1. Introduction
Capital-10 ("we," "us," or "our") operates the Capital-10 platform, a college soccer recruiting tool designed for student-athletes and their families. We respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains what data we collect, how we use it, and your choices regarding your information.
2. Information We Collect
We collect information you provide directly when you create an account and use our platform:
- Account information: Family name, email address, and password.
- Student-athlete profiles: Player name, graduation year, position, academic information (GPA, test scores), athletic stats, and highlight video links.
- Recruiting activity: School lists, communication logs, notes, and timeline entries you create within the platform.
- Subscription and billing: Plan selection and payment details. Payment processing is handled by our third-party payment provider — we do not store full credit card numbers.
- Usage data: Pages visited, features used, and general interaction patterns that help us improve the platform.
3. How We Use Your Information
- To provide, maintain, and improve the Capital-10 platform and its features.
- To personalize your experience, including school matching and recruiting recommendations.
- To process your subscription and manage billing.
- To send you important account notifications, updates, and support messages.
- To analyze usage trends and improve our services.
4. Children's Data & Parental Consent
Capital-10 is designed for families navigating the college recruiting process. We collect each player's date of birth at sign-up so we can apply the correct privacy protections under COPPA (Children's Online Privacy Protection Act) and align with FERPA (Family Educational Rights and Privacy Act) for academic data.
- Under 13: An account may only be created and managed by a parent or legal guardian. We do not knowingly collect personal information directly from children under 13.
- Ages 13–17: A player may register, but the account remains inactive until a parent or guardian verifies consent via a one-time email link. We log the parent's email, the timestamp, and the IP address used to verify consent as part of our verifiable parental consent record.
- 18 and over: The player may register and manage the account directly.
- Academic records: GPA, transcripts, test scores and similar academic data are treated as student education records and are only shared with college coaches at the family's explicit direction, consistent with FERPA principles.
- Withdrawing consent: A parent may withdraw consent at any time by emailing support@capital-10.com; we will deactivate and delete the account upon receipt.
5. Information Sharing
We do not sell your personal information. We may share information only in these limited circumstances:
- Service providers: Trusted third parties that help us operate the platform (e.g., payment processing, email delivery, hosting). These providers are contractually obligated to protect your data.
- Legal requirements: When required by law, regulation, or legal process.
- With your consent: When you explicitly choose to share information, such as sending communications to college coaches through the platform.
6. Cookies
We use cookies and similar technologies to keep you logged in, protect your account, and understand how you use the platform. For full details on the cookies we use and how to manage them, please see our Cookie Policy.
7. Data Security
We implement industry-standard security measures to protect your data, including encryption in transit and at rest, secure authentication, and regular security reviews. However, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.
8. Data Retention & Account Deletion
We retain your personal information for as long as your account is active or as needed to provide our services. You may delete your account at any time from Settings → Privacy & Account → Delete My Account. Self-service deletion works as follows:
- Immediate soft delete: The account becomes inaccessible right away.
- 7-day grace window: Signing back in within 7 days cancels the deletion and restores your account.
- Permanent purge: After 7 days, the account, profile, recruiting list, communications, and related records are permanently deleted from our systems and cannot be recovered.
- Audit log: A minimal, anonymized audit record (event type, timestamp) is retained where required by law or to demonstrate compliance with parental-consent and deletion obligations.
9. Your Rights and Choices
- Access and update: You can view and update your personal information through your account settings at any time.
- Delete your account: Use the self-service option in Settings, or contact us at support@capital-10.com.
- Parents of minors: Parents and guardians may review, correct, or request deletion of their child's information at any time by contacting support.
- Email preferences: You can opt out of non-essential emails through your notification preferences.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a notice on our platform. Your continued use of Capital-10 after changes are posted constitutes your acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy or how we handle your data, please contact us at support@capital-10.com.