Privacy Policy

Last updated: June 19, 2026

Applies to: https://priderecruit.org ("PrideRecruit", "we", "us", "our")

PrideRecruit is a recruiting-management platform that helps high-school field hockey student-athletes organize their college recruiting process — tracking communications from college coaches, managing a school list, and staying on top of deadlines and events. This Privacy Policy explains what information we collect, how we use it, how we protect it, and the choices you have. It includes specific disclosures about data we access through Google APIs (Gmail and Google Calendar).

1. Information We Collect

Information you provide

• Account information: your email address and, if you create a password, a securely hashed password. Authentication is via magic link or email/password.
• Profile and recruiting information: details you enter such as graduation year, position, academic information, target schools, notes, tags, tasks, offers, and events.
• Content you create: emails you compose to coaches through our Outreach Studio, and any notes or logs you add.

Information we access through Google APIs (with your consent)

If you choose to connect your Google account, we request only the scopes needed for the features you use:

Google scope	What it lets us do	Why
gmail.readonly	Read messages in your Gmail inbox	To identify and analyze emails from college coaches and recruiting programs and present a prioritized recruiting summary.
gmail.send	Send email from your Gmail address	To send introductory emails to coaches that you compose and approve in Outreach Studio.
calendar	Create and update Google Calendar events	To sync recruiting events, camps, clinics, and visit deadlines to your calendar.
userinfo.email	Read the email address of the connected Google account	To associate your Google connection with the correct PrideRecruit account.

You can decline any of these and still use the parts of PrideRecruit that don't require them. You can disconnect Google access at any time (see Your Choices & Data Deletion).

Information collected automatically

• Usage and device data: basic technical data such as request timing and error logs, used to operate and secure the service. We redact query strings from logs and never log credentials.
• Cookies: a single session cookie (fh_session) to keep you logged in. We do not use third-party advertising cookies.

2. How We Use Your Information

• To provide and operate the recruiting platform and the features you choose to use.
• To read and classify your recruiting emails so we can surface the most important coach communications and next steps.
• To send emails you compose and to sync calendar events at your request.
• To authenticate you, secure your account, and prevent abuse.
• To communicate with you about your account (e.g., magic links, transactional emails) and, where applicable, billing.

3. How We Use Google User Data (Limited Use)

Specifically, with respect to data obtained through Google APIs (including Gmail content):

• We use Google user data only to provide and improve the user-facing features described in this policy.
• We do not sell Google user data, and we do not use or transfer it for advertising, ad targeting, or credit-related purposes.
• We do not allow humans to read your Gmail or Google Calendar data, except: (a) with your explicit consent (e.g., to troubleshoot a support request you raise); (b) where necessary for security, to investigate abuse, or to comply with applicable law; or (c) where the data has been aggregated and anonymized for internal operations.
• We do not use Google user data to develop, improve, or train generalized or non-personalized AI and/or machine-learning models.

AI processing of email content

To classify recruiting emails, the cleaned text of relevant messages is sent to our AI provider, Anthropic, via its API solely to generate the classification and summary you see in the app. Anthropic does not use data submitted through its API to train its models. This processing exists only to provide the email-analysis feature to you.

4. How We Share Information

We do not sell your personal information. We share data only with service providers ("subprocessors") that help us run PrideRecruit, each bound to protect your data:

Provider	Purpose
Supabase	Database and storage of your account and app data
Anthropic	AI classification of recruiting email content
Google	Gmail and Google Calendar access you authorize
Stripe	Payment processing (if you subscribe)
Resend	Transactional email delivery (e.g., magic links)
Railway	Application hosting

Coach/parent collaboration: if you (the athlete) explicitly invite a coach or parent to your account, the people you invite can view the recruiting information you choose to share with them. You control these invitations and can revoke them.

We may also disclose information if required by law, or to protect the rights, safety, and security of our users and our service.

5. Data Storage & Security

• Data is stored in our database (Supabase/PostgreSQL) with row-level security isolating each user's records.
• Data is encrypted in transit (HTTPS) and at rest by our infrastructure providers.
• Google OAuth tokens are stored server-side and never exposed to the browser; OAuth flows use signed, verified state to prevent account-linking attacks.
• Access to production systems is restricted, and credentials are never placed in URLs or logs.

No method of transmission or storage is 100% secure, but we work to protect your information using industry-standard safeguards.

6. Data Retention

We keep your information for as long as your account is active or as needed to provide the service. Scanned email analysis is cached to power your dashboard and is refreshed or removed as you rescan or delete it. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where retention is required by law.

7. Your Choices & Data Deletion

• Disconnect Google: you can disconnect Gmail/Calendar from within the app at any time, which revokes our access tokens.
• Revoke at Google: you can also remove PrideRecruit's access directly at myaccount.google.com/permissions.
• Delete your data / account: email us at the address below to request deletion of your account and associated data, including any cached Google data.
• Access & correction: you may request a copy or correction of your personal data.

8. Children's Privacy

PrideRecruit is intended for high-school student-athletes and the families and coaches who support them. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, please contact us and we will delete it. We encourage parental and guardian involvement for younger student-athletes.

9. International Users

PrideRecruit is operated from the United States. If you access the service from outside the United States, you understand your information will be processed in the United States, where data-protection laws may differ from those in your country.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide a more prominent notice.

11. Contact Us

Questions about this policy or your data? Contact us at [email protected].