Privacy policy

2. Information We Collect

• Account data: Email, name, and authentication credentials
• Evaluation data: Athletic metrics (height, weight, combine results), sport, position, and graduation year
• Profile data: GPA, high school, and optional links (e.g., Hudl)
• Usage data: First-party product events and anonymized interaction data where possible

3. How We Use Your Information

We use your information to provide evaluations, benchmark comparisons, coach visibility features, and support. We do not sell your personal information. When Ask XFR or coach outreach drafting features are enabled, we may send limited athlete context to OpenAI to generate responses; those features use server-side API calls only.

4. Youth Privacy (13+)

X Factor Recruits is a 13+ high-school recruiting platform. We do not knowingly collect personal information from children under 13, and we do not offer under-13 accounts at launch.

Athletes 13–17 use a parent/guardian-linked experience: a parent may create the account, or the athlete provides a guardian email and shares a family view link. Coach discovery stays off until a parent or guardian confirms they are involved. We do not use personal information for advertising. A parent or guardian must agree to our Terms on behalf of users under 18.

5. Data Sharing & Subprocessors

We share data only with service providers necessary to operate our platform. When you enable coach visibility, verified coaches may view your evaluation data in accordance with your settings.

Current subprocessors include:

• Supabase — authentication, database, and file storage
• Vercel — application hosting
• Stripe — payment processing when paid Coach Pro billing is enabled
• Upstash — rate limiting (hashed identifiers)
• Cloudflare Turnstile — bot protection on signup
• OpenAI — optional AI-assisted chat and email drafting (when configured)

6. Data Retention

We retain personal information only as long as reasonably necessary to provide the service, comply with law, and resolve disputes. Account and athlete profile data are kept while your account is active. Parent/guardian magic links expire after 90 days by default. Security audit logs may be retained in anonymized form after account deletion.

7. Your Rights

You may access and correct your data through your dashboard profile and account settings. You may export a JSON copy of your account from the Profile tab under "Export my data," and delete your account under "Delete account," or contact us for assistance. Parents or guardians may request review or deletion of a minor's information by contacting privacy@xfactorrecruits.com.

8. Contact

For privacy-related questions: Contact Us or email privacy@xfactorrecruits.com.