Privacy Policy

First Touch ("we," "us") helps student-athletes organize college recruiting outreach: tracking target schools, drafting personalized emails to college coaches, and sending them from the athlete's own connected Gmail account. This policy explains what information we collect, how we use it, and who we share it with.

When you create an account, we collect:

• Your name and email address (via Clerk, our authentication provider).
• Recruiting profile details you choose to enter: graduation year, position, height/weight, GPA and test scores, intended majors, NCAA ID, club and high school team names, your club or high school coach's name/email/phone, your city/state/phone/contact email, stats and honors, your schedule, and your school-search preferences (division, location, size, and similar).
• Links to your own highlight film hosted elsewhere (YouTube, Hudl, Veo) — we store the link, not the video.
• An academic transcript file, if you choose to upload one, stored securely and attached to emails only at your direction.
• The outreach templates you create and the emails our system generates and sends on your behalf, including delivery identifiers returned by Gmail.
• If you join a team or work with a consultant through First Touch: which organization you belong to, and any shared film, schedules, or camp details, and notes a coach or consultant leaves on your film.

• To personalize and send recruiting emails you review and approve before they go out.
• To track your outreach — which schools you've contacted, what you sent, and each school's status.
• To generate each personalized email draft, we send select facts from your profile (like your grad year, GPA, or stats) to Anthropic's API along with the target program's public information. This is consistent with Anthropic's standard API terms, under which API inputs are not used to train its models by default.
• If a coach or consultant invites you to their organization, they can see a summary of which schools you're targeting and each one's status — never your full profile, contact details, or the content of your emails.

Your recruiting profile is never published or made public. A coach only ever sees what's inside an email you chose to send them.

First Touch requests access to send email through your Gmail account (the gmail.send scope) so you can email coaches from your own address, in your own voice. We never read your inbox, and we only send messages you've reviewed and approved.

First Touch's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Coach replies return directly to the Gmail account that sent the message. First Touch does not read that inbox.

• Clerk — authentication, and secure storage of your Gmail connection on our behalf.
• Google — to send email through your connected Gmail account.
• Anthropic — to generate the personalized portion of each email draft.
• Neon — our database host, where your account and profile data is stored.
• Inngest — runs scheduled data-maintenance jobs for the service.
• A coach or consultant you explicitly join an organization with, limited to the summary described above.

We do not sell your personal information, and we do not use it for advertising.

We apply the following safeguards to your account information, recruiting profile, and transcript files:

• All traffic to and from First Touch is encrypted in transit over HTTPS/TLS.
• Your Gmail access token is never stored in our database. It is held and refreshed by Clerk, our authentication provider, and requested fresh, in memory, only at the moment you send an email.
• Connections between our application and our database (hosted by Neon) require TLS, and data at rest in our database is encrypted.
• Uploaded transcripts are stored in our database and served back only through an authenticated, session-scoped request tied to your account — there is no public or shareable link to them.
• Every non-public page and API route requires you to be signed in. Sharing with a coach or consultant additionally requires a verified organization membership or admin role, checked on our servers for each request — never based on information supplied by your browser.
• API keys, database credentials, and other secrets are stored as environment variables and are never committed to our source code.

If you have questions about how a specific piece of information is protected, contact us at the address below.

Many of our users are high school students. If you are under the age required in your location to agree to this policy on your own, a parent or guardian should review it and create or approve your account. We do not knowingly collect personal information from children under 13 without a parent or guardian's consent.

• You can edit or delete any profile detail, video link, or transcript at any time from your account.
• You can disconnect Gmail access at any time from your Google Account settings.
• You can leave an organization (stop sharing your funnel and film with a coach/consultant) at any time.
• To request deletion of your account and associated data, contact us at the address below.

Questions about this policy or your data? Contact us at trusten.lehmannkarp@gmail.com.