Privacy Policy

Proactive Athletes, LLC ("Proactive Athletes," "we," "us," or "our") operates the recruiting intelligence platform available at recruit.proactiveathletes.com (the "Platform"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Platform. It applies to all users, including student athletes, parents, guardians, coaches, and administrators.

By creating an account or using the Platform, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Platform.

1. Information We Collect

1.1 Information You Provide Directly

When you register for and use the Platform, we collect information you voluntarily provide, including:

• Full name, email address, and password
• Athletic profile data: sport, position, graduation year, GPA, test scores, height, weight, and athletic statistics
• Academic information: school name, class rank, intended major, and extracurricular activities
• Highlight video URLs and links to external recruiting profiles (e.g., Hudl, MaxPreps)
• Target school lists and recruiting preferences
• Communications and messages sent through the Platform
• Billing and payment information (processed by Stripe — see Section 4)
• Profile photos and media uploads

1.2 Information Collected Automatically

When you access the Platform, we automatically collect certain technical information, including:

• IP address, browser type, operating system, and device identifiers
• Pages visited, features used, and time spent on the Platform
• Referring URLs and click-through data
• Session data stored via secure HTTP-only cookies and JSON Web Tokens (JWTs)

1.3 Information from Third-Party Services

If you choose to sign in using Google OAuth, we receive your name, email address, and Google profile picture from Google. We do not receive your Google password. We use this information solely to create and authenticate your account. You can revoke this access at any time through your Google Account settings.

We may also receive information from our affiliate and partner referral program (ARA Partners) when they refer you to the Platform.

2. How We Use Your Information

We use the information we collect for the following purposes:

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following limited circumstances:

3.1 Service Providers

We share information with trusted third-party service providers who assist us in operating the Platform. These providers are contractually obligated to use your data only to perform services on our behalf:

3.2 Public Athlete Profile

The Platform includes a public-facing Athlete Profile page. Information you choose to include in your public profile — such as your name, sport, position, graduation year, athletic statistics, and highlight videos — may be visible to college coaches, recruiters, and other users who access your profile URL. You control what information appears on your public profile and can update or restrict it at any time through your Profile Settings.

3.3 ARA Partners

If you were referred to the Platform by an Athlete Recruiting Advisor (ARA) partner, your enrollment status and subscription information may be shared with that partner for commission and reporting purposes. We do not share your detailed personal or athletic data with ARA partners without your consent.

3.4 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency). We will notify you of such requests to the extent permitted by law.

3.5 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on the Platform before your information becomes subject to a different privacy policy.

4. Payment Information

All payment transactions are processed by Stripe, Inc., a PCI-DSS Level 1 certified payment processor. We do not store your full credit card number, CVV, or bank account details on our servers. Stripe handles all payment data in accordance with their Privacy Policy. We retain records of transaction amounts, dates, and subscription status for billing and legal compliance purposes.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to maintain your session, remember your preferences, and analyze Platform usage. Specifically:

• Session Cookies: Secure, HTTP-only cookies that authenticate your session. These are deleted when you sign out or your session expires.
• Preference Cookies: Store your language and display preferences (e.g., light/dark mode).
• Analytics: We use privacy-respecting analytics to understand aggregate usage patterns. We do not use Google Analytics or other third-party advertising trackers.

You can control cookie behavior through your browser settings. Disabling cookies may prevent you from signing in or using certain features of the Platform.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal, tax, or fraud prevention purposes (typically up to 7 years for financial records). Anonymized, aggregated data may be retained indefinitely for analytics purposes.

7. Data Security

We implement industry-standard security measures to protect your information, including:

• TLS/HTTPS encryption for all data in transit
• Bcrypt password hashing — we never store plaintext passwords
• JWT-based session tokens with expiration and rotation
• Role-based access controls limiting data access to authorized personnel
• Regular security reviews and dependency updates

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. In the event of a data breach that affects your rights and freedoms, we will notify you and relevant authorities as required by applicable law.

8. Children's Privacy (COPPA)

The Platform is intended for use by student athletes who are at least 13 years of age. We do not knowingly collect personal information from children under 13 without verifiable parental consent. If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us at [email protected] and we will promptly delete that information.

For users between 13 and 18 years of age, we encourage parental involvement in reviewing this Privacy Policy and understanding how the Platform works.

9. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and how it is used, the right to delete your personal information, the right to opt out of the sale of your personal information (we do not sell personal information), and the right to non-discrimination for exercising your privacy rights.

To submit a CCPA request, contact us at [email protected].

11. International Users

The Platform is operated in the United States. If you are accessing the Platform from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. By using the Platform, you consent to this transfer.

12. Third-Party Links

The Platform may contain links to third-party websites, including college program websites, video hosting platforms, and recruiting services. We are not responsible for the privacy practices of those websites. We encourage you to review the privacy policies of any third-party sites you visit.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (to the address associated with your account) and by posting a prominent notice on the Platform at least 30 days before the changes take effect. Your continued use of the Platform after the effective date of the revised policy constitutes your acceptance of the changes.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: