PRIVACY POLICY.

We collect the following information:

• Account information. When you sign up using Google, we receive your name, email address, and Google profile picture.
• Athlete profile data. Information you provide in your profile: graduation year, position, height, weight, GPA, stats, high school, film links, and similar recruiting information.
• Gmail data (with your permission). If you grant Gmail permissions, we access your Gmail account exclusively to (a) send emails on your behalf to college coaches you select and (b) read replies from coaches you have emailed, so we can show them to you in your inbox view and pause active outreach sequences. We do not read, store, or use any other emails.
• Outreach data. The coaches you save, emails you send through the Service, templates you create, tags you apply, and notes you write.
• Payment information. If you subscribe, payment processing is handled by Stripe. We never see or store your credit card number — Stripe sends us only a customer ID, your subscription status, and your billing email.
• Usage information. Standard server logs (IP address, browser type, pages visited). We do not use third-party advertising cookies.

Xam Recruiting's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google user data to provide and improve the core features of the Service (sending emails to coaches, syncing replies from coaches you have contacted).
• We do not transfer Google user data to third parties except as necessary to provide the Service (for example, our database provider).
• We do not use Google user data for serving advertisements.
• We do not allow humans to read Google user data unless we have your explicit consent, it is necessary for security purposes (e.g., investigating abuse), or required by law.

We use your information to:

• Provide, operate, and improve the Service
• Send emails on your behalf to coaches you select, through your connected Gmail account
• Display replies from coaches in your inbox view and stop active outreach sequences when a coach responds
• Process payments and manage subscriptions
• Communicate with you about product updates, billing, and support
• Enforce our Terms of Service and prevent abuse

We do not sell your personal information. We share data only with the following service providers, each of which has agreed to protect your data:

• Supabase — database hosting and authentication
• Stripe — payment processing
• Google — authentication and Gmail sending (you authorize this directly)
• Netlify — application hosting

We may also disclose information if required by law, to enforce our Terms of Service, or to protect the rights, property, or safety of Xam Recruiting, our users, or others.

We retain your data for as long as your account is active. If you delete your account, we permanently delete your profile, saved coaches, sent emails, replies, templates, and Gmail tokens within 30 days. Billing records may be retained longer as required by tax and accounting laws.

You may at any time: access and update your profile information, disconnect your Gmail account, export your data, or delete your account entirely (Settings → Danger Zone → Delete my account). Account deletion is permanent and cannot be reversed.

If you are located in the EU, UK, or California, you have additional rights under GDPR/CCPA, including the right to request a copy of your data and the right to be forgotten. Email us at xcuesta@xamx.org to exercise these rights.

We use industry-standard security practices, including encryption in transit (HTTPS) and at rest, OAuth tokens stored with encryption, and row-level security on our database. No system is perfectly secure — but we work to protect your data the way we would want ours protected.

Xam Recruiting is intended for high school athletes pursuing college recruiting. Users under 13 must have parental consent. If you believe a child under 13 has created an account without consent, email us and we will delete the account.

We may update this Privacy Policy from time to time. If we make material changes, we will notify users by email or in-app notification. Continued use of the Service after changes take effect constitutes acceptance.

Questions about this Privacy Policy? Email xcuesta@xamx.org.