Privacy Policy

1. Who we are

Onside (“Onside,” “we,” “us,” or “our”) operates a college soccer recruiting platform that helps players create profiles and connect with coaches, clubs, and academies. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

2. Information we collect

Depending on how you use Onside, we may collect:

• Account information — email address and password (stored securely via our authentication provider).
• Player profile information — name, date of birth, nationality, position, physical attributes, academic details, academy/club affiliation, highlight videos, photos, and other recruiting information you submit.
• Contact and waitlist information — name, email, role, school/organization, and message content when you contact us or join a waitlist.
• Club/agency applications — organization details and contact information submitted during registration.
• Usage data — basic technical information such as browser type, device, IP address, and pages visited, collected to operate and improve the service.
• Gmail connection information — if you connect Gmail, the address of that account and an encrypted token used to send email you approve, as described in Section 6.

3. How we use information

We use personal information to:

• Create and manage accounts and player profiles
• Review applications and verify submitted information
• Display approved profiles to coaches and other authorized users when the marketplace is available
• Respond to messages and support requests
• Send recruiting email through a Gmail account you connect, only when you choose to send it
• Send service-related notices (for example, account or status updates)
• Improve, secure, and operate the Onside platform
• Comply with legal obligations

We do not sell your personal information. We do not share player profiles publicly until a profile is approved and the relevant features are live.

4. Youth and parental involvement

Onside is intended for college recruiting and may involve athletes who are minors. If you are under 18, you should only use Onside with a parent or guardian’s involvement. Parents/guardians may contact us to request access, correction, or deletion of a minor’s information.

We do not knowingly collect personal information from children under 13 without appropriate parental consent. If you believe a child under 13 has provided information to us, please contact us so we can delete it.

5. Sharing of information

We may share information with:

• Service providers who help us host, authenticate, store, or operate the platform (for example, database and hosting providers), under confidentiality obligations
• Coaches, clubs, and academies when you have an approved profile and marketplace features make that information available for recruiting purposes
• Legal authorities when required by law or to protect the rights, safety, or integrity of Onside and its users

6. Gmail connection

Players can connect a Gmail account so Onside can send recruiting email through that account. Connecting Gmail is optional.

When you connect Gmail, Onside requests only these Google permissions:

• Send email (https://www.googleapis.com/auth/gmail.send) — permission to send email through the Gmail account you connect.
• Email address (https://www.googleapis.com/auth/userinfo.email) — permission to see the email address of that account.

You start the connection from your profile. Google then asks you to authorize sending through that account. Onside connects Gmail only after you give that authorization. For this feature, Onside does not request permission to read, search, or change your Gmail inbox, including Gmail read or modify permissions.

After you authorize the connection, Onside stores the Gmail address, the permissions requested, the connection status, when you connected, the time of the last send, and the last send error if a send fails. Onside also stores an OAuth refresh token so it can send a later message you approve. That refresh token is encrypted with AES-256-GCM before it is saved in our database and is tied to your Onside account and player profile. Onside does not store the contents of your Gmail inbox in this connection record.

Onside uses this information to show you which Gmail address is connected, to send messages you choose to send, and to disconnect the account when you ask. In Outreach, Onside can prepare a draft from your profile and the school you select. You can edit the subject and message. Onside sends that message through your connected Gmail account only after you choose Send. You can also send a test message to your own connected address from your profile. Google delivers the message to the addresses you selected. Onside then records the school, the coaches you addressed, and that the message was sent through Gmail. That outreach record does not include the message text.

We do not sell Gmail connection data, and we do not use it for advertising. Onside’s use of information received from Google APIs for this feature follows the Google API Services User Data Policy, including the Limited Use requirements. We use that information to provide and support the Gmail sending feature described in this section.

You can disconnect Gmail from your profile. Disconnecting deletes Onside’s stored connection, including the encrypted refresh token, and asks Google to revoke that token. Disconnecting does not delete your Onside account or your outreach history. If your account or player profile is deleted, the Gmail connection is deleted with it. You can also remove Onside’s access in your Google Account settings.

7. Data storage and security

We use industry-standard providers and safeguards to protect account and profile data. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security. You are responsible for keeping your password confidential.

8. Retention

We retain personal information for as long as your account is active or as needed to provide the service, resolve disputes, enforce our agreements, and meet legal requirements. You may request deletion of your account and related data by contacting us.

9. Your choices

• Update profile information from your dashboard (where available)
• Disconnect a connected Gmail account from your profile, which deletes the stored Gmail connection
• Request access, correction, or deletion by contacting us
• Opt out of non-essential marketing emails if we send them

10. International users

Onside may be accessed from outside the United States. If you submit information from another country, it may be processed and stored in the United States or other locations where our providers operate.

11. Changes

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Continued use of Onside after an update means you accept the revised policy.

12. Contact

For privacy questions or requests, use our contact form.