Privacy Policy
1. Introduction
Northstar College Recruiting (“we,” “our,” or “us”) operates the Northstar Email Platform (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By accessing or using the Service, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the Service.
This Privacy Policy is incorporated into and subject to our Terms of Service.
2. Information We Collect
Account Information
• Name and email address
• Gender (for coach matching purposes)
• Athletic profile information you provide (sport, position, graduation year, academic information, etc.)
• Account credentials (passwords are hashed and never stored in plain text)
Payment and Billing Information
• Billing name and billing address
• Payment method details (credit card or other payment information)
Payment processing is handled by Stripe, Inc. (“Stripe”). We do not directly store your full credit card number or payment credentials on our servers. Stripe collects and processes your payment information in accordance with its own privacy policy (https://stripe.com/privacy). We receive and retain only limited transaction details from Stripe, such as the last four digits of your card, card brand, expiration date, billing address, and transaction status, for account management, invoicing, and support purposes.
Email Provider Data
• OAuth tokens for connected email accounts (Gmail, Outlook)
• Email address associated with your connected provider
We do not read, store, or access the contents of your inbox. We only use your connected email account to send emails that you explicitly compose and initiate through the platform.
Usage Data
• Emails sent through the platform (recipient, subject line, timestamp)
• Email open and click tracking data (using tracking pixels and link redirects)
• Template and personalization content you create
• Log data such as IP address, browser type, device information, pages visited, and date/time of access
Cookies and Similar Technologies
We may use cookies, local storage, and similar technologies to maintain your session, remember your preferences, and understand how you interact with the Service. You can control cookie settings through your browser, but disabling cookies may limit certain features of the Service.
3. How We Use Your Information
We use the information we collect for the following purposes:
• To provide, operate, and maintain the Service
• To send emails on your behalf to college coaches
• To process payments and manage your subscription
• To track email delivery and engagement metrics
• To personalize your experience and match you with relevant coaches
• To communicate with you about your account, billing, or changes to the Service
• To improve, develop, and optimize the Service
• To detect, prevent, and address fraud, abuse, or technical issues
• To comply with legal obligations
4. Google API Services — Limited Use Disclosure
The Northstar Email Platform’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements (https://developers.google.com/terms/api-services-user-data-policy).
Specifically:
• We only use access to your Gmail account to send emails that you explicitly compose and initiate through the platform.
• We do not read, scan, or store the contents of your inbox or any emails not sent through our Service.
• We do not use data obtained from Google APIs for advertising purposes.
• We do not transfer data obtained from Google APIs to third parties except as necessary to provide or improve the Service, to comply with applicable laws, or as part of a merger, acquisition, or asset sale with prior notice to you.
• We do not use data obtained from Google APIs for any purpose other than providing and improving the email sending functionality of the Service.
• Human access to data obtained from Google APIs is limited to what is necessary for security purposes, to comply with applicable law, or at your explicit direction.
5. Data Storage and Security
Your data is stored securely using Supabase infrastructure with row-level security policies. Email provider OAuth tokens are encrypted at rest using AES-256 encryption. We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit (TLS/SSL), access controls, and regular security reviews.
However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security and are not liable for any unauthorized access that occurs despite our reasonable security measures.
6. Third-Party Services
We integrate with or use the following third-party services to operate the Service:
• Google (Gmail) — for sending emails via your Gmail account
• Microsoft (Outlook/Microsoft 365) — for sending emails via your Outlook account
• Supabase — for authentication and data storage
• Stripe — for payment processing
Each third-party service is governed by its own privacy policy and terms of service. We encourage you to review their respective policies. We are not responsible for the privacy practices of any third-party services.
7. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
• With your consent: When you have given us explicit permission to share your information.
• Service providers: With third-party vendors who assist in operating our platform (such as Stripe for payment processing and Supabase for data hosting), under strict data protection agreements that limit their use of your information to the services they provide to us.
• Legal compliance: When we believe in good faith that disclosure is necessary to comply with applicable law, regulation, legal process, or enforceable governmental request.
• Safety and rights: To protect our rights, property, or safety, or the rights, property, or safety of our users or others.
• Business transfers: In connection with a merger, acquisition, reorganization, sale of assets, or bankruptcy, in which case your information may be transferred to the acquiring entity. We will notify you of any such change in ownership or control of your personal information.
8. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal information:
• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your account and associated data.
• Portability: Request your data in a structured, commonly used, and machine-readable format.
• Restriction: Request that we restrict the processing of your data in certain circumstances.
• Objection: Object to our processing of your data in certain circumstances.
• Withdraw consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.
• Disconnect email provider: Disconnect your Gmail or Outlook account at any time through the Service settings.
To exercise any of these rights, please contact us at support@northstarcollegeathleticrecruiting.com. We will respond to your request within thirty (30) days, or such shorter period as required by applicable law.
9. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which that information is collected, the business purpose for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain legal exceptions.
• Right to Opt-Out of Sale: We do not sell your personal information. If we ever change this practice, we will provide a “Do Not Sell My Personal Information” link and comply with all applicable opt-out requirements.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.
To submit a request, contact us at support@northstarcollegeathleticrecruiting.com. We may need to verify your identity before processing your request.
10. Children’s Privacy
Our Service is designed for student-athletes and is intended for users who are at least 13 years old. We do not knowingly collect personal information from children under the age of 13.
Users Ages 13–17: If you are between 13 and 17 years old, you may use the Service only with the consent of a parent or legal guardian. By allowing your child to use the Service, the parent or guardian agrees to these terms on the child’s behalf and assumes responsibility for the child’s use of the Service. We encourage parents and guardians to monitor their children’s online activities and to help enforce this Privacy Policy.
Under 13: If we learn that we have collected personal information from a child under 13 without verified parental consent, we will take steps to delete that information as quickly as possible. If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us immediately at support@northstarcollegeathleticrecruiting.com.
11. International Data Transfers
Our Service is operated from the United States. If you are accessing the Service from outside the United States, please be aware that your information may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those of your country of residence. By using the Service, you consent to the transfer of your information to the United States.
If you are located in the European Economic Area (EEA), United Kingdom, or other region with data protection laws that provide rights beyond those described above, you may have additional rights under the General Data Protection Regulation (GDPR) or similar legislation, including the right to lodge a complaint with your local data protection authority. For questions about international data transfers or to exercise rights under GDPR, please contact us at the address provided below.
12. Data Retention
We retain your personal data for as long as your account is active or as needed to provide the Service. If you request account deletion, we will remove or anonymize your personal data within thirty (30) days, except where we are required to retain it for legal, regulatory, tax, accounting, or compliance purposes. Aggregated or de-identified data that cannot reasonably be used to identify you may be retained indefinitely for analytics and improvement purposes.
Email sending records (recipient, subject, timestamp, delivery status) may be retained for up to twelve (12) months after account deletion for compliance with email regulations (including CAN-SPAM) and to respond to potential legal claims.
13. Email Tracking Disclosure
The Service uses email tracking technologies to provide you with engagement metrics:
• Open tracking: We embed a small, invisible tracking pixel in emails sent through the platform. When a recipient opens the email and their email client loads images, the pixel registers the open event.
• Click tracking: Links in emails sent through the platform may be routed through our servers to record when a recipient clicks a link.
This tracking data is used solely to provide you with email engagement metrics within the Service. We do not use this data for advertising or share it with third parties for their own marketing purposes. Recipients of your emails are not tracked beyond the specific email interaction.
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service at least fifteen (15) days before the changes take effect. We will also update the “Last Updated” date at the top of this page. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree to the changes, you must stop using the Service and request account deletion.
15. Contact Us
If you have questions or concerns about this Privacy Policy, or if you would like to exercise any of your rights described herein, please contact us at:
Email: support@northstarcollegeathleticrecruiting.comeathleticrecruiting.com