Privacy Policy

Information we collect

We collect information in three ways: information you give us, information we receive when you sign in, and information collected automatically.

Information you provide. When you create an account or set up an athlete profile, we collect the contact, profile, content and onboarding information you choose to provide and information needed to administer your account. We use it to provide the service, evaluate athlete onboarding, communicate with you and operate the features you request.

When you nominate an athlete, subscribe to updates, or submit a report, you may give us your name, email address, and details relevant to your request (such as your sport, social or highlight links, and any message you include). If you build an athlete profile, we collect the profile content you create, including any photo you upload. Fans may add a display name and an optional profile photo.

Information from sign-in providers. If you sign in with Google or Apple, we receive basic profile information from that provider — typically your name and email address — to create and secure your account. We never receive your password. Apple may let you hide your email and share a private relay address instead; that address works the same way for account communications.

Information collected automatically. Like most websites, we collect limited technical information such as your device and browser type and how you use the site. Our own analytics do not store IP addresses. Where we need an address for security and abuse prevention (for example, rate limiting), we store only a salted, one-way hash. Our hosting, security, analytics, and payment providers may process IP addresses as part of providing their services to us.

In the language of some privacy laws, the categories of personal information we may collect are: identifiers (such as your name and email address); account and profile information; commercial information (the payment records described under Payments and Stripe below); internet or network activity (such as limited, privacy-preserving usage information); and the content you choose to submit. We do not collect government-identification documents, biometric data, or precise geolocation. Stripe collects payment, identity, and payout-verification information directly, as described under Payments and Stripe below.

How we use information

We use the information we collect to:

• operate, secure, and improve the Prospect website and services;
• create and manage accounts and athlete profiles;
• evaluate athlete onboarding and nominations, and contact you about them;
• send transactional messages (such as sign-in codes and confirmations) and, where you have opted in, occasional updates about Prospect;
• detect, prevent, and respond to fraud, abuse, and security issues; and
• understand how the site is used, in aggregate, so we can make it better.

How we share information

We do not sell your personal information. We share it only in the limited ways described below.

Service providers. We rely on trusted vendors to run Prospect and share information with them only as needed to provide their service to us. These include our hosting provider, our database and authentication provider, our email provider, our sign-in providers (Google and Apple), our analytics provider, our video provider, our payment processor (Stripe), and the AI providers described under Automated moderation and AI providers below.

Legal and safety. We may disclose information if required by law, or where we believe it is reasonably necessary to protect the rights, safety, or property of Prospect, our users, or the public.

Business transfers. If Prospect is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction; we will note any material change in this Policy.

Where your information is processed

Prospect is based in the United States, and we and our service providers may store and process your information in the United States and in other countries where we or they operate. Those countries may have data-protection laws that differ from the laws where you live. Where required, we take steps designed to ensure your information continues to receive an appropriate level of protection when it is transferred.

Cookies and similar technologies

We use cookies and similar technologies to keep you signed in, remember your preferences, secure the site, and measure usage. You can control cookies through your browser settings; disabling some cookies may affect how the site works, including staying signed in.

Some browsers offer a "Do Not Track" signal or a Global Privacy Control (GPC) signal. Because we do not sell or share your personal information for cross-context behavioral advertising, there is little for these signals to opt you out of; where the law treats a GPC signal as a valid opt-out request, we honor it.

Data retention

We retain personal information only for the purposes described in this Policy and for applicable legal obligations. We generally keep transaction, payout, refund, dispute and related tax/accounting records for seven years after the end of the calendar year of the transaction. We keep records verifying consent to recurring charges for the longer of three years after consent or one year after the Sponsorship ends. These periods may be extended for an applicable legal hold, investigation, claim or recordkeeping requirement. Other account and content information follows our ordinary retention practices, subject to the safety preservation rules above. Stripe and other providers may have separate retention obligations and policies.

Security

We use technical and organizational measures designed to protect your information, including encrypted connections, access controls, and storing sensitive values (such as security tokens) only as one-way hashes. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your choices and rights

You can:

• access or update your account information by signing in;
• unsubscribe from marketing emails using the link in those emails;
• request a copy of your personal information, or ask us to correct or delete it; and
• ask us questions about how we handle your information.

To make a request, contact us using the details below. We may need to verify your identity before acting on certain requests, and we may retain some information where the law allows. We will respond within the time required by applicable law, you will not receive discriminatory treatment for exercising these rights, and you may use an authorized agent to submit a request on your behalf where the law permits.

Children's privacy

Prospect is not directed to children under 13, and we do not knowingly collect personal information from them. Athletes who are minors may join only with the verified approval of a parent or guardian, and we collect a guardian's information solely to obtain and record that approval. If you believe a child has provided us information without appropriate consent, contact us and we will take appropriate steps.

Payments and Stripe

Stripe processes Sponsorship and Boost payments and provides athlete payout and identity-verification services. Payment details entered in Stripe’s hosted checkout are provided directly to Stripe. Prospect does not receive or store your full payment-card number or security code. Stripe handles payment and verification information under its applicable privacy notices, available at stripe.com/privacy.

We maintain payment records linking the payer’s account, the selected athlete, the amount, currency, transaction date, payment status and Stripe transaction references. We also record subscription and cancellation information, refunds and disputes, the Terms version accepted, and the renewal disclosures and consent associated with the transaction. We use these records to process purchases and payouts, provide access and support, manage subscriptions, prevent fraud, resolve disputes and meet legal, tax and accounting obligations. Receipts and payment-method updates are available through the Stripe customer portal.

US paid-feature eligibility is checked using your residence confirmation and billing information supplied during checkout. Stripe collects athlete identity and payout-verification information directly. Prospect does not collect or store copies of the identity documents submitted to Stripe; we receive the account and verification information needed to administer payouts. The relevant payment, account and device information may also be processed by Stripe for security, fraud prevention and its legal obligations.

Third-party links

Our site may link to third-party websites and services we do not control. Their practices are governed by their own policies, and we encourage you to review them.

Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will update the date at the top of this page and, where appropriate, provide additional notice.

Contact

Questions about this page? Email us at richie@prospectfan.com or call or text (669) 221-5763.