Privacy Policy — Prospecta

Prospecta ("Prospecta," "we," "us," or "our") provides AI-powered college sports recruiting assessments, planning tools, and related services (collectively, the "Services") through getprospecta.app and related domains. This Privacy Policy explains what information we collect, how we use and share it, and the choices you have. By using the Services you agree to this Policy and to our Terms of Service.

1. Who this Policy applies to

The Services are intended to be used by parents, legal guardians, and adult athletes (age 18+). When information about a youth athlete under 18 (a "Minor Athlete") is provided to us, we rely on the parent or legal guardian who created the account to have the right to share that information and to act as the Minor Athlete's authorized representative.

2. Information we collect

Information you provide

Account information — name, email, password, and authentication identifiers (including from Google sign-in).
Athlete profile data — athlete name, gender, grade, graduation year, sport, position, club, height, hometown, GPA, SAT/ACT scores, sport-specific metrics (e.g., UTR), tournament results, achievements, video links, headshots, and transcripts you upload.
Recruiting preferences — geographic flexibility, target division level, and other assessment inputs.
Outreach and notes — coach contact records, email drafts, status updates, and notes you create inside the platform.
Billing information — for paid subscriptions, payment details are collected and processed by our payment processor (Stripe). We receive limited information such as subscription status, plan, renewal date, and the last four digits of the card.
Communications — messages you send us by email or through support channels.

Information collected automatically

Usage data — pages viewed, features used, assessment activity, approximate location derived from IP address, device and browser information, and referring URLs.
Cookies and similar technologies — see Section 7.

Information from third parties

Authentication providers (e.g., Google) that you choose to use to sign in.
Payment processors that confirm subscription events.
Public information about college programs and coaches used to power our recruiting database.

3. How we use information

Provide, operate, and improve the Services and assessments.
Generate AI-assisted recommendations, school lists, and outreach drafts.
Manage your account, subscription, and customer support.
Send transactional messages about your account or the Services.
Detect, prevent, and respond to fraud, abuse, and security issues.
Comply with legal obligations and enforce our Terms.
With your consent, send product updates, recruiting tips, and marketing communications you can unsubscribe from at any time.

We do not sell personal information, and we do not use information about Minor Athletes for behavioral advertising or to train third-party AI models.

4. AI processing

The Services use third-party large language model providers to generate assessments and recommendations. Assessment inputs (athlete metrics, sport, grade, preferences) are sent to those providers under contracts that restrict their use of the data to providing the service back to us and prohibit using it to train their models. We do not send direct identifiers such as full name, email, address, or phone number to these providers as part of assessment generation.

5. How we share information

Service providers who help us run Prospecta — including cloud hosting, database, authentication, email, payments, analytics, and AI providers — under written agreements requiring appropriate safeguards.
Public portfolio pages — if you choose to publish an athlete portfolio, the information you mark as visible becomes publicly accessible on the web. You control what is included and can unpublish at any time.
Legal and safety — to comply with law, valid legal process, or to protect the rights, property, or safety of Prospecta, our users, or others.
Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

6. Children and Minor Athletes

The Services are not directed to children under 13 and we do not knowingly collect personal information directly from a child under 13. Accounts must be created by an adult (18+). Parents and legal guardians may provide information about a Minor Athlete (including a child age 13 or older) for the purpose of recruiting assessments, planning, and outreach.

We apply additional protections to Minor Athlete data: we collect only the information needed to provide the Services, we do not use it for advertising, and we make portfolio pages private by default. A parent or legal guardian may request access to, correction of, or deletion of a Minor Athlete's information at any time by contacting hello@getprospecta.app. If you believe a child under 13 has provided us information without parental involvement, contact us and we will delete it.

7. Cookies and tracking

We use strictly necessary cookies to keep you signed in and to remember your settings, and optional analytics cookies to understand how the Services are used. You can accept or reject non-essential cookies using our cookie banner, and you can clear cookies at any time in your browser settings. We do not use third-party advertising cookies.

8. Data retention

We retain personal information for as long as your account is active or as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we delete or de-identify your personal information within a reasonable period, except where retention is required by law.

9. Security

We use industry-standard administrative, technical, and physical safeguards — including encryption in transit, access controls, and row-level security on user data — to protect personal information. No system is perfectly secure; if we learn of a security incident affecting your information, we will notify you and the appropriate authorities as required by law.

10. Your choices and rights

Depending on where you live, you may have the right to:

Access, correct, update, or delete your personal information.
Object to or restrict certain processing of your information.
Port your information to another service.
Withdraw consent where processing is based on consent.
Lodge a complaint with a supervisory authority (residents of the EEA, UK, and similar jurisdictions).

California residents have specific rights under the CCPA/CPRA, including the right to know, delete, correct, and limit the use of sensitive personal information, and the right not to be discriminated against for exercising these rights. We do not "sell" or "share" personal information for cross-context behavioral advertising as those terms are defined under California law.

To exercise any of these rights, contact hello@getprospecta.app from the email address on file. We may need to verify your identity before acting on a request.

11. International users

Prospecta is operated from the United States. If you access the Services from outside the U.S., your information will be transferred to and processed in the U.S. and other countries that may have different data protection laws than your jurisdiction.

12. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will notify you by email or through a notice in the Services. The "Last updated" date above reflects the most recent revision.

13. Contact us

Questions or requests about this Policy or your information: hello@getprospecta.app.