Privacy Policy | CCF Recruiting & NIL Services

Coach Cole Football

What we collect, why we collect it, who it goes to, and how you get it back or get it deleted. Written to be read, not skimmed past.

Effective August 14, 2026 · Last updated August 14, 2026

Who this covers

This policy applies to Coach Cole Football Recruiting & NIL Services LLC ("CCF," "we," "us") and to everything we operate: the website at ccfrecruiting.com, the recruit intake assistant, the recruit and family portal, and the coach-outreach email tool.

Our service is built for high school football recruits and their parents or guardians. Most of the people whose information we hold are minors, and we treat that as the governing fact of this document rather than a footnote. See Recruits under 18.

What we collect

Information you give us

Recruit details — name, email, phone, graduation year, high school, state, position, GPA, height and weight, athletic measurables, highlight film links, and the answers you give during intake.
Parent or guardian details — name, email, and phone, so we can reach the adult responsible for the account.
Conversations — the messages you exchange with our intake assistant, and notes our staff record about calls and meetings with you.
Payment details — handled by Stripe. Card numbers never touch our servers; we keep the amount, the date, the status, and a Stripe reference.

Information we collect automatically

Standard web log data — IP address, browser type, pages visited, timestamps.
Whether an outreach email you sent to a coach was opened, clicked, replied to, or bounced.

Information from Google, if you connect your Gmail

Connecting a Gmail account is entirely optional and is only used by the coach-outreach tool. If you never connect one, this section does not apply to you. If you do, the section below is the one that matters.

Google user data

The coach-outreach tool sends recruiting emails to college coaches from the recruit's own Gmail address, so a coach receives a real message from a real player rather than a blast from a marketing platform. That requires your permission to use your Gmail account, granted through Google's own consent screen. You can take it back at any time.

What we ask for and why

gmail.send - Send the outreach emails you and your CCF advisor have approved, from your address, to the college coaches on your list. We use it for nothing else. We never send on your behalf to anyone outside a campaign you can see.

gmail.readonly - Detect when a coach replies and when a message bounces, so your outreach list stays accurate and we stop emailing an address that does not work. We look for responses to the messages we sent; we do not read, index, store, or show anyone the rest of your mailbox.

What we store

Your Gmail address and the access credentials Google issues us, so the tool can keep working without asking you to sign in every time.
The outreach messages we sent on your behalf — recipient, subject, and body — because they are your record of who you contacted and what you said.
For each of those messages: whether it was opened, clicked, replied to, or bounced, and when.

What we do not store

The contents of your inbox, beyond the outreach messages we sent and the fact that a reply arrived.
The body text of a coach's reply. We record that a reply happened and when, so your advisor can follow up with you directly.
Your Google password. We never see it.

Limited Use commitment

CCF's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In plain terms: we do not sell Google user data, we do not use it for advertising, we do not use it to train any AI or machine learning model, and no human at CCF reads it except where you have asked us to, where it is necessary for security or to fix a problem you reported, or where the law requires it.

Taking it back

You can disconnect your Gmail from inside your CCF account at any time, or revoke it directly at myaccount.google.com/permissions. Either way, the tool stops sending immediately. Tell us and we will delete the stored credentials and the outreach history along with them.

How we use your information

To build and deliver your recruiting plan, and to advise you on NIL.
To contact college coaches on your behalf, with your approval.
To communicate with you and your parent or guardian about your account, your plan, and your payments.
To take payment and keep accurate financial records.
To operate, secure, and improve the service.
To meet our legal and tax obligations.

We do not sell your personal information, and we do not rent or trade it. We do not use your information to serve you advertising.

Who we share it with

We share only what a provider needs to do its job for us, and only with providers under contract to protect it.

College coaches and their programs — the whole point of the service. You and your advisor decide who gets contacted and what the message says.
Stripe — payment processing.
Supabase — the database that stores your account.
Railway and Vercel — application and website hosting.
Resend — transactional email from CCF to you, such as receipts and reminders.
Google — Gmail delivery, if you connected an account.
Anthropic — powers the intake assistant. Your conversation is processed to generate replies. It is not used to train their models.

We may also disclose information if the law requires it, or to protect the safety of a recruit or another person. If CCF is ever sold or merged, your information may transfer with the business, and this policy travels with it.

Recruits under 18

A parent or legal guardian must review and agree to this policy before a recruit under 18 uses CCF. We collect a parent or guardian's contact details at intake for that reason.

Connecting a Gmail account requires parent or guardian permission if the recruit is under 18. If your child has connected an account and you did not agree to it, contact us and we will disconnect it and delete the associated data.

CCF is not designed for and is not directed to children under 13, and we do not knowingly collect their information. If we learn we have, we delete it.

A parent or guardian may review, correct, or delete their child's information, or withdraw consent for its continued use, at any time by contacting us.

How we protect it

All traffic between you and CCF travels over encrypted connections (TLS).
Account data lives in an access-controlled database with row-level security policies restricting what each account can reach.
Access to Google credentials is limited to the CCF systems that need them and to authorized administrators.
Payment card data is handled entirely by Stripe and never stored on our servers.

No system is perfectly secure, and we will not claim otherwise. If a breach affects your information, we will tell you.

How long we keep it

We keep your account information for as long as you are a client and afterward only as long as we need it — to answer questions about work we did, to resolve a dispute, and to satisfy tax and accounting requirements.

Google credentials are deleted when you disconnect your Gmail, when your account is closed, or when the connection has gone unused long enough that keeping it serves no purpose.

Ask us to delete your data and we will, except for the records we are legally required to retain.

Your rights

Wherever you live, you can ask us to:

Tell you what information we hold about you.
Give you a copy of it.
Correct anything that is wrong.
Delete it.
Stop using it for a particular purpose, or withdraw a permission you gave.

Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act. Ask and we will honor them. We will not treat you differently for exercising any right in this section.

Changes to this policy

If we change this policy we will update the date at the top of the page. If a change materially affects how we handle your information — particularly Google user data — we will tell you directly before it takes effect.

Coach Cole Football Recruiting & NIL Services LLC

Privacy questions, data requests, and deletion requests:
tech@ccfrecruiting.com

We answer privacy and deletion requests within 30 days.