send approved emails, track engagement.
• Notify you when coaches engage with your emails (opens, video clicks).
• Maintain and verify the coach directory.
• Process subscriptions and enforce plan limits.
• Detect abuse, prevent spam, and protect the platform.

We do not sell personal information. We do not use athlete profile data for advertising.

3. How we share information

We do not sell your personal information, including Google user data, and we never share it for advertising or marketing by third parties. We share, transfer, or disclose information only in these cases:

• Email recipients you choose. When you review and approve a recruiting email, it is sent from your Gmail account to the coaches you selected. Those recipients receive your name, your email address, and the content of your message — that is the purpose of the service, and it happens only at your direction.
• Service providers. We use a small number of providers that process data only to operate College Soccer Reach, under confidentiality obligations: Railway (application hosting and database, where account data and encrypted OAuth tokens are stored), Resend (delivery of our own account emails, such as password resets and engagement alerts), and Stripe (payment processing). Email you send to coaches goes through your own Gmail account, not through these providers.
• Legal requirements and safety. We may disclose information if required by law (for example, a subpoena or court order) or when necessary to protect the rights, safety, or security of our users or the platform.
• Business transfer. If College Soccer Reach is sold or merged, user data may transfer to the successor organization, subject to this policy.

Other than as described above, we do not share, transfer, or disclose Google user data (your Google account email address and OAuth tokens) to any third party.

4. Children's privacy

Our service is used by student-athletes, many of whom are minors. Users must be at least 13. Users under 18 require verifiable parental consent before sending email. Parents may review, correct, or delete their child's data at any time.

5. Data security

Encryption in transit (TLS) and at rest. OAuth tokens are encrypted. Passwords are hashed. If we learn of a data breach affecting your information, we will notify you as required by law.

6. Your rights

You may request access to, correction of, or deletion of your personal information at any time by contacting us. Deleting your account removes your profile, drafts, and OAuth tokens.

7. Contact

For privacy questions, contact us at collegesoccerreach@gmail.com.