1. Information We Collect

We collect information you provide directly to us, including your name, email address, and athletic profile details required to use the VSRecruit platform.

If you choose to connect your Gmail account, we access only the permissions explicitly authorized by you through Google OAuth.

2. How We Use Your Information

We use collected information solely to:

• Provide and operate recruiting outreach features
• Allow users to create, review, and send recruiting emails
• Track recruiting communication status (such as sent or replied)
• Improve platform functionality and user experience

VSRecruit does not send emails automatically. All emails are sent only after the user explicitly initiates a campaign.

3. Gmail Integration and Data Use

VSRecruit integrates with Gmail to support user-initiated recruiting outreach. When connected, we may request the following permissions:

• gmail.send — to send emails from your Gmail account after you click “Start Campaign”
• gmail.readonly — to detect and read replies only within the email threads you create through the app
• userinfo.email — to identify your connected Gmail address

Gmail Data Limitations:

• We store the messages within the recruiting threads you create — your outreach and the coaches' replies — so you can see your conversation history inside VSRecruit. This is stored securely in our database.
• We do not read, scan, or store any email outside the threads you create through the app, and we never access your broader inbox.
• Access is limited to email threads explicitly created and sent through the application

We also show athletes anonymous counts of how many times a coach has replied to other athletes who play the same position. These counts never include any athlete's name, email address or message content.

Gmail access tokens are encrypted and stored securely. Users may revoke access at any time through their Google Account settings.

4. Data Security

We implement appropriate technical and organizational safeguards to protect user data. OAuth access tokens are encrypted. The message content from threads you create is stored securely in our access-controlled database and is used only to show you your recruiting conversations.

5. Third-Party Services and Data Sharing

We never sell your Google user data or share it with advertisers or data brokers. Data obtained through Google APIs (Gmail) is used solely to provide the features you request inside VSRecruit.

The third-party services we use, and exactly what each one receives:

• Google (OAuth, Gmail API) — authenticates you and, at your direction, sends recruiting emails from your own Gmail account and detects replies within those threads. Google user data stays between your Google account and VSRecruit.
• Stripe — processes subscription payments. Receives your email address and payment details. Receives no Google user data.
• Resend — delivers our own transactional emails to you (welcome messages, billing notices, account alerts). Receives your email address. Receives no Google user data.
• OpenAI — drafts recruiting email text and scouting-report content from the profile information you enter (name, sport, position, school, statistics). It also powers the optional “AI-assisted reply” feature: when you choose to generate a reply to a coach's message, the text of that single message is sent to OpenAI's API solely to produce your draft. OpenAI may temporarily retain API-submitted data for a short period (up to 30 days) for abuse and misuse monitoring, after which it is deleted; OpenAI does not use it to train or improve its models. No other Google user data — your inbox, other threads, recipient lists, or any calendar data — is ever sent to OpenAI.
• Base44 — hosts the application and its database, where your account data and the recruiting threads you create (including synced coach replies) are stored to power your pipeline.

Scout Referrals: By joining VSRecruit through a scout's referral link, your name, email address, and phone number may be shared with that scout so they can see and manage their referrals. No payment details are shared.

We may also disclose data if required by law, or in connection with a merger or acquisition, in which case we will notify you before your data becomes subject to a different privacy policy.

6. Your Rights and Controls

You may access, update, or delete your personal information at any time. Gmail access can be disconnected from your account dashboard or directly through your Google Account settings.

7. Google API Services User Data Policy

VSRecruit's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

8. Artificial Intelligence and Your Data

VSRecruit uses OpenAI's API to draft recruiting emails and generate scouting-report text. We want to be explicit about what the AI does and does not receive:

• The AI only receives profile information you enter yourself — your name, sport, position, high school, graduation year, athletic statistics, and links you have added (film, social media).
• The only Google user data the AI ever receives is the single coach message you choose to reply to, and only when you use the optional AI-reply feature. The AI does not receive your inbox, your other email threads, recipient lists, or any calendar data.
• No Google user data is used to train AI models. Consistent with the Limited Use requirements, we do not use, transfer, or sell Google user data — raw, aggregated, or derived — to create, train, or improve any machine learning or artificial intelligence model.
• We access OpenAI through its API platform, where OpenAI's stated policy is that data submitted via the API is not used to train or improve its models.

9. Contact Us

If you have questions about this Privacy Policy or data usage, contact us at
support@vsrecruitai.com