Privacy Policy
Last updated: [DATE]
1. Who this covers
This policy describes how [COMPANY] ("HER THANG," "we," "us") handles information collected through the HER THANG platform, including the Coach Portal, Athlete/Parent Hub, and College Scout Matrix. It applies to coaches, athletes, parents/guardians, and scouts who create an account.
2. A note on minors
Many athletes on this platform are high school students under 18. Where a state or federal law requires parental consent, verification, or additional protections for a minor's data, those requirements apply here and take precedence over anything else in this policy. If you are a parent or guardian and believe your child's information was collected without appropriate consent, contact us at [PRIVACY CONTACT EMAIL] and we will address it.
3. Information we collect
Account information: name, email, and role (coach, athlete/parent, or scout) via our authentication provider (Supabase). Athlete recruitment profile information: position, graduation year, height/weight, and a highlight video link, entered voluntarily by the athlete or their parent/guardian and shown to coaches and scouts only as described below. Team and roster data entered by coaches: team name, roster membership, game schedules and scores, and play diagrams. Game film, when a coach chooses to upload it, which is processed by an AI service (see Section 6) to extract statistics. Payment information for team registration fees, handled by Stripe (see Section 6) — we do not store full card numbers ourselves. Standard technical data (IP address, browser type, access times) collected automatically for security and rate-limiting purposes.
4. How we use it
To operate the platform: authenticating accounts, displaying rosters to the right coach, showing recruitment profiles to scouts only when the athlete has opted in ("visible to scouts"), and processing registration payments. To provide AI-assisted features, such as extracting a box score from uploaded game film. To keep the platform secure, including rate-limiting abusive requests and investigating misuse. We do not sell personal information.
5. Who can see what
A coach can see their own team's roster and the recruitment profiles of athletes on their team. A scout can see an athlete's recruitment profile only if that athlete (or their parent/guardian) has explicitly marked it visible to scouts. An athlete/parent can see and edit only their own profile. Row-level access controls in our database enforce these boundaries — a coach or scout account cannot query another team's private data even by trying to.
6. Third parties we share data with
Supabase (database, authentication, and file storage — game film is stored here before AI analysis). Stripe (payment processing for registration fees; Stripe Connect for paying out to teams — Stripe's own privacy policy governs data it processes directly). Google (Gemini API) for AI analysis of uploaded game film — video is sent to Google for processing and is not used by Google to train models outside the terms of our API agreement with them. Netlify (hosting). We do not share data with third parties for their own marketing purposes.
7. Data retention and deletion
We retain account and roster data for as long as an account is active. Uploaded game film is retained to support re-analysis and coach review; [RETENTION PERIOD — e.g., a specific number of seasons] should be decided and stated here. To request deletion of your account or data, contact [PRIVACY CONTACT EMAIL].
8. Security
We use industry-standard access controls (row-level security policies, rate limiting, and encrypted connections) to protect data in transit and at rest. No system is perfectly secure; we will notify affected users as required by law in the event of a breach.
9. Changes to this policy
We may update this policy as the platform changes. Material changes will be posted here with an updated "last updated" date.
10. Contact
Questions about this policy: [PRIVACY CONTACT EMAIL].