Privacy Policy
Effective July 11, 2026 · Policy version 2026-07-06.v1
WON Recruit ("we," "us") is a recruiting outreach platform operated by World of NIL, Inc. This policy explains what information we collect, how we use it, and the choices you have.
Information we collect
- Account information: email address, password (stored as a secure hash by our authentication provider), and whether the account holder is a parent/guardian or an athlete.
- Athlete profile information: name, date of birth, graduation year, grade level, sport, position, physical and academic details, school and club affiliations, contact details, and highlight/social links — entered by you to power recruiting outreach.
- Consent records: we keep an append-only log of consent events (terms acceptance, privacy acceptance, parental consent, and Gmail authorization), including timestamps, to meet our legal obligations.
- Payment information: processed by Stripe. We never see or store full card numbers.
Google user data
WON Recruit lets athletes connect their own Gmail account so that recruiting emails send from the athlete's own inbox. When you connect Gmail, we request only the gmail.send permission — the ability to send email on your behalf. We do not request or receive access to read your inbox, contacts, or any other Gmail data.
We use this permission solely to send the recruiting emails you compose and approve inside WON Recruit. OAuth tokens are stored encrypted and are never shared. You can revoke this access at any time from your Google Account security settings, and revocation takes effect immediately.
WON Recruit's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Children and minors
WON Recruit serves student-athletes entering 9th grade and above. For any athlete under 18, we require documented parent or guardian consent before coach outreach can begin, and we record that consent in our audit log. We do not knowingly collect information from children under 13.
How we share information
We never sell your information. Athlete profile information is shared with the college coaches you (or your athlete, with your consent) choose to contact — that is the product. We use service providers to operate the platform: Supabase (database and authentication), Stripe (payments), Vercel (hosting), and Google (Gmail sending, at your direction). Each processes data only as needed to provide their service.
Retention and deletion
We retain your information while your account is active. You may request deletion of your account and associated data by contacting us; consent records may be retained where required for legal compliance.
Contact
Questions about this policy: support.wonrecruit@gmail.com.