Privacy Policy

Last updated: April 20, 2026

Collegiate Athletic Planning ("CAP Recruiting," "we," "us," or "our") operates caprecruiting.com (the "Service"). This page explains what information we collect, why we collect it, and how we handle it.

1. Information We Collect

1.1 Information you provide

• Account information: name, username, email address, password (hashed), role (player or coach), state, and (for coaches) school / title / division / conference.
• Player profile content: position, class year, stats (height, weight, GPA, 40-yard dash, vertical, bench, squat, clean, etc.), bio, social links, scholarship offers, campus visits, uploaded photos, highlight videos, and academic transcripts.
• Messages: content of messages you send through the in-app messenger.
• Payment information: handled entirely by Stripe. We store Stripe customer and subscription identifiers, but never card numbers or CVV.

1.2 Information we collect automatically

• Log data: IP address, browser type, pages visited, timestamps.
• Cookies and session data: used to keep you logged in and remember preferences.
• Analytics: anonymized usage via Google Analytics (measurement ID G-TWX00ZCMYS).

1.3 Information from third parties

If you sign in with Google, we receive your Google account email, name, and profile picture (scopes: openid email profile). We do not receive any other Google data.

2. How We Use Your Information

• Provide and maintain the Service (profiles, directory, messaging, offers).
• Process subscription payments via Stripe.
• Send account-related emails (welcome, password reset, messages, payment receipts).
• Enforce tier-based visibility (e.g., hiding premium content from coaches viewing non-premium players).
• Monitor and prevent abuse, spam, and fraud.
• Improve the Service based on aggregate analytics.

3. How We Share Your Information

3.1 With other users

Player profile data is shown to coaches and admins according to the player's subscription tier. Visitors and logged-out users can see only summary cards on the public player directory; full profiles require login. Coaches can be messaged by Premium-tier players; free- and lower-tier players cannot initiate coach conversations.

3.2 With service providers

We share limited information with the following vendors to operate the Service:

• Stripe — payment processing and subscription management.
• DigitalOcean (Spaces) — storage for videos, images, and transcripts (S3-compatible CDN).
• Google — OAuth sign-in and Google Analytics.
• Gmail / Google SMTP — transactional email delivery.
• DiceBear — generated illustrated avatars for admin dashboards (no user data is sent; only a deterministic seed derived from email).
• Let's Encrypt — SSL certificate issuance.

3.3 For legal reasons

We may disclose information if required by law, court order, or valid legal process, or to protect the rights, property, or safety of CAP Recruiting, our users, or the public.

3.4 We do not sell your personal information.

4. Data Retention

We keep account information for as long as your account is active. Profile content, messages, and uploaded media are retained until you delete them or request account deletion. Stripe transaction records are retained as required by applicable financial regulations.

5. Your Rights and Choices

• Access and update: view and edit most of your profile from the Edit Profile page.
• Delete your account: email divinejdavis@gmail.com from your registered address and we will delete your account, profile, and associated media within 30 days.
• Cancel subscription: manage or cancel anytime via the Stripe Customer Portal from your account settings.
• Opt out of analytics: use your browser's Do Not Track setting or a Google Analytics opt-out extension.

6. Security

Passwords are hashed with bcrypt. Transport is encrypted via TLS (Let's Encrypt). Sessions are signed with a server-side secret. Admin routes, rate limits, and CSP headers are in place to reduce the risk of abuse. No system is perfectly secure — we encourage you to use a unique password and report any suspected account compromise immediately.

7. Children

CAP Recruiting is intended for high school and college athletes (generally ages 14+). We do not knowingly collect information from children under 13. Users under 18 should review this policy with a parent or guardian before creating an account. If you believe a child under 13 has created an account, please email us and we will remove it.

8. International Users

CAP Recruiting is operated from the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the U.S. By using the Service, you consent to that transfer.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes take effect when the updated version is posted here. If changes are material, we will notify account holders by email or in-app notice.

10. Contact

Questions, requests, or complaints about this policy can be sent to divinejdavis@gmail.com.