Privacy Policy

Recruitly, a product of Soderman Marketing LLC ("Recruitly", "we", "us"), operates getrecruitly.io, a service that helps student-athletes run their own college recruiting: build an athletic pitch, find college programs and coaches, and email those coaches from the athlete's own inbox. This policy explains what information we collect, how we use it, and the choices you have. Questions: support@getrecruitly.io.

Account information. Name, email address, and sign-in records. We use passwordless sign-in, so we never store a password.

Athlete profile. Information you choose to enter to power your recruiting: sport, graduation year, positions, stats, strengths, awards, highlight video links, schedules, references, and the recruiting emails you compose. You control this content and can edit it at any time.

Waitlist information. If you join our waitlist: name, email, sport, class year, and an optional phone number for launch notifications.

Usage information. Standard technical logs (browser type, pages visited, timestamps) and cookies needed to keep you signed in. We do not run third-party advertising trackers.

Payment information. When paid plans launch, payments will be processed by a payment processor. We will not store full card numbers on our servers.

We use your information to:

• Provide the service: build your pitch, match you with programs, and send your recruiting emails.
• Operate, secure, and improve Recruitly.
• Send you service messages (account, billing, and feature updates).
• Respond to support requests.
• Comply with legal obligations.

We do not sell your personal information. We do not use it for third-party advertising.

Recruitly lets you connect your own Gmail account so that the recruiting emails you write are sent from your personal address, not from a Recruitly or other third-party address. This section documents exactly what Google user data Recruitly accesses, how we use it and why, how it is stored, and how it is shared.

Google permissions (OAuth scopes) we request. When you connect Gmail, Google asks you to grant these scopes, and nothing else:

• https://www.googleapis.com/auth/gmail.send — lets Recruitly send email as you. This permission is send-only. It does not let Recruitly read, view, search, download, label, modify, or delete any message, draft, contact, or other content in your Gmail account.
• email and openid — let Recruitly see your Google account's email address and a unique account identifier, so we can confirm which inbox you connected.

Google user data we access and store. Based on the scopes above, the only Google user data Recruitly handles is:

• Your Google account email address (and the OpenID account identifier).
• The OAuth access and refresh tokens Google issues for the send permission, which we store encrypted (AES-256-GCM) so we can send on your behalf when you ask us to.

We do not access or store the contents of your mailbox, your sent mail, your drafts, or your contacts, because the scopes above do not grant access to them.

How we use this data, and the purpose.

• Your email address is shown in your dashboard so you always know which inbox is connected, and is used as the "From" address on the emails you send to coaches. Purpose: let you send and manage your outreach from your own inbox.
• The send permission and its tokens are used only to deliver the specific emails you compose and approve inside Recruitly — your intro and follow-up emails, showcase invitations, and test emails to yourself — to the college coaches you choose. Purpose: the core Recruitly feature, sending your recruiting emails from your own Gmail. Recruitly never sends anything without your action.

Sharing. We never sell this data, never use it for advertising, and never transfer it to third parties, except to the service providers that operate our infrastructure (such as our hosting and database providers) strictly to provide the service to you, or where required by law.

Human access. No human at Recruitly reads your Google user data. The only exceptions are the narrow ones Google's policy allows: with your explicit consent for a support issue, where necessary for security investigations, or where required by law.

Limited Use. Recruitly's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Retention and revoking access. You can disconnect Gmail at any time with the Disconnect button in your dashboard, which deletes the stored tokens, or revoke Recruitly's access from your Google account permissions page. When you disconnect, or when you delete your account, the stored Google tokens are removed from our live database.

The point of Recruitly is outreach. When you send an email to a coach, the content you wrote (which typically includes your name, stats, and highlight links) is delivered to that coach. Once delivered, that message is in the recipient's hands like any normal email. Send tracking (such as whether an email was opened) is collected to power your dashboard.

We share information only with:

• Service providers that run our infrastructure (hosting, database, email delivery, and SMS notification providers), bound to use it only to provide their service to us.
• Coaches you choose to contact, via the emails you send.
• Legal authorities when required by law or to protect rights, safety, or the integrity of the service.
• A successor in a merger, acquisition, or sale of assets, in which case this policy continues to apply to your data.

Recruitly is built for high-school student-athletes. You must be at least 13 to use it. If you are under 18, a parent or legal guardian must review and agree to our Terms of Service on your behalf, and we encourage parents to set up and supervise the account. We do not knowingly collect information from children under 13; if you believe a child under 13 has created an account, contact us and we will delete it.

All traffic is encrypted in transit (HTTPS). Email connection tokens are encrypted at rest. Access to production data is restricted. We keep your information while your account is active; when your account is deleted, your profile, emails, and connection tokens are removed from the live database.

• Edit your athlete profile and emails at any time in the app.
• Disconnect your Gmail at any time (dashboard or Google settings).
• Request a copy of your data, or deletion of your account and data, by emailing support@getrecruitly.io. We respond within 30 days.

If we make material changes, we will post the new policy here and update the effective date. For significant changes we will also notify you by email.

Recruitly, a product of Soderman Marketing LLC · support@getrecruitly.io