How CommitPath Baseball handles your data

1. What CommitPath Baseball does

CommitPath Baseball is a college-baseball recruiting service. It provides verified program and coach information, private player recruiting profiles, email templates, recruiting outreach, billing features and optional AI-assisted template generation.

2. Information you provide

Depending on the features you use, you may provide account/profile details, recruiting-profile information, saved templates and other recruiting content. CommitPath Baseball does not require optional recruiting-profile fields to be filled in.

3. Account and authentication data

CommitPath Baseball uses Google identity through Supabase Auth for account sign-in. The service receives the account information needed to authenticate you and operate your account, such as your account identifier, email address and profile metadata made available through the sign-in flow.

4. Google Gmail data

Connecting Gmail is optional and is separate from signing in to CommitPath Baseball. When you choose to connect Gmail, CommitPath Baseball requests only the Gmail API scopehttps://www.googleapis.com/auth/gmail.sendso it can send recruiting emails on your behalf, plus Google identity access needed to identify the connected sender address.

CommitPath Baseball does not request Gmail inbox-read, search, message-metadata, modification, archive, draft-management, label-management or Gmail-settings permissions. CommitPath Baseball does not read your Gmail inbox through this integration.

To keep the Gmail connection active, CommitPath Baseball stores the connected Gmail address and an encrypted OAuth refresh credential on the server. OAuth access credentials are used server-side to request short-lived access needed to send email. They are not exposed to the browser workflow.

You can disconnect Gmail from CommitPath Baseball settings. Disconnecting removes the stored Gmail connection credential from CommitPath Baseball and attempts to revoke the Google authorization.

5. Recruiting outreach and tracking

For new tracked sends, CommitPath Baseball stores the final rendered subject and body, the associated coach and school display information, send status and timestamps. Emails can contain an open-tracking image and tracked HTTP(S) links. CommitPath Baseball records open and click signals such as first/last signal times and counts.

Open and click signals are not definitive proof that a person read or clicked a message. Email image proxies, privacy features, security scanners, caching and link prefetching can generate or suppress these signals. This version does not persist raw IP addresses or User-Agent strings for open/click tracking.

6. Payments

CommitPath Baseball uses Stripe for payment processing. Payment-card details are handled by Stripe through its checkout flow; CommitPath Baseball stores the billing records and entitlement information needed to recognize purchases and provide the purchased access level.

7. AI-assisted features

When an eligible user chooses an AI-assisted template-generation feature, CommitPath Baseball sends the information needed for that requested generation to the configured AI provider. CommitPath Baseball does not use Gmail inbox contents for this feature because the product does not request Gmail inbox-read access.

8. How information is used

CommitPath Baseball uses information to authenticate users, operate recruiting features, send user-requested outreach, maintain send history and engagement signals, enforce product quotas and entitlements, process purchases, provide requested AI features, protect the service, troubleshoot failures and maintain service integrity.

9. Optional website analytics and advertising

If enabled after launch review, Google Analytics 4 (GA4) helps us understand visits to the public landing page, and Meta Pixel helps us measure visits from advertising. These tools may receive the public page address, referrer, device and browser details, approximate location derived from the network connection, and their own cookie or device identifiers. Google and Meta may process this information under their own privacy terms, including outside your country.

We do not send private athlete profiles, recruiting details, Gmail content, coach outreach content or payment-card details to GA4 or Meta Pixel. Marketing tags are limited to the canonical public landing page at /. We do not use the athlete profile to create advertising audiences.

When these tools are enabled and you opt in, GA4 may set cookies such as_ga and_ga_*; Meta Pixel may set_fbp or_fbc. Their retention and further use are governed by the providers' settings and policies.

10. Your privacy choices

Storage needed for sign-in, security, payments and remembering your choice remains active. Optional analytics and advertising are off until you choose them separately. Rejecting them does not prevent you from using CommitPath Baseball. When optional measurement is enabled, your choice is saved in this browser's local storage ascp_marketing_consent_v1. We honor a Global Privacy Control signal by keeping advertising off in that browser.

You can change or withdraw your choice at any time. Withdrawing stops future tag loads in this browser and removes supported first-party marketing cookies; it does not erase data already received by a provider. Clearing browser storage will make us ask again.

Optional marketing measurement is not active on this site.

11. Players, parents and younger visitors

Recruiting profiles can contain information about student athletes, including younger players. Parents or guardians may help manage a player's account. Advertising technology is kept separate from private recruiting profiles. Questions about a child's information, access, correction or deletion can be sent to the contact below. The treatment of younger players and any required parent or guardian permissions depends on the countries where the service is offered.

12. Service providers and sharing

CommitPath Baseball uses service providers that support the application, including hosting, database/authentication, payment processing, Google APIs and the configured AI provider. Information is shared with these providers only as needed to operate the corresponding user-facing feature, protect the service or comply with applicable legal obligations. CommitPath Baseball does not sell Google user data.

13. Google API Limited Use

CommitPath Baseball's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data obtained through the Gmail connection is used only to provide the user-facing Gmail sending functionality the user chooses to enable and related security/connection management.

14. Security and retention

CommitPath Baseball uses technical controls designed to limit access to sensitive data, including server-only provider credentials, encrypted Gmail refresh credentials, row-level database protections and restricted backend operations. Information is retained for as long as reasonably necessary to operate the service, maintain account and transaction records, protect the service and meet applicable legal obligations. Different categories of information can have different retention needs.

15. Changes to this policy

This policy may be updated when CommitPath Baseball changes how the service handles data. The current version will remain available on this page with an updated effective date when material changes are made.

16. Contact

For privacy questions or requests about your information, write tocontact@commitpathbaseball.com.