Privacy Policy

1. Who We Are

EuroScout Pro ("EuroScout", "we", "us") operates euroscoutpro.com, a recruitment network connecting American football players, clubs, coaches and scouts across Europe. For the purposes of GDPR and UK GDPR, EuroScout is the data controller for the personal data described in this policy. [Insert registered company name, company/registration number, and registered address.]

2. Scope Of This Policy

This policy applies to anyone who visits the site, creates an account, or otherwise interacts with EuroScout, and is written to meet the disclosure requirements of the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA). It works alongside our Terms of Service and Cookie Policy, not instead of them.

3. Categories Of Personal Data We Collect

We collect the following categories of data, depending on how you use the platform:

• Account and identity data: name, email address, password (hashed by our authentication provider), account role, and OAuth identifiers if you sign in with a third-party provider.
• Profile and recruitment data: date of birth, nationality, position, physical measurements, performance statistics, career history, club affiliations, and recruiting status — provided by you as a player or club.
• Content you submit: profile photos, film clips and film links, captions, messages sent to other users, club media, and bug reports.
• Payment data: for Premium subscriptions, billing is handled entirely by Stripe. We store subscription status and plan metadata, but never your full card number.
• Communications data: messages between users, call booking details, notification preferences, and support correspondence.
• Usage and device data: pages visited, profile views, film and clip engagement, votes cast, IP address, browser/device type, and approximate location derived from IP.
• Cookies and similar technologies: see our Cookie Policy for the full list of what we set and why.
• Push notification tokens: if you opt in to browser push notifications, we store the subscription endpoint needed to deliver them.

4. Why We Use Your Data, And Our Legal Basis

Under GDPR Article 6, every use of personal data needs a lawful basis. Here is ours, by purpose:

• Operating your account and the core service (profiles, messaging, watchlists, recruiting pipelines) — necessary to perform our contract with you.
• Processing Premium subscription payments — necessary to perform our contract with you, and to comply with tax/accounting obligations.
• Showing public profile and club directory content — necessary to perform our contract, since public discovery is the core purpose of the service you signed up for.
• Sending service emails (confirmations, call reminders, need matches) — necessary to perform our contract.
• Product analytics (PostHog), fraud prevention, rate-limiting and abuse detection — our legitimate interest in keeping the platform safe, reliable and improving over time, balanced against your privacy.
• Optional marketing or re-engagement emails, and non-essential analytics cookies — based on your consent, which you can withdraw at any time.
• Retaining records for billing, dispute resolution or legal claims — necessary to comply with a legal obligation, or our legitimate interest in defending our legal rights.

5. Public Profile Data

Players and clubs choose what profile content is public. Public pages may be viewed, shared and indexed by search engines and by other platform members for recruitment discovery. Do not include information in a public profile that you do not want visible to the public internet.

6. Private Platform Data

Messages, call requests, staff invites, admin notes, reports and account settings are treated as private operational data and are only shown to authorised users or administrators, never published publicly.

7. Cookies And Tracking Technologies

We use essential cookies for authentication and session security, and — only with your consent, collected through the notice shown on your first visit — optional analytics cookies to understand product usage. You can change your choice at any time; see our full Cookie Policy for the complete list of cookies, their duration and purpose.

8. Who We Share Data With

We do not sell your personal data. We share data only with the service providers ("sub-processors") needed to run EuroScout, each acting under a data processing agreement, and only for the purposes described in this policy:

• Supabase — database, authentication and file storage.
• Vercel — application hosting and content delivery.
• Stripe — subscription billing and payment processing.
• Postmark — transactional email delivery.
• Daily.co — video call infrastructure for scheduled recruitment calls.
• PostHog — product analytics (only after you accept optional analytics cookies).
• Upstash — rate-limiting infrastructure that briefly processes IP addresses to prevent abuse.

9. International Data Transfers

Our service providers may process data outside your country of residence, including in the United States. Where that happens, we rely on appropriate safeguards recognised under GDPR, such as Standard Contractual Clauses or the provider's own adequacy certifications, to ensure your data continues to receive an equivalent level of protection.

10. Data Retention

We keep personal data only as long as needed for the purposes described above. You can request deletion of your account and content at any time (see Section 11). Some records — such as billing history, fraud-prevention logs, or data needed to resolve an active dispute — may be retained for longer where we have a legal obligation or legitimate interest to do so, after which they are deleted or anonymised.

11. Your Rights Under GDPR / UK GDPR

If you are located in the EEA, UK or Switzerland, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data ("right to be forgotten"), subject to our legitimate retention needs above.
• Restrict or object to certain processing, including processing based on legitimate interest.
• Receive your data in a portable format, or have it transmitted to another controller.
• Withdraw consent at any time, without affecting processing carried out before withdrawal.
• Lodge a complaint with your local data protection supervisory authority.

12. California Privacy Rights (CCPA/CPRA)

If you are a California resident, in the last 12 months we have collected the categories of personal information listed in Section 3, for the business purposes listed in Section 4. We do not sell or share personal information for cross-context behavioural advertising, so there is nothing to opt out of under the "Do Not Sell or Share My Personal Information" requirement. You have the right to:

• Know what personal information we collect, use, disclose and (if applicable) sell or share.
• Delete personal information we hold about you, subject to certain exceptions.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of personal information (not applicable today, as noted above).
• Not be discriminated against for exercising any of these rights.
• Designate an authorised agent to make a request on your behalf.

13. Children's Privacy

EuroScout Pro is not directed at, and is not intended for use by, anyone under the age of 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

14. Data Security

We use industry-standard technical and organisational measures — including encryption in transit, access controls and rate-limiting — to protect personal data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

15. Changes To This Policy

We may update this policy as the product evolves. Material changes are reflected in a new policy version (this version: 2026-08-08) and, where you hold an account, you will be asked to reconfirm your consent to the current version the next time it materially changes.

16. Contact Us

Questions, requests to exercise the rights above, or complaints can be sent to info@euroscoutpro.com.