C
CALLDUP

Privacy Policy

Last updated: March 2026

Calldup ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the Calldup platform, website, and services (collectively, the "Service"). By using the Service, you consent to the practices described in this Privacy Policy.

1. Information We Collect

1.1 Information You Provide

When you create an account and use the Service, we collect information that you voluntarily provide, including:

  • Account information: your name, email address, and authentication credentials.
  • Athletic profile: sport, position, physical attributes, statistics, highlight film URLs, and recruiting preferences.
  • Academic information: GPA, test scores, graduation year, intended major, and academic interests.
  • Personal details: high school name, location, date of birth, and nationality or country of origin.
  • Payment information: billing details provided during subscription enrollment (processed and stored by Stripe; we do not store your full payment card number).

1.2 Information Collected Automatically

When you access the Service, we automatically collect certain information, including:

  • Usage data: pages visited, features used, search queries, and interactions with AI-powered tools.
  • Device information: browser type, operating system, device type, and screen resolution.
  • Log data: IP address, access times, referring URLs, and error logs.

1.3 Information from Third Parties

If you sign in using Google OAuth, we receive your name, email address, and profile picture from Google. We do not receive or store your Google password.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service, including personalized recruiting recommendations and AI-powered analysis.
  • Process your athletic and academic profile data through AI models to generate program matches, eligibility assessments, roster analysis, and coach outreach drafts.
  • Process subscription payments and manage your billing account.
  • Communicate with you about your account, subscription status, and Service updates.
  • Analyze usage patterns to improve the Service, fix bugs, and develop new features.
  • Detect, prevent, and address fraud, abuse, and security issues.
  • Comply with legal obligations and enforce our Terms of Service.

3. Third-Party Services

We rely on trusted third-party services to operate the Service. These providers have access to your information only as necessary to perform their functions and are obligated to protect it:

3.1 Stripe (Payment Processing)

Stripe processes all subscription payments and stores your payment card information securely. We do not have access to your full card number. Stripe's privacy policy is available at stripe.com/privacy.

3.2 Supabase (Data Storage)

Supabase provides our database infrastructure and stores your account, profile, and usage data. Data is encrypted at rest and in transit. Supabase's privacy policy is available at supabase.com/privacy.

3.3 Anthropic (AI Processing)

We use Anthropic's Claude API to power our AI-driven features, including program analysis, eligibility assessments, and coach outreach drafts. Your profile data and queries are sent to Anthropic's servers for processing. Anthropic does not use data submitted via its API to train its models. Anthropic's privacy policy is available at anthropic.com/privacy.

3.4 Google (Authentication)

If you choose to sign in with Google, we use Google OAuth to authenticate your identity. We receive your name, email address, and profile picture. Google's privacy policy is available at policies.google.com/privacy.

4. Cookies and Tracking

We use cookies to maintain your session and keep you signed in to the Service. These are essential, first-party session cookies required for the Service to function properly.

We do not use third-party tracking cookies, advertising cookies, or cross-site tracking technologies. We do not sell or share your data with advertisers.

5. Data Retention

We retain your personal information for as long as your account is active and as needed to provide the Service. If you cancel your subscription, your account data is retained in case you choose to resubscribe, unless you request deletion.

Upon receiving a verified request for account deletion, we will delete your personal information from our active systems within 30 days. Certain data may be retained in encrypted backups for a limited period as required for legal compliance, after which it will be permanently deleted.

6. Children's Privacy and COPPA Compliance

Calldup is designed for use by high school student-athletes, which may include users under the age of 18. We take the privacy of minors seriously.

In compliance with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under the age of 13 without verified parental consent. If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information promptly.

Users between the ages of 13 and 17 may use the Service with the consent of a parent or legal guardian. Parents and guardians may contact us at any time to review, modify, or request deletion of their child's personal information.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

  • Access: You may request a copy of the personal information we hold about you.
  • Correction: You may request that we correct any inaccurate or incomplete personal information. You can also update most of your information directly through your account settings.
  • Deletion: You may request that we delete your personal information, subject to certain legal exceptions.
  • Data portability: You may request a copy of your data in a structured, machine-readable format.
  • Objection: You may object to the processing of your personal information in certain circumstances.

To exercise any of these rights, please contact us at support@calldup.com. We will respond to your request within 30 days.

8. California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with additional rights regarding your personal information:

  • Right to know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of that information, the business purposes for collecting it, and the categories of third parties with whom we share it.
  • Right to delete: You have the right to request deletion of your personal information, subject to certain exceptions.
  • Right to opt out of sale: We do not sell your personal information to third parties. We do not share your personal information for cross-context behavioral advertising.
  • Right to non-discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.
  • Right to correct: You have the right to request correction of inaccurate personal information.

To submit a CCPA/CPRA request, please contact us at support@calldup.com. We may require verification of your identity before processing your request.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, secure authentication protocols, and regular security reviews.

However, no method of transmission over the Internet or method of electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

10. International Data Transfers

The Service is operated from the United States. If you are accessing the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. By using the Service, you consent to such transfers. We take steps to ensure that your data receives an adequate level of protection wherever it is processed.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. If we make material changes, we will notify you by posting the updated policy on the Service and updating the "Last updated" date above. Your continued use of the Service after any changes constitutes your acceptance of the revised Privacy Policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Calldup
Email: support@calldup.com

If you are a parent or guardian and believe your child has provided personal information without your consent, please contact us immediately and we will take steps to remove that information from our systems.