ARS is software that recruiting agencies use to manage their own clients’ recruiting cases — tracking outreach to college coaches, film links, and recruiting progress on behalf of student-athletes and their families. This policy describes what ARS itself collects and does with data as the software provider. Your recruiting agency is the one who enters your information into ARS and who you should contact first with questions about how your specific information is used in your case.
Three kinds of people interact with ARS, and this policy covers all three: agency staff who use the software directly, guardians of a minor student-athlete whose case an agency manages in ARS, and student-athletes themselves (directly, only once they are 18 or older).
We do not knowingly collect information directly from a student-athlete under 13 through the product itself — case data is entered by the agency or the guardian, not submitted by a young athlete through a child-facing form.
To run the product: track a case, send the outreach and notifications an agency's staff or a guardian sets up, compute the readiness/gap views the agency uses, and alert the right person when something needs attention (a coach reply, a new gap, a bounced email).
We do not sell any data. We share it only with the vendors that make the product work, each acting on our instructions and none permitted to use the data for their own purposes: Supabase (database and hosting), Resend (email delivery), Twilio (SMS/WhatsApp delivery), and an AI provider through our own gateway when an agency uses an AI-assisted feature (never sent to an AI provider directly from your browser). A college coach only ever receives what your agency's outreach explicitly sends them.
Where a case involves a minor, guardian consent is required before any text message is sent about that case, and every text to the athlete's number is copied to the guardian's number. See the SMS & Messaging Policy for how that consent works and how to revoke it. A guardian can ask their agency, at any time, to correct or remove their family's information from a case.
We keep case data for as long as an agency's account is active, plus a limited period after closure to allow recovery of an accidental deletion and to meet basic accounting/audit needs. Message-send logs and consent records are kept longer, since they are the evidence that a message was sent lawfully and that consent existed at the time.
Case data is isolated per agency (row-level security enforced at the database), access to sensitive operations requires the service's own signed service role, and SMS/film-link click data is hashed rather than stored raw where the product doesn't need the raw value.
To access, correct, or delete information in a specific case, start with your recruiting agency — they control that case. You can also contact us directly and we will route the request to the responsible agency.
We'll update the date at the top of this page when this policy changes. A material change affecting how guardian or minor data is used will be communicated to agencies directly.