Privacy Policy

1. Overview

This policy explains what Recruit Fit Engine LLC ("RFE") collects through our website, database, community, and consulting bookings, and how we use it.

2. What we collect

• Account info: name, email, and password (managed by Supabase Auth; we never see your raw password).
• Profile & recruiting info: grad year, position, hometown, HS offers, Hudl links, and similar details.
• Payment info: processed by Stripe; we never see your full card number.
• Community content: posts, comments, likes.
• Consulting inquiries: contact and athlete details submitted through our booking form.
• Sign-in cookie: when you sign in, we store a cookie on that browser so your own visits, your parents', and RFE staff's never count toward your profile views or coach opens. It holds account ids only, signed so it can't be faked, and is kept up to a year. Nothing else is tracked by it.

3. How we use it

To operate the Service, process payments, schedule consulting sessions, run community features, and communicate with you about your account.

4. Who we share it with

We don't sell your data. We share it only with the providers that run RFE, and only what each one needs: Supabase (database and sign-in), Vercel (hosting), Stripe (payments), Calendly (scheduling), Resend (email), PostHog (product analytics, tied to an account ID rather than your name or email), and Anthropic (the AI behind Ask RFE and message checks). Ask RFE sends Anthropic your question with your class year and position, not your name. A message check sends your draft and the profile facts it's checked against, such as your name, measurables, GPA and high school. We also share data when required by law.

5. Children's privacy

RFE is built for high school athletes (generally 14+), college athletes, and their families. We don't knowingly collect information from children under 13.

6. Retention & security

We keep your data while your account is active and for a reasonable period after, and use industry-standard safeguards to protect it.

Questions you ask RFE in the message helper, and the answers, are deleted after 180 days.

7. Gmail

If you connect a Gmail account to send coach emails from RFE, RFE asks Google for one permission: to send email as you. RFE uses it only to send the messages you write and press Send on, to the coach you chose. RFE never reads, searches, labels or deletes your email, and never sees your Gmail password. The connection key Google gives RFE is stored encrypted, and only RFE's server can use it. From your Google Account, RFE keeps only your Gmail address, that encrypted key, and the ID of each message you send, so follow-ups stay in the same thread. That information is never sold, never sent to our analytics or AI providers, never used for advertising, and never used to train AI. You can disconnect any time in Settings, which deletes the key and ends RFE's access at Google, or in your Google Account under Security → Your connections to third-party apps & services. RFE's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

8. Your rights

Request a copy, correction, or deletion of your data anytime at mason@recruitfitengine.com.

9. Contact

Questions about your data? mason@recruitfitengine.com