Privacy Policy

Last updated: August 27, 2026

StitchXO, Inc. (“Stitch,” “we,” “us,” or “our”) provides a talent-discovery and roster-management platform for authorized staff of college athletic programs and professional sports organizations. This Privacy Policy explains what information we collect, how we use it, and the choices available both to the people who use the Service and to the athletes whose public athletic information appears in it. It applies to our website and application (the “Service”).

1. Information We Collect

From users of the Service (coaches, scouts, and staff)

• Account and contact information you provide — such as your name, work email address, organization, and role — when you request access, correspond with us, or use the Service.
• Content you create in the Service, such as notes, ratings, board and target selections, scouting evaluations, and messages within your organization’s workspace.
• Search queries you enter, which are processed and logged as described in Section 3.
• Usage and device data collected automatically, such as log data, pages viewed, approximate location derived from IP address, browser type, and similar diagnostics.
• Cookies and similar technologies used to keep you signed in.

About athletes (who are generally not users of the Service)

The Service contains profiles of athletes at the high school, college, and professional levels. This information is compiled from publicly available sources — such as public team rosters, published statistics, public recruiting and transfer listings, and publicly posted highlight film — and, where applicable, from licensed data partners. It concerns athletes in their public, athletic capacity. Athlete information in the Service includes:

• Identity and athletic profile: name, school or team, position, class year, height and weight as publicly listed, hometown, and public athletic accomplishments.
• Performance data: game and season statistics as publicly published.
• Derived estimates we generate: the Service applies our own statistical models to public performance data to produce ratings, rankings, comparisons, projections, and estimated market-value figures. These derived estimates are our own analytical output — they are not disclosed compensation, not reported by the athlete, and not obtained from any private source. See Section 8 and our Terms of Service (“Valuations, Ratings, and Estimates”).
• Illustrated avatars: where the Service displays an athlete likeness, it displays an illustration generated from publicly available imagery, not the photograph itself.

We do not collect athlete financial information, academic records from schools, medical information, or private communications, and the Service does not solicit any of these.

2. How We Use Information

• To provide, maintain, secure, and improve the Service;
• To authenticate users and administer organization workspaces;
• To generate the derived estimates described in Section 1;
• To respond to inquiries and provide support;
• To monitor and prevent fraud, abuse, and security incidents;
• To comply with legal obligations.

We do not sell personal information, and we do not use personal information for third-party advertising. We do not use athlete information to advertise to athletes or to anyone else.

3. Search Queries and AI Processing

When you search the Service, your query text is interpreted by artificial-intelligence models so that plain scouting language can be translated into structured search criteria. Two things are worth stating plainly:

• Our search models run on infrastructure we control. Query interpretation is performed by models we host on our own dedicated GPU infrastructure. Your query text is not sent to a third-party AI model provider for this purpose.
• Queries are logged. We retain search queries, their structured interpretations, and which account issued them, in order to operate the Service, improve search quality, and support your organization’s own history and audit views.

AI-generated content in the Service (for example, generated player summaries) is produced from the same public and derived data described in Section 1.

4. YouTube API Services

5. How We Share Information

• Within your organization. Content you create is visible to members of your organization’s workspace, consistent with the Service’s design and your organization’s role settings.
• Service providers (sub-processors). We share information with vendors that host, secure, and operate the Service under contracts that limit their use of the information to providing services to us. Our current sub-processors are:
  • Supabase — database, authentication, and realtime infrastructure
  • Netlify — web hosting
  • Cloudflare — content delivery and object storage
  • RunPod — GPU infrastructure for our self-hosted AI models
  • Amazon Web Services — data-collection and processing infrastructure
  We will update this list when our vendors change.
• Legal and safety. We may disclose information if required by law or to protect the rights, property, or safety of Stitch, our users, or others.
• Business transfers. Information may be transferred as part of a merger, acquisition, or sale of assets, subject to this Policy.

We do not sell personal information, and we do not “share” personal information for cross-context behavioral advertising as those terms are defined under the California Consumer Privacy Act.

6. Data Retention

We retain information for the life of the Service. Specifically:

• Account information: for as long as your account exists, and afterward as part of our business records.
• Workspace content (notes, ratings, messages, boards): for as long as your organization’s workspace exists. Content belonging to a departing staff member remains part of the organization’s workspace record, consistent with the Service’s design.
• Search query logs: we retain search queries and their structured interpretations indefinitely, to support search quality, your organization’s history and audit views, and improvement of our models.
• Usage and diagnostic logs: retained indefinitely for security, operations, and service improvement.
• Athlete information: retained for as long as we operate the Service. Athletes may request suppression from display as described in Section 8.
• YouTube metadata: only as described in Section 4 — this is the one category with a fixed deletion schedule, and it is required by our API license.

Where you exercise a deletion right under applicable law, we delete or de-identify the personal information the law requires us to delete; de-identified information (for example, query text no longer linked to any account) may be retained.

7. Security

We use administrative, technical, and organizational measures designed to protect information, including access controls, encryption in transit and at rest, and database-level tenant isolation that restricts each organization’s workspace content to authenticated members of that organization. Processing occurs in the United States.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach of security affecting your personal information occurs, we will notify affected users and organizations without undue delay, consistent with applicable law.

8. Athlete Information: Rights and Requests

Most athletes who appear in the Service are not users of it. If you are an athlete (or a parent or guardian of a minor athlete) and you have questions or concerns about your information in the Service, contact us at hello@stitchxo.com with the subject line “Athlete request” and we will respond within 30 days. You may request:

• Access — a description of the information about you in the Service;
• Correction — of information that is inaccurate as against its public source;
• Suppression — of your profile, your likeness, or specific derived estimates (such as an estimated market value) from display in the Service.

Two honest limitations: we cannot remove information from the public sources it came from, and where a legal exception applies (for example, information we are required to retain), we will tell you so. We will verify that suppression requests come from the athlete or the athlete’s parent or guardian.

Depending on your state of residence, some of the above may also be available to you as a matter of law; nothing in this section limits any legal right you have.

9. High School Athletes and Minors

Some athletes in the Service are under 18. For these athletes:

• We collect only public athletic information of the kinds described in Section 1, from public sources such as published rosters, published statistics, and public recruiting listings.
• We do not knowingly collect contact information, precise location, or any non-athletic personal information about athletes under 18, and the Service does not communicate with them.
• We do not use minors’ information for advertising or for any form of behavioral profiling. Derived estimates about minors are generated solely for the professional evaluation purposes of authorized staff and are visible only to authenticated users of the Service.
• A parent or guardian may exercise any of the rights in Section 8 on a minor athlete’s behalf, including suppression of the athlete’s profile or of any derived estimate.

10. Your Rights and Choices (Users)

Depending on your location, you may have rights to access, correct, delete, or port your personal information, or to object to or restrict certain processing. To make a request, contact us at hello@stitchxo.com. We honor browser Global Privacy Control signals where required by law. You can control cookies through your browser settings.

Note that content you created in an organization’s workspace may be retained by that organization as described in Section 6.

11. Children’s Privacy

The Service is intended for professional staff and is not directed to children under 13. We do not knowingly permit children under 13 to create accounts or collect personal information from child users. Our handling of public athletic information concerning athletes under 18 is described in Section 9.

12. Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice. Material changes to how we handle athlete information or minors’ information will be reflected in Sections 8 and 9 specifically.

13. Contact Us

Questions about this Policy or our data practices can be sent to hello@stitchxo.com. Athlete and guardian requests: hello@stitchxo.com with the subject line “Athlete request”.

StitchXO, Inc.