Privacy Policy

BRX Performance LLC ("Company," "we," "us") operates the BRX Recruiting platform ("Service"). This Privacy Policy explains how we collect, use, and protect your personal information.

1. Information We Collect

Account Information

Name, email address, and password when you create an account.

Athletic & Academic Profile

Graduation year, position, height, weight, GPA, test scores (SAT/ACT), baseball metrics (velocity, exit velocity, sprint times, etc.), grade-level metric history, and school preferences. This data is provided by you or by BRX Performance staff during Recruiting Assessment Meetings.

School & Outreach Data

Your school list, fit categories, outreach status, notes, and activity logs related to college program communication.

AI Coach Conversations

Messages you send to and receive from the AI Recruiting Coach (Coach BRX) are stored to maintain conversation history and improve the quality of guidance provided.

Technical Data

IP address, browser type, operating system, and general usage patterns collected automatically when you use the Service.

2. How We Use Your Information

• Provide and operate the Service, including school matching and analysis
• Generate personalized recruiting guidance through the AI Coach
• Help you compose outreach emails to college coaches (emails are sent from your own email account, not ours)
• Enable BRX Performance staff to support you during recruiting assessments
• Compute fit scores, percentile analysis, and metric projections
• Send you important account and service-related notifications
• Improve and develop new features for the Service
• Maintain security and prevent fraud

3. AI Processing

The AI Recruiting Coach is powered by Anthropic's Claude AI. When you use Coach BRX, your messages, relevant profile context, and recruiting email activity such as send/reply timing and school status are sent to Anthropic's API for personalized advice. Email bodies are not automatically included in the context; text you include in chat is processed as part of your message. We do not use Google data to develop, improve, or train non-personalized AI and/or ML models. For more information, see Anthropic's Privacy Policy.

4. Gmail Integration

Gmail connection is optional. We request gmail.send to send and reply on your behalf, and gmail.readonly to find and display eligible conversations. These Google permissions technically cover your mailbox; our application limits what it retrieves and stores as described here.

• Messages retrieved: Messages in known recruiting conversation threads, plus conversations from recognized coach addresses associated with programs on your school list, including recognized prior coach addresses. This can include coach-initiated conversations and conversations started outside BRX. We search Gmail for those senders and read matching messages; a sender match does not guarantee every message is about recruiting.
• Stored data: Sender addresses and names, subjects, plain-text message bodies, Gmail thread and message identifiers, timestamps, read status, and related outreach activity. We also retain app-sent email and open/click tracking. We do not modify or delete messages in your Gmail mailbox.
• Staff sharing: Connecting Google and consenting to staff access are separate choices. In Inbox > Email privacy, you can affirmatively allow your assigned BRX coach and the named BRX recruiting leads to read stored history (including previously connected accounts), new eligible email and email-derived advice, and send or reply on your behalf. Your current audience is named before you consent. College coaches receive your outgoing messages; they cannot access your BRX inbox.
• Reassignment: Permission follows the assigned BRX coach role. The former coach loses access through that assignment, the replacement gains it, and we notify you in the app and by email. Someone who separately remains a named, consented recruiting lead retains that access. Adding a new lead requires your updated consent.
• Withdraw staff access: Use Email privacy to withdraw at any time. This blocks subsequent staff access to email and athlete-scoped AI chats that may contain email-derived advice. It leaves your own Gmail connection and stored history available to you.
• Disconnect: Stops sending and syncing and removes our stored Google tokens. Captured history and the separate staff-sharing choice remain until withdrawn or deleted. You may also revoke access in Google Account permissions.
• Delete history: A separate, confirmed action deletes email, tracking, and athlete-scoped AI chat history from the live BRX service and disconnects Gmail. It does not delete Gmail messages. Reconnecting later can import eligible messages again. Account deletion also removes this history. Backup handling is described below.
• Tokens: Gmail access and refresh tokens are encrypted with AES-256-GCM; the encryption key is separate from the database. This token encryption does not mean every stored message has application-level encryption.

Google API Services Limited Use Disclosure

BRX Recruiting's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. This includes derived data, such as reply activity and related advice. We use this information to provide user-facing recruiting email management and assistance. We do not sell it or use it for advertising, unrelated market research, credit decisions, or to develop, improve, or train non-personalized AI and/or ML models.

Routine human review requires the affirmative staff-sharing choice above. Other human access is limited to the security and legal exceptions allowed by Google's policy. Necessary service providers process data to operate these features: Supabase for storage, Hostinger for application hosting, Google for email, and Anthropic for AI requests described above. We do not grant a general right to transfer Gmail data to third parties.

5. Data Sharing

We do not sell your personal information. We may share data with the following categories of service providers solely to operate the Service:

• Database & Authentication: Supabase (hosts our database and manages login)
• AI Processing: Anthropic (powers the AI Recruiting Coach)
• Hosting: Hostinger (runs our web server)
• Deletion records: Cloudflare R2 (stores a private backup of minimal deletion instructions: request and profile identifiers, deletion type, and request time; no mailbox addresses or message content)
• CRM: HubSpot (manages customer relationships)
• Email: Google Gmail API (sends emails on your behalf when you connect your Gmail, with your explicit consent)
• Error Tracking: Sentry (monitors application errors)

We may also disclose information if required by law, legal process, or government request, or to protect the rights, safety, or property of BRX Performance, our users, or the public.

6. Staff Access

BRX staff use athlete profiles, metrics and school lists to deliver recruiting services. Access to recruiting email and mixed AI chat history additionally requires the athlete's recorded consent and a current assigned-coach or named-lead role, as described above. Staff members whose accounts are disabled cannot use that access.

7. Data Security

We use industry-standard security measures to protect your data, including encrypted connections (HTTPS/TLS), secure authentication, row-level database security policies, and rate-limited API access. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Data Retention

Captured recruiting email is retained until you explicitly delete it or your account is deleted, including after Gmail is disconnected. There is no automatic 30-day email purge. You can request account deletion through info@brxperformance.com.

We retain the four most recent successful weekly database backups. Older copies can remain in these backups until they rotate out; a failed backup can extend their age. We retain a minimal deletion record outside database snapshots so requested deletions can be reapplied before restored data is made available. This record contains identifiers and the request time, not mailbox addresses or message content.

9. Children & COPPA Compliance

The Service is not intended for children under 13 years of age, and we do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly.

Users between 13 and 17 must have parental or guardian consent to use the Service. Parents or guardians may contact us to review, update, or request deletion of their child's information.

10. Cookies & Tracking

The Service uses essential cookies for authentication and session management. We do not use advertising cookies. App-sent outreach can contain BRX open-tracking pixels and tracked links to help you follow up; this is separate from website cookies. Error tracking (Sentry) may collect technical data about browser errors to help us fix issues.

11. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete information
• Delete your account and associated data
• Export your data in a portable format
• Withdraw consent for optional data processing

To exercise any of these rights, contact us at info@brxperformance.com.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or through the Service. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

13. Text Messaging (SMS)

BRX Performance offers text-message (SMS) communications to people who provide their mobile number and opt in to receive them.

We do not sell or share mobile numbers, SMS consent, or message data with third parties or affiliates for their marketing or promotional purposes. We may share this information only with service providers (e.g., carriers, messaging platforms) to operate our SMS program. Message frequency may vary. Message and data rates may apply. Reply STOP to opt out; HELP for help.

Opting in to text messages is not a condition of purchasing any product or service. For questions about our SMS program, contact info@brxperformance.com.

14. Contact

Questions about this Privacy Policy? Contact us at info@brxperformance.com