Privacy Policy

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and services, when you participate in activities on the Services, or otherwise when you contact us.

We automatically collect comprehensive data from all users, including:

• Personal Information Provided by You: Name, email address, phone number, date of birth, physical address, academic information (GPA, test scores, school name), athletic information (sport, position, stats, videos, awards), profile picture, and other similar data.
• Authentication Data: For user authentication and account management, we use Clerk. When you sign up or log in via Clerk, they handle your credentials and provide us with user identifiers and basic profile information as configured in our Clerk integration.
• Encrypted Messages: All messages sent through our platform are encrypted for your privacy and security. These encrypted messages are stored securely and are only accessible under specific safety circumstances as outlined in Section 4.
• Connections Data: We track and store information about connections made between users (athletes, coaches, recruiters) including connection requests, accepted connections, and interaction history to facilitate networking and improve our matching services.
• Comprehensive Activity Data (All Users): We continuously collect detailed activity information from all users including page views, time spent on profiles, click patterns, search queries, scroll behavior, feature usage, interaction patterns, login/logout times, session duration, device information, and comprehensive engagement metrics.
• Profile Interaction Analytics: We track whose profiles you view, when you view them, how long you spend viewing them, what sections you access, and detailed interaction patterns across all user sessions.
• Communication Analytics: We track message read status, response times, messaging patterns, and communication behaviors for all users to improve platform functionality and enable premium features.
• Cross-Platform and Cross-Session Data: We connect your activity across different sessions, devices, and time periods to create comprehensive user profiles and usage analytics.
• Automatically Collected Information: IP address, browser type, operating system, access times, pages viewed, device information, and detailed behavioral analytics when you access our Services.

Data Collection Scope: This data collection occurs automatically and continuously for all users as a core function of our platform, similar to professional networking platforms like LinkedIn.

We take your privacy seriously with our encrypted messaging system:

• End-to-End Encryption: All messages sent through our platform are encrypted using industry-standard AES-256 encryption protocols, ensuring that only intended recipients can read your communications.
• Limited Access Policy: Encrypted messages can only be accessed by our safety team in specific circumstances, including reported harassment, inappropriate behavior, or other safety concerns that threaten user wellbeing.
• Safety-First Approach: While we respect your privacy, we reserve the right to decrypt and review messages when investigating legitimate safety reports to protect all users, particularly minors on our platform.
• Transparent Process: Any access to encrypted messages follows a documented internal process and is limited to qualified safety personnel who have signed confidentiality agreements.
• Retention Policies: Encrypted messages are retained for safety monitoring purposes and may be preserved longer when involved in safety investigations or legal proceedings.
• User Reporting: Users can report concerning messages or behavior, which may trigger a safety review that includes accessing relevant encrypted communications.

By using our messaging system, you consent to this safety-focused access model as necessary for maintaining a secure environment for all users.

UpDrafted collects comprehensive data from all users continuously, but only premium subscribers can access detailed analytics about their activity and others' interactions with their profile.

Universal Data Collection: We collect detailed activity data from all users including:

• Comprehensive Activity Logs: All website activity, page visits, time spent on profiles, click patterns, scroll behavior, and feature usage for every user.
• Profile Interaction Data: Detailed records of profile views, interaction patterns, and engagement metrics across all user activities.
• Read Receipts and Message Analytics: Message read status, response times, and communication patterns tracked for all users regardless of subscription status.
• Session Analytics: Login/logout times, session duration, device information, and behavioral patterns during all user sessions.
• Search and Discovery Analytics: Search queries, filters used, results viewed, and interaction preferences for all platform users.
• Cross-Platform Analytics: Activity connections across sessions, devices, and time periods to create comprehensive user profiles.

Premium Access Model: While we collect this data from all users, only premium subscribers can:

• View who has visited their profile and when
• Access read receipts and message analytics
• See detailed activity insights and engagement metrics
• Access advanced search and discovery analytics
• View comprehensive interaction and engagement reports

Liability and Consent: By using our platform, you consent to all data collection practices. UpDrafted is not liable for any consequences resulting from data collection, analysis, or use. Data collection occurs automatically for all users as a core platform function.

Opt-Out: If you do not consent to comprehensive data tracking, please contact [email protected] to discuss account limitations or termination.

We implement comprehensive security measures to protect your data:

• Encryption: All messages are encrypted using industry-standard encryption protocols to protect your communications.
• Access Controls: Strict access controls ensure only authorized personnel can access user data, and only for legitimate safety or support purposes.
• Safety Monitoring: We monitor platform activity to identify and prevent potentially harmful or inappropriate behavior patterns.
• Data Minimization: We collect only the data necessary to provide our services, with enhanced collection limited to premium subscribers who have explicitly consented.
• Secure Storage: All user data is stored using secure, encrypted databases with regular security audits and updates.
• Regular Reviews: We regularly review our security practices and update them to maintain the highest standards of data protection.