| Supabase | database, authentication, file storage, and its own database and API logs (kept 7 days) and daily database backups (kept 7 days); and the email you forward or copy to us, in transit to us: it reaches us through a function we run at Supabase, which passes each message on to us as it came and stores none of it, and which, when a message is too large for us to receive, sends us only the message's size, which check refused it and its envelope addresses (the address it was sent to, and the return address of the mailbox that forwarded it) — what we then record is at /privacy/mail; the provider keeps that function's own request logs (the time, the web address the message was posted to, its size and our answer, never the message itself; kept 7 days) | United States (us-west-1 region; the function that receives forwarded mail is pinned to the same region, and a message reaches it through the provider's edge network). The provider is a Singapore company with support staff worldwide; its infrastructure provider is Amazon Web Services. |
| Vercel | application hosting and server logs (kept 30 days); Web Analytics for the public pages (§2): a request hash discarded after 24 hours, page paths, referrer, country and region (and, where our provider records it, the city), device type, browser and its operating system, and the named events with their two values | United States (primary processing); encrypted backups replicated globally. |
| SendGrid (Twilio) | inbound email you forward or copy to us, in transit to us, plus its delivery logs | United States. |
| Resend | the transactional email we send: the email confirming your early-access request (to the address you gave, with nothing else you entered in it), your sign-in codes, the notice that an early-access request arrived (an internal reference and the player's class, no name or address), an alert to our own team when forwarded mail fails to be filed (counts, times and a status code only, nothing about any family or message), an alert to our own team when forwarding set up by families has gone unproven for several days (counts of addresses only), a daily alert to our own team (a count only) when an inactive account has waited 90 days because the notice before closing it could not be delivered, and the notice before an inactive account closes, for which we keep a reference to that message and check with Resend that it reached you before closing anything; it holds the recipient address and the message text while it delivers them, plus its delivery logs | United States (primary processing). |
| Pushover | a phone alert to our operator each time we record an early-access request, carrying the athlete's graduating class, the program and an internal reference to the request (no name, no address and nothing you typed); deleted from its servers once delivery to the phone is verified, and after 21 days if it is never delivered | United States. It reaches the phone through Apple's or Google's notification service. |
| Anthropic | prompts and outputs when the recommendation feature runs; the content of stored recruiting mail our software processes (sorting what a coach asks for, camp dates, conversation summaries, missed-send checks), whether it arrived by forwarding, by copy, or through the one connected Gmail account, and the texts you log on a school's page (§2), which it sorts and reads the same way; the résumés and score reports it reads for your family; the public staff pages and camp pages our catalog crawler reads (§8); and the public pages our staff read while we build the code that reads a new kind of page, to see how that page is laid out (the purpose is named on our page for site owners). Deleted within 30 days, except content the provider flags as violating its usage policy, which it may keep for up to two years; not used to train models | United States. |
| Tavily | the search queries and page fetches our software uses to find and read public program pages — when a family asks for research, and when our catalog crawler looks for a program's staff page with no family involved. Tavily's terms allow it to use queries to improve its service, so our software composes every query itself from the school, the program and a general subject — or, when a family prepares for a call, the published name of the coach on the call. The only family-specific value that may appear in a query is the athlete's graduating class year; a check runs immediately before every query and refuses one in which it finds any of your family's names, addresses, scores or other profile details | United States. |
| Google | only for the one family with a connected Gmail account: messages read under the gmail.modify permission (our software reads and labels only; it never sends, trashes or deletes mail). Our use of Gmail data is limited to showing and organising that family's own recruiting mail; no person at Throughball reads it except to investigate a security problem or a bug | United States. |
| Google (Google Workspace) | our own email at trythroughball.com, including legal@ and hello@: the messages you send us and our replies, which a person at Throughball reads to answer you. For a family, that includes a reply to the email telling you your account is ready, a request about your rights (§9), and, where a parent confirms by email rather than in the app, the email in which the parent confirms that each athlete is in 9th grade or later and agrees to our terms and our privacy policy (§6). We keep that confirmation for the life of the account and delete it with the account; when a family's account is deleted we delete the family's other messages in our email too; and a message from a parent whose family has no account with us is deleted within 6 months of its arrival unless the account opens. Google deletes a message from its systems within 180 days after we delete it. | Any country where Google or the companies it uses keep facilities, as Google's data-processing terms allow. Google is a United States company. |