RecruitBoost
Sign In

Privacy Policy

Last updated: March 3, 2026

1. Introduction

RecruitBoost ("we," "our," or "us") operates the website recruitboost.io (the "Service"). This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use our Service, including information obtained through Google APIs.

2. Data We Collect

We collect the following types of information:

Account Information

  • Name, email address, and profile picture (provided during signup or via Google OAuth)
  • Sport, graduation year, athletic stats, academic information, and school preferences (provided by you in your profile)
  • Password hash (if using email/password authentication)

Google User Data

If you choose to connect your Gmail account, we access the following Google user data:

  • Gmail messages: We read and send emails on your behalf solely for the purpose of communicating with college coaches through the RecruitBoost platform.
  • Gmail OAuth tokens: We store encrypted access and refresh tokens to maintain your Gmail connection.

Usage Data

  • Emails sent and received through the platform (subject, body, timestamps)
  • Coaches you have saved or contacted
  • Tasks and follow-up reminders you create
  • Activity logs (e.g., emails sent, coaches saved)

3. How We Use Your Data

We use the information we collect to:

  • Provide the Service: Authenticate your account, display your profile, and enable you to search for and contact college coaches.
  • Send and receive emails: When you connect Gmail, we use your Gmail API access to send outreach emails to coaches and sync incoming replies so you can manage all correspondence within RecruitBoost.
  • Generate email drafts: We may use AI (Anthropic Claude) to help you draft outreach emails based on your profile and the coach you are contacting. Your profile information and the coach's publicly available information are sent to Anthropic's API for this purpose.
  • Track your recruiting progress: Display dashboards, saved coaches, activity history, and follow-up reminders.
  • Improve the Service: Understand how the platform is used to fix bugs and improve features.

4. Data Sharing

We do not sell your personal data. We share data only in the following limited circumstances:

  • College coaches: When you send an email through RecruitBoost, the coach receives your email (including your name, email address, and message content) via Gmail.
  • Anthropic (AI provider): When you use the AI email generation feature, your profile information and the target coach's publicly available details are sent to Anthropic's Claude API to generate a draft. Anthropic does not use this data for training. See Anthropic's Privacy Policy.
  • Infrastructure providers: We use Vercel (hosting), Neon (PostgreSQL database), and Google Cloud (OAuth and Gmail API) to operate the Service. These providers process data as necessary to deliver their services and are bound by their own privacy policies.
  • Legal requirements: We may disclose data if required by law, regulation, or legal process.

5. Data Storage and Protection

We take the following measures to protect your data:

  • All data is transmitted over HTTPS with TLS encryption.
  • Passwords are hashed using bcrypt with a cost factor of 12 and are never stored in plaintext.
  • Gmail OAuth tokens are stored in our database and used only to maintain your Gmail connection.
  • Our database is hosted on Neon (PostgreSQL) with SSL connections required.
  • The application is hosted on Vercel with automatic HTTPS, DDoS protection, and secure infrastructure.
  • Access controls are enforced server-side on every request. No access control logic runs on the client.

6. Data Retention and Deletion

We retain your data for as long as your account is active. You may request deletion of your data at any time:

  • Account deletion: Contact us at support@recruitboost.io to request complete deletion of your account and all associated data.
  • Gmail disconnection: You can disconnect your Gmail account at any time from the Settings page. When you disconnect, we delete your stored Gmail OAuth tokens. You can also revoke access from your Google Account permissions page.
  • Data export: You may request a copy of your data by contacting us at the email above.
  • Upon account deletion, all your personal data, emails, saved coaches, tasks, and activity history are permanently deleted from our database.

7. Google API Services Disclosure

RecruitBoost's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only use Google user data (Gmail access) for the purpose of sending and receiving emails with college coaches on your behalf. We do not use Google user data for advertising, and we do not allow humans to read your emails unless you explicitly request support assistance.

8. Cookies

We use essential cookies only for authentication (session tokens). We do not use advertising or tracking cookies.

9. Children's Privacy

RecruitBoost is intended for use by high school and college-age student-athletes (typically ages 14 and older). We do not knowingly collect personal information from children under the age of 13. If you believe a child under 13 has provided us with personal information, please contact us so we can delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at: support@recruitboost.io