Privacy Policy

1. Information We Collect

Information you provide directly

• Account information: name, email address, password (stored as a secure hash — we never store your plain-text password)
• Athlete profile: sport, position, graduation year, home state, high school, GPA, SAT/ACT scores, season statistics, highlight video URLs, and a personal bio
• Recruiting activity: schools you follow, coaches you contact, outreach log entries
• Payment information: billing is handled entirely by Stripe — we do not store credit card numbers

Information collected automatically

• Usage data: pages visited, features used, timestamps of activity
• Session data: a session cookie to keep you logged in
• Basic device info: browser type, operating system (standard web server logs)

2. How We Use Your Information

We use your information to:

• Create and operate your athlete profile and recruiting dashboard
• Process subscription payments via Stripe
• Send transactional emails (account confirmation, password reset, subscription receipts) via Resend
• Send newsletters and product updates via Kit — only if you have not unsubscribed
• Improve the Service based on usage patterns
• Respond to support requests
• Comply with legal obligations

3. How We Share Your Information

We do not sell your personal information to third parties.

We share data only in the following limited circumstances:

• Service providers: We share data with third-party vendors who help us operate the Service (see Section 4). These vendors are contractually required to protect your data and use it only to provide services to us.
• Public profile: Information on your public athlete profile (name, sport, stats, video links) is visible to anyone with the link. See Section 5.
• Legal requirements: We may disclose your information if required by law, court order, or to protect the rights and safety of users.
• Business transfers: In the event of a merger, acquisition, or sale, your data may be transferred. We will notify you before this occurs.

4. Third-Party Services

We use the following third-party services to operate Playfolio. Each has its own privacy policy governing how they handle data we share with them:

• Stripe (stripe.com/privacy) — Payment processing. When you subscribe, Stripe receives your payment information and billing details. We receive only a customer ID and subscription status.
• Kit (formerly ConvertKit) (kit.com/privacy) — Email marketing platform. We share your name, email address, sport, graduation year, and subscription plan with Kit in order to send you newsletters and product updates. You can unsubscribe at any time using the link in any email, or by contacting us.
• Resend (resend.com/privacy) — Transactional email delivery. We share your name and email address with Resend to deliver account and system emails (welcome email, receipts, password resets).
• Replit (replit.com/privacy) — Hosting infrastructure. Your data is stored on servers operated by Replit, Inc.

5. Your Public Profile

When you create an account, you receive a public athlete profile at a URL like joinplayfolio.com/athlete/your-name. This profile is publicly accessible — meaning anyone with the link can view it.

Your public profile displays the information you choose to include: name, sport, position, graduation year, location, stats, highlight videos, and bio. It does not display your email address, password, or payment information.

You can control what appears on your public profile from your account settings. If you want your profile removed, contact us to delete your account.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal purposes (such as billing records, which we retain for 7 years as required by tax law).

7. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Update your information at any time through your account settings
• Deletion: Request deletion of your account and personal data
• Unsubscribe: Opt out of marketing emails at any time using the unsubscribe link in any email
• Portability: Request your data in a machine-readable format

To exercise these rights, email us at hello@joinplayfolio.com. We will respond within 30 days.

California residents may have additional rights under the CCPA. EU/UK residents may have additional rights under GDPR. Contact us for more information.

8. Children's Privacy

The Service is intended for users 13 and older. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, contact us immediately and we will delete it.

Users between 13 and 18 should have a parent or guardian review these policies. Parents who want to review or delete their child's information may contact us at hello@joinplayfolio.com.

9. Security

We take reasonable technical and organizational measures to protect your personal information, including encrypted password storage (bcrypt), HTTPS for all data transmission, and access controls on our database.

No method of transmission over the internet is 100% secure. While we work hard to protect your data, we cannot guarantee absolute security. If you discover a security vulnerability, please report it to hello@joinplayfolio.com rather than disclosing it publicly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes — particularly changes affecting how we share data with third parties — we will notify you by email before the changes take effect. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

11. Contact

Privacy questions or requests: hello@joinplayfolio.com