Privacy Policy

Iso collects the information you give it, and the records of using it:

• Account: your email address, whether you signed in by link or with Google, your birth year (asked once, to confirm you are at least 13), and your plan.
• Athletic profile: name, graduation year, high school and state, sport, position, measurables (for football: height, weight, 40 time, bench, vertical, shuttle; for basketball: height, wingspan, standing reach, vertical, lane agility, sprint), GPA and test scores, season statistics and the level they were played at, film links, camps and awards, intended major, financial-aid situation, and the divisions and regions you prefer. For basketball, your club program and circuit.
• What you write: the outreach emails you edit and send, the coach replies you paste back into a thread, your Notebook entries, dated measurables you log, the coach addresses you contribute, and the questions you ask the Iso AI tutor.
• A parent or guardian's email address, if you invite one to a read-only view of your account.
• Usage and technical records: pages and features used, generation and send counts, server logs and error reports, and an audit trail of account and outreach events (identified by ids, not by content), kept to run the Service and detect abuse.

We do not collect behavioral-advertising data, we do not sell personal information, and we use no tracking pixels — including in the email Iso sends you.

• To compute school match scores with a deterministic algorithm.
• To generate your recruiting plan, guides, match explanations, roadmap and email drafts with AI, and to answer tutor questions.
• To hand you the emails you write to coaches, opened in your own email account with the coach's address filled in — you press send there — and to keep the replies you paste back on their threads.
• To send you Iso's own email: sign-in links, the weekly report (which you can turn off on your account page), and a parent digest (which a parent can stop with one click).
• To take payments for a paid plan.
• To enforce Iso's pace and safety rules, and to find and fix problems.

Iso uses Anthropic's Claude models to generate plans, guides, explanations, drafts and tutor answers. For each of those, the parts of your profile that feature needs — and only those — are sent to Anthropic, PBC for processing. Anthropic's handling of that data is governed by its privacy policy at anthropic.com/privacy. Match scores are computed by code and involve no AI processing.

Most Iso users are under 18. For them, and for everyone:

• No behavioral advertising, to anyone, at any age.
• We collect only what the recruiting service needs.
• We share a minor's information with no one beyond the parties in section 5, and only for the purposes there.
• No one under 13 may use Iso. If we learn we hold information from someone under 13, we delete it.
• A user aged 13 to 17 tells us a parent or guardian has reviewed the Terms of Service and this policy. A parent or guardian can ask us about, or ask us to delete, their child's information at support@isoathletes.com.
• A parent invited to an account sees what the athlete sees and can change nothing. The athlete's tutor questions are never shown to a parent.

We do not sell personal information. These are the companies that hold or carry it so that the Service can run, each for the purpose named and each under its own privacy terms:

• Anthropic, PBC — AI processing of the profile data a feature needs (section 3).
• Stripe, Inc. — payments. Stripe holds your card details; Iso holds only a customer and subscription reference.
• Resend, Inc. — Iso's own email to you: sign-in links, the weekly report, the parent digest and parent invitations.
• Vercel, Inc. — hosts the Service and its logs.
• Neon, Inc. — the database that stores your account and profile.
• Upstash, Inc. — rate-limit counters keyed by your account id, so no account can generate, or look up coaches' addresses, without limit.
• Inngest, Inc. — background workflows (the five-day follow-up reminder, weekly reports), carrying ids and event names rather than content.
• Functional Software, Inc. (Sentry) — error reports. Request bodies are stripped before an error leaves the Service, so a report carries ids, not your profile.
• Google LLC — only if you choose to sign in with Google, which shares your Google account's email address with Iso.

Beyond these, we disclose information only when the law requires it or to protect the safety or rights of Iso, our users or the public.

We keep your account and profile while your account exists. Some records have their own rule:

• Outreach history — the emails you confirmed you sent, when, the replies you pasted back and the bounces you reported — is kept as your own record of your recruiting.
• Iso AI tutor questions and answers are kept for the life of your account, deleted with it, never shown to a parent, and never used to generate anything else. They are kept because the monthly question allowance is counted from them and because a safety review of what the tutor said needs the history.
• Coach addresses you contribute are kept with the coach's record, marked as community-added, so other athletes can see where it came from.

You can download a copy of your data and delete your account yourself on your account page. Deletion removes your profile, plans, drafts, notes, tutor history and match scores, and cancels any subscription; we keep the email records above, payment records Stripe requires, and the audit trail, for as long as the law or a dispute requires. You can also ask us to delete at support@isoathletes.com, and we do so within 30 days.

Wherever you live, you can:

• Access and take your data — the account page downloads it as a file.
• Correct it — every profile field is editable.
• Delete it — the account page, or a request to support@isoathletes.com.
• Object to or restrict a use of it, by writing to support@isoathletes.com.

California residents have further rights under the CCPA and residents of the EU and UK under the GDPR; we honor them, and we answer a verifiable request within the time the law allows. We never treat you differently for exercising a right.

Iso sets only the cookies it needs to work, and none for tracking, advertising or analytics:

• a session cookie that keeps you signed in, and a sign-in security token;
• a cookie recording that you accepted the Terms and Privacy Policy on the sign-in form (24 hours);
• a cookie remembering which sport you came to sign up for (24 hours), and one recording a referral link you followed (30 days).

Your light-or-dark theme preference is kept in your browser's local storage. Because every cookie is essential, the notice you can dismiss has no settings to change: blocking them would stop sign-in from working.

• Everything is encrypted in transit (TLS).
• The database is encrypted at rest by Neon.
• Sign-in uses short-lived email links or Google; Iso stores no passwords.
• Access to production systems is limited to the people who run Iso.
• The emails Iso drafts for coaches carry your name, school, class year and position, and go out from the email account you send them from — never your phone number or home address.

No system is perfectly secure. If you think your account has been compromised, tell us at support@isoathletes.com.

If we learn that personal information has been accessed or disclosed without authorization, we will notify the affected users by email without undue delay, tell them what happened and what we are doing about it, and notify regulators where the law requires.

We will post any revision here with a new date at the top, and for a material change we will email you before it takes effect. Signing in after a revision asks you to accept it.

Questions about this policy or about your data go to support@isoathletes.com.

Iso Athletes LLC