Privacy Policy
Last updated: March 27, 2026
At College Rugby Pipeline, we take privacy seriously. This Privacy Policy explains how we collect, use, store, and protect information when you use our platform at collegerugbypipeline.com. By using the Service, you agree to the practices described in this policy.
1. Information We Collect
We collect several types of information in connection with the Service:
Account Information
When you create an account, we collect your name, email address, institution name, role (e.g., head coach, assistant coach), and password (stored in encrypted form). If you subscribe to a paid plan, payment details are collected by our payment processor on our behalf — we do not store full card numbers.
Recruit Data
You may enter information about prospective athletes ("recruits") into the Service, including names, contact information (email, phone, social media handles), academic data (GPA, graduation year, intended major), athletic information (position, club team, region), status and notes, and communication history. You are responsible for the accuracy and lawfulness of this data. Recruit profiles may contain information about minors, and you are solely responsible for compliance with applicable laws governing such data.
Usage Data
We automatically collect information about how you use the Service, including pages visited, features used, actions taken, session duration, timestamps, IP address, browser type and version, operating system, and referring URLs. This information is used to improve the Service, diagnose technical issues, and understand usage patterns.
Communications
If you contact us for support or send us email, we retain those communications and any information you provide. We may use this information to respond to your inquiry and improve our support processes.
2. How We Use Information
We use the information we collect to:
- ✓Provide, operate, and maintain the Service and all its features
- ✓Process transactions and manage your subscription and billing
- ✓Send transactional emails such as account confirmations, password resets, and billing receipts
- ✓Send product updates, feature announcements, and marketing communications (you may opt out at any time)
- ✓Power AI content generation features using your recruit data as context
- ✓Analyse usage patterns to improve, personalise, and optimise the Service
- ✓Diagnose technical issues, monitor system health, and ensure platform security
- ✓Respond to your support requests and customer service inquiries
- ✓Comply with legal obligations and enforce our Terms of Service
- ✓Detect, investigate, and prevent fraudulent or abusive activity
We do not use recruit data you enter for any purpose other than providing the Service to you. We do not train AI models on your recruit data or aggregate it across accounts.
3. Data Storage and Security
Your data is stored using Supabase, which is hosted on Amazon Web Services (AWS) infrastructure. Data is stored in secure, encrypted databases with access controls. All data transmitted between your browser and our servers is encrypted in transit using TLS (HTTPS).
We implement industry-standard security practices including:
- ◆Encryption at rest and in transit for all stored data
- ◆Role-based access controls limiting data access to authorised personnel
- ◆Regular security reviews and dependency updates
- ◆Supabase Row Level Security (RLS) ensuring data isolation between accounts
- ◆Secure password hashing using industry-standard algorithms
While we take these measures seriously, no method of internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security of your data and encourage you to use strong, unique passwords and keep your account credentials confidential.
In the event of a data breach affecting your personal information, we will notify you and applicable regulatory authorities as required by law in a timely manner.
4. Data Sharing
We do not sell, rent, or trade your personal data or recruit data to any third party for marketing or commercial purposes.
We may share your information only in the following limited circumstances:
We share data with trusted third-party vendors who help us operate the Service, including Supabase (database hosting), Stripe (payment processing), and AI providers (for content generation). These providers are contractually obligated to keep your data confidential and use it only to provide services to us.
We may disclose information if required to do so by law, court order, or government authority, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
If College Rugby Pipeline is acquired, merged with, or sold to another company, your information may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.
We may share your information for any other purpose with your explicit consent.
5. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to operate the Service and understand how you use it. Cookies are small text files stored on your device that help us maintain your session, remember your preferences, and analyse site usage.
We use the following types of cookies:
Required for the Service to function. These include session cookies that keep you logged in and security cookies that prevent cross-site request forgery. These cannot be disabled without affecting Service functionality.
Help us understand how users interact with the Service so we can improve it. We use anonymised or aggregated analytics data. You can opt out of analytics tracking by adjusting your browser settings or using browser extensions.
Store your settings and preferences (such as UI preferences) to improve your experience on return visits.
Most browsers allow you to control cookies through their settings. Note that disabling cookies may limit your ability to use certain features of the Service.
6. Your Rights and Choices
Depending on your location, you may have certain rights regarding your personal information. These may include:
Request a copy of the personal data we hold about you.
Request that inaccurate or incomplete data be corrected.
Request deletion of your personal data, subject to certain legal obligations.
Request your data in a portable, machine-readable format.
Object to processing of your data for certain purposes such as marketing.
Request that we restrict processing of your data in certain circumstances.
To exercise any of these rights, please contact us at support@collegerugbypipeline.com. We will respond to your request within 30 days. We may need to verify your identity before processing certain requests.
You may opt out of marketing emails at any time by clicking the "unsubscribe" link at the bottom of any marketing email or by emailing support@collegerugbypipeline.com. Note that you cannot opt out of transactional emails related to your account.
Residents of California, Virginia, Colorado, and other states with comprehensive privacy laws may have additional rights under applicable state law. Please contact us to learn more.
7. Data Retention
We retain your personal information and account data for as long as your account is active or as needed to provide the Service. Specifically:
- –Active account data (recruit profiles, activity logs, emails) is retained for the duration of your subscription
- –After account cancellation, data is retained for 90 days to allow for reactivation or export, after which it is permanently deleted
- –Billing and transaction records are retained for up to 7 years as required for tax and accounting purposes
- –Support communications are retained for up to 3 years
- –Anonymised and aggregated usage analytics may be retained indefinitely
You can export your recruit data at any time from within the Service (CSV export is available on Pro and Club plans). To request a full data export or early deletion, contact us at support@collegerugbypipeline.com.
8. Children's Privacy
The Service is intended for use by coaches and staff at college-level athletic programs. Accounts may only be created by individuals aged 18 or older. We do not knowingly collect personal information directly from children under 13.
Recruit profiles entered into the Service may contain information about individuals who are minors (high school students). As the data controller for this information, you — the coach or institution — are responsible for compliance with the Children's Online Privacy Protection Act (COPPA), the Family Educational Rights and Privacy Act (FERPA), and any other applicable laws governing the collection and handling of minors' data.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by email and/or by posting a notice within the Service at least 14 days before the change takes effect.
The "Last updated" date at the top of this page reflects when this policy was most recently revised. We encourage you to review this policy periodically.
10. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
We aim to respond to all privacy-related inquiries within 5 business days.