Privacy Policy

Who we are

CSA Recruits, LLC (“CSA Recruits”, “we”, “us”) operates a recruiting platform that helps high school and transfer athletes organize their college recruiting, identify schools that fit them, and communicate with college coaches.

This policy explains what personal information we collect, why we collect it, who we share it with, and the controls you have over it.

Information you give us

Most of the information we hold is information you enter into your athlete profile. You choose what to provide, though leaving fields empty reduces how well the platform can match you to schools.

• Identity and contact details: first and last name, email address, phone number, date of birth, country, city and state.
• Academic information: high school, graduating class, unweighted and weighted GPA, class rank, SAT and ACT scores, and intended major.
• Athletic information: gender, primary and secondary sport, positions, club team, dominant side, height, weight, sport statistics and athletic testing metrics.
• Recruiting preferences: the levels you are open to, your dream level, your commitment level, the factors you prioritize in a school, and the free-text “about you”, hook stat and pitch you write.
• Media you upload: photographs and video of yourself.
• Recruiting activity: your school list and any notes on it, outreach drafts and history, camps, awards, offers and commitments.

Information we collect automatically

• Authentication events and session data, handled by our identity provider.
• Server and application logs, which may include IP address, browser user agent and timestamps, used to operate and secure the service.

Information we do not collect

We do not store your password — authentication is handled by our identity provider, and your password is never sent to or held by CSA Recruits.

We do not store payment card numbers. If you subscribe, card details are collected and held by our payment provider; we retain only a plan, a subscription status and an opaque reference.

How we use your information

• To create and operate your account and profile.
• To generate your ranked school list, match scores and fit assessments.
• To draft outreach emails and social posts for you to review, edit and send.
• To render your recruiting graphics from the photos and profile details you provide.
• To send transactional email you have asked for — email verification, password reset links, account deletion confirmations — and the reminders you enable in Settings.
• To secure the platform, prevent abuse, debug faults and meet legal obligations.

Automated processing and AI

Core features of CSA Recruits are powered by third-party AI models. To produce your school rankings, outreach drafts and the wording on your recruiting graphics, we send relevant parts of your profile to model providers acting on our behalf. Depending on the feature, that includes your name, your home city and state, your high school and club team, your awards, the prose you write about yourself, and your academic, athletic and preference information.

Photographs are processed by AI too. When a photo you upload is used on a recruiting graphic, the photograph itself is sent to an AI model provider so the model can describe how it is framed — how much of you is in shot, which way you are facing, where you sit in the frame. That description is what lets our layout engine place you on the card. It is stored and reused, so a given photograph is sent for this once rather than on every render.

Removing the background from that photograph is attempted first by software running on our own infrastructure. Where that does not succeed, or where that software is unavailable, the photograph is sent to an AI model provider to produce the cut-out instead.

If we have enabled the optional check that flags whether a photo plausibly shows the sport on your profile, the photograph is sent to a model for that purpose as well. The result is only ever a dismissible hint and never blocks you from using a photo.

These features produce suggestions, not decisions. A ranked school list is an opinion generated by a model, and an outreach draft is a starting point you review and edit before anything is sent. Nothing is sent to a college coach without your action.

A model chooses the card’s layout, colour scheme and visual style from fixed lists, and writes its wording. The card itself is then drawn by our own software from our own templates — a model never renders the image.

Who we share information with

We do not sell your personal information. We share it with service providers who process it on our behalf, under contract, and only to deliver the platform:

• Auth0 (Okta) — identity and authentication. Because sign-up happens on Auth0’s hosted screens, the details you enter in the sign-up wizard — your name, phone number, gender, height, weight, high school, graduating class, unweighted GPA, intended major, sport, position and state — are stored against your account at Auth0 as well as in our own database.
• Amazon Web Services — application hosting, database storage, media storage and transactional email delivery.
• AI model providers — currently Google, Groq, Cerebras and Anthropic — for the processing described above, including the handling of photographs you upload. Where we use a specialist image-processing service for background removal, it receives those photographs on the same terms. We update this list when the providers we use change.
• Our payment provider — subscription billing, if you upgrade to a paid plan.
• College coaches and programs — only the information you choose to send them, and only when you send it.

Cookies and third-party content

We store data in your browser to keep you signed in between visits. That is required for the platform to work — it is not used for advertising, and we do not use analytics, advertising or tracking cookies.

Third-party content also loads in your browser. Your profile avatar is requested from Gravatar, a service operated by Automattic. This happens for every account — the platform has no avatar upload, so your avatar is always the picture your identity provider supplies, which for a CSA Recruits sign-in is a Gravatar address. That request carries a value derived from your email address, together with your IP address and browser user agent. If you have no Gravatar account, Gravatar redirects to a default image served from Automattic’s Photon network or from Auth0’s content network, and those requests carry your IP address and user agent too.

If we turn on bot detection, the sign-in, sign-up and password-reset screens also load a CAPTCHA widget from the provider we have configured, which receives your IP address and browser characteristics.

Visibility and your public profile

Settings gives you a Coach Visibility control and a public profile control. Once coach search and public profiles are available, these govern whether college coaches can discover and view your recruiting profile and whether your profile has a shareable link. You can change either at any time in Settings.

Your choices and controls

• View and edit every profile field from My Profile.
• Turn individual notification categories on or off in Settings.
• Control coach visibility and your public profile in Settings.
• Change your email address — the new address must be verified before it takes effect.
• Change your password through a secure link we email you.
• Delete your account, as described below.

Deleting your account

You can delete your account from Settings. Because deletion is irreversible, we email a confirmation link to the address on your account and only erase your data once you follow it.

Deletion means erasure, not a hidden flag. We overwrite the personal information in your athlete record and delete your awards, media, recruiting graphics, outreach drafts, school list and notes, scheduled actions, settings and subscription records. Your uploaded photographs and video are deleted from object storage, and your account is removed from our identity provider. A de-identified key is retained so that deletion is permanent and the account cannot be re-created against old records.

We keep a limited administrative audit log recording that a change occurred and which fields were touched. It records the names of changed fields, never their values.

Deleting your account removes our records of any subscription, but it does not by itself stop billing at the payment provider. Cancel your subscription before you delete your account.

Deleted accounts are not restorable. Some copies may persist briefly in encrypted backups before those backups age out on their normal schedule.

Data retention

We keep your profile for as long as your account is open. If you delete your account, we erase it as described above. We may retain limited records where the law requires it.

Minors and parental consent

CSA Recruits is used by high school athletes, and many of them are under 18. If you are under 18, you may use the platform only with the involvement and consent of a parent or legal guardian, and your parent or guardian may act on your behalf in exercising any of the rights described in this policy.

This section requires review by counsel before launch. Services that knowingly collect personal information from minors are subject to specific legal obligations — which may include the Children’s Online Privacy Protection Act, state student-privacy and biometric statutes, and equivalent rules outside the United States. The operative commitments in this section must be set by a qualified attorney, not inferred from how the software behaves.

Security

We use industry-standard measures to protect your information, including encryption in transit, storage of confirmation tokens in hashed form, and access controls on our systems. No online service can promise perfect security, and we cannot guarantee it.

Changes to this policy

We may update this policy. When we do, we will revise the “last updated” date above, and we will give notice of material changes through the platform or by email.

Contact us

Questions about this policy or about your personal information can be sent to info@csarecruits.com.