Privacy Policy

Iso collects the information you give it, and the records of using it:

• Account: your email address, whether you signed in by link or with Google, your birth year (asked once, to confirm you are at least 13), and your plan.
• Athletic profile: name, graduation year, high school and state, sport, position, measurables (height and weight, and the tests for your sport: in football the 40 time, bench, vertical and shuttle, in basketball wingspan, standing reach, vertical, lane agility and sprint), GPA and test scores, season statistics and the level they were played at, film links, camps and awards, intended major, financial-aid situation, and the divisions and regions you prefer. For basketball, your club program and circuit.
• What you write: the outreach emails you edit and send, the coach replies you paste back into a thread, your Notebook entries, dated measurables you log, and the questions you ask Iso Tutor.
• A parent or guardian's email address, if you invite one to a read-only view of your account.
• Usage and technical records: pages and features used, generation and send counts, server logs and error reports, and an audit trail of account and outreach events (identified by ids, not by content), kept to run the Service, detect abuse, and understand which features are used.

We do not collect behavioral-advertising data, we do not sell personal information, and we use no tracking pixels, including in the email Iso sends you.

• To compute school match scores with a deterministic algorithm.
• To generate your recruiting plan, guides, match explanations, roadmap and email drafts, and to answer tutor questions.
• To hand you the emails you write to coaches, opened in your own email account with the coach's address filled in (you press send there), and to keep the replies you paste back on their threads.
• To send you Iso's own email: sign-in links, the weekly report (which you can turn off on your account page), and a parent digest (which a parent can stop with one click).
• To take payments for a paid plan.
• To enforce Iso's pace and safety rules, and to find and fix problems.
• To understand which features are used and which plan prompts readers see and tap, so we can improve Iso and its plans. This uses Iso's own records, identified by account ids, not a third-party analytics or advertising service.

Producing these features can involve service providers acting for Iso, handling only what a feature needs. The “Who processes your information” section lists the kinds of providers.

Most Iso users are under 18. For them, and for everyone:

• No behavioral advertising, to anyone, at any age.
• We collect only what the recruiting service needs.
• We share a minor's information with no one beyond the providers in section 4, and only for the purposes there.
• No one under 13 may use Iso. If we learn we hold information from someone under 13, we delete it.
• A user aged 13 to 17 tells us a parent or guardian has reviewed the Terms of Service and this policy. A parent or guardian can ask us about, or ask us to delete, their child's information at support@isoathletes.com.
• A parent invited to an account sees what the athlete sees and can change nothing. The athlete's tutor questions are never shown to a parent.

We do not sell personal information. These are the kinds of providers that hold or carry it so that the Service can run, each for the purpose named and each under its own privacy terms:

• Hosting and database providers store the Service, its logs, and your account and profile.
• Payments providers process your card details, so Iso holds only a customer and subscription reference.
• Email providers carry Iso's own email to you: sign-in links, the weekly report, the parent digest and parent invitations.
• AI providers (currently Anthropic) handle profile data to support some of Iso's features.
• Rate-limit and background-workflow providers carry account ids and event names, not your profile content.
• Error-monitoring providers receive error reports with request bodies stripped, so a report carries ids, not your profile.
• Google, only if you choose to sign in with Google, which shares your Google account's email address with Iso.

Beyond these, we disclose information only when the law requires it or to protect the safety or rights of Iso, our users or the public.

We keep your account and profile while your account exists. Some records have their own rule:

• Outreach history (the emails you confirmed you sent, when, the replies you pasted back and the bounces you reported) is kept as your own record of your recruiting for as long as you have an account, and is deleted with it.
• Iso Tutor questions and answers are kept for the life of your account, deleted with it, never shown to a parent, and never used to generate anything else. They are kept because the monthly question allowance is counted from them and because a safety review of what the tutor said needs the history. Removing a question from a concept page's list hides it there; it is still kept, and still counts toward the month's questions.

You can download a copy of your data and delete your account yourself on your account page. Deletion removes your profile, plans, drafts, outreach history, notes, tutor history and match scores, and cancels any subscription. We keep the payment records our payments provider requires and the audit trail (which holds record ids and events, not your emails), for as long as the law or a dispute requires. You can also ask us to delete at support@isoathletes.com, and we do so within 30 days.

Wherever you live, you can:

• Access and take your data. The account page downloads it as a file.
• Correct it. Every profile field is editable.
• Delete it, from the account page or by a request to support@isoathletes.com.
• Object to or restrict a use of it, by writing to support@isoathletes.com.

California residents have further rights under the CCPA and residents of the EU and UK under the GDPR. We honor them, and we answer a verifiable request within the time the law allows. We never treat you differently for exercising a right.

Iso sets only the cookies it needs to work, and none for tracking, advertising or analytics:

• a session cookie that keeps you signed in, a sign-in security token, a cookie that carries where to return you after you sign in, and a short-lived check used when you sign in with Google.
• a cookie recording that you accepted the Terms and Privacy Policy on the sign-in form (24 hours).
• a cookie remembering which sport you came to sign up for (30 days), and one recording a referral link you followed (30 days).

Your browser also keeps four small things in its own local storage, none of them sent to Iso: your light-or-dark theme preference, the fact that you dismissed the cookie notice, the fact that you dismissed a tip inside the app, and, while you are midway through the recruiting profile, the work you have typed but not yet saved. Because every cookie above is essential, the notice you can dismiss has no settings to change: blocking them would stop sign-in from working.

While you are filling in your recruiting profile, your browser also keeps what you have typed but not yet saved, so a reload or a mis-tap does not lose it. It stays on your own device, is never sent to Iso except when you press Save, and is deleted as soon as a save succeeds or after a week, whichever comes first. You can throw it away yourself with the Discard it link the wizard shows when it brings work back.

• Everything is encrypted in transit (TLS).
• The database is encrypted at rest.
• Sign-in uses short-lived email links or Google, and Iso stores no passwords.
• Access to production systems is limited to the people who run Iso.
• The emails Iso helps you write to coaches carry your name, school, class year and position, and go out from the email account you send them from, never your phone number or home address.

No system is perfectly secure. If you think your account has been compromised, tell us at support@isoathletes.com.

If we learn that personal information has been accessed or disclosed without authorization, we will notify the affected users by email without undue delay, tell them what happened and what we are doing about it, and notify regulators where the law requires.

We will post any revision here with a new date at the top, and for a material change we will email you before it takes effect. Signing in after a revision asks you to accept it.

Questions about this policy or about your data go to support@isoathletes.com.

Iso Athletes LLC