Privacy Policy

Northstar College Athletic Recruiting (“Northstar,” “we,” “us,” or “our”) operates the Northstar Portal, a staff-facing platform used to manage the college athletic recruiting process on behalf of student-athlete clients and their families (the “Service”). This Privacy Policy explains what information we collect, how we use and share it, and the choices you have.

By accessing or using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

We collect the following categories of information:

• Account information. Name, email address, role, and profile details created when an administrator invites you to the Service.
• Recruiting and client information. Athlete profiles, school lists, communications, meeting notes and recaps, action items, film submissions, and related recruiting data entered into the Service by staff, clients, or parents.
• Calendar and scheduling data. When you connect a Google Calendar, we access calendar events and free/busy availability to power two-way scheduling and availability features (see Section 4).
• Integration data. Information from third-party services you or your organization connect, such as Google Calendar, Grain (AI meeting summaries), Zoom, and Loom.
• Usage and device information. Log data, device and browser information, and interactions with the Service, used to operate, secure, and improve the platform.

• Provide, operate, maintain, and secure the Service.
• Manage the recruiting process, including scheduling, communication, and meeting documentation.
• Synchronize calendar events and availability between the Service and connected calendars.
• Send transactional notifications and respond to your requests.
• Detect, prevent, and address technical issues, fraud, or abuse.
• Comply with legal obligations.

When you connect your Google account, the Service requests access to your Google Calendar using the Google Calendar API. Specifically, we access:

• Calendar events — to read events for display in the Portal and to create, update, or delete events as part of two-way scheduling.
• Free/busy availability — to determine open time slots when scheduling meetings with clients.

We only request the minimum scopes necessary for these features. You can revoke our access at any time (see Section 8).

In particular, data obtained through Google APIs is:

• used only to provide and improve the user-facing calendar and scheduling features described above;
• never sold or transferred to third parties for advertising, resale, or credit-assessment purposes;
• never used to serve advertisements;
• not used to train generalized or non-personalized artificial intelligence or machine-learning models; and
• accessed by humans only where required for security, to comply with applicable law, where we obtain your explicit consent, or in aggregated/anonymized form for operations such as debugging.

Access tokens are stored in encrypted form and refresh tokens are encrypted at rest.

We do not sell your personal information. We share information only in the following circumstances:

• Service providers. With vendors that host and power the Service under contractual confidentiality and data-protection obligations, including Supabase (database, authentication, hosting), Google (calendar), Grain, Zoom, and Loom.
• Within your organization. With authorized Northstar staff, and with the client or parent to whom the recruiting data relates.
• Legal and safety. When required by law, legal process, or to protect the rights, property, or safety of Northstar, our users, or others.
• Business transfers. In connection with a merger, acquisition, or sale of assets, subject to this Privacy Policy.

We retain information for as long as needed to provide the Service and for legitimate business or legal purposes. Calendar data imported for scheduling is retained only for a limited operating window and is periodically pruned. When you disconnect a Google account or delete your account, associated Google tokens are deleted and imported calendar data is removed in the ordinary course.

We implement administrative, technical, and organizational safeguards designed to protect your information, including encryption of sensitive credentials at rest, row-level access controls, and least-privilege access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

• Revoke Google access. You may disconnect your Google Calendar at any time from the Settings page in the Portal, or by visiting your Google Account permissions. Revoking access stops further calendar synchronization.
• Access, correction, and deletion. You may request access to, correction of, or deletion of your personal information by contacting us at support@northstarcollegeathleticrecruiting.com.
• California residents. Depending on your location, you may have additional rights under the California Consumer Privacy Act (CCPA/CPRA), including the right to know, delete, and correct personal information, and the right not to be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined under California law.

The recruiting process may involve student-athletes who are minors. The Service is intended to be used by Northstar staff and by adults, and any information about a minor is provided and managed by authorized staff and the minor’s parent or guardian. We do not knowingly collect personal information directly from children under 13 without appropriate parental consent. If you believe a child has provided us information improperly, contact us and we will take appropriate steps to delete it.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be communicated through the Service or by other reasonable means.

If you have questions about this Privacy Policy or our data practices, contact us at:

Northstar College Athletic Recruiting
Email: support@northstarcollegeathleticrecruiting.com
State of California, USA