LeagueProof Privacy Policy

Last Updated: May 2026

Your privacy is important to LeagueProof, operated by UR Prospects Inc., a Delaware corporation (“LeagueProof,” “we,” “our,” or “us”), with operations in Michigan and California. LeagueProof is committed to the protection of your personal information. To ensure your personal information is secure, we communicate our privacy and security guidelines to LeagueProof employees and strictly enforce privacy safeguards within the company. Please read this Privacy Policy before visiting our websites, accessing our services, or providing any personal information to LeagueProof.

If you do not wish to have your information used and disclosed as provided in this Privacy Policy, please refrain from providing your information and/or delete the information you may have submitted in the past. In doing so, please understand that your access to information, services, and other benefits may be substantially limited.

LeagueProof is committed to the secure handling and disposal of personal data throughout its lifecycle. When personal data is no longer needed for the purposes for which it was collected, we employ secure disposal methods to ensure that the data cannot be recovered or accessed by unauthorized parties, including:

1.    Digital data: We use specialized software to securely erase digital data from storage devices, employing methods that meet or exceed industry standards for data destruction.

2.    Physical documents: Any physical documents containing personal information are shredded using cross-cut shredders and securely disposed of through a certified document destruction service

3.    Backup data: We maintain a data retention schedule that includes the secure deletion of backup data when it is no longer required for business or legal purposes.

We do not collect social security or equivalent national tax ID numbers, except for employment purposes. LeagueProof does not knowingly collect personal information from minors under the age of 13 without verifiable parental consent. If we learn that we have collected personal information from a minor under 13 without verifiable parental consent, we will take steps to delete that information as soon as possible. Users between the ages of 13 and 17 represent that they have obtained parental or guardian consent prior to creating an account. LeagueProof reserves the right to require verification of such consent at its discretion.

LeagueProof has established procedures for reporting and documenting security incidents. In the event of a security breach, employees are required to immediately report the issue to our dedicated security team. The security team will document the incident, assess its severity, and take appropriate measures to contain and resolve the issue.

1. Collection and Use of Personal Information

Personal information is data relating to a person that can be used to uniquely identify them, either directly or indirectly. This may include, but is not limited to, your name, email address, physical address, phone number, and other identifiable information. You may be asked to provide personal information when in contact with LeagueProof. If you do not provide us with certain requested personal information, we may not be able to provide you with some or all of LeagueProof’s products and services.

LeagueProof may collect sensitive personal data for specific services. When we collect such sensitive data, we implement additional safeguards, including enhanced encryption and strict access controls, to protect this information.

For all leagueproof.com users, we may use your data for the following purposes: (1) Contact information: to communicate with you about our products and services; (2) Payment information: to process transactions; (3) Usage data: for auditing, data analysis, and research to improve LeagueProof’s products, services, and customer communications; (4) Demographic information: to customize our products and services. LeagueProof and its partners may share personal information and use it as described in this Privacy Policy. This Privacy Policy does not cover what we do with data that is aggregated and anonymized so it is no longer associated with a personally identifiable user.

LeagueProof may disclose personal information to government authorities when required by law, in response to valid requests by public authorities (e.g., a court or government agency), or to protect our rights, privacy, safety, or property. We will carefully review each request and only disclose information to the extent necessary to comply with legal obligations.

LeagueProof uses third-party vendors and hosting partners to provide the hardware, software, networking, storage, and related technology required to run the LeagueProof platform. LeagueProof owns the code, databases, and all rights therein. When sharing data with third parties, we ensure that formal data sharing agreements are in place to protect your personal information and govern its use. No data transmission over the Internet or electronic storage of information can be guaranteed to be 100% secure. Please note that LeagueProof cannot ensure or warrant the security of any information you transmit via its websites and/or products, and you do so at your own risk.

2. Personal Information We Collect

When you visit our website(s), create a registered user account, purchase or register a product, complete a survey, or download a software update, we may collect information including but not limited to: name, mailing address, phone number, email address, athlete profile information (as described in Section 3 below), contact preferences, credit card information, and payment history.

We may also collect such information when you contact us in person (for example, at clinics, conferences, workshops, seminars, and other events), via telephone, facsimile, or email. We may receive and store certain types of website usage information when you visit our websites, including the page visited, the time, the source of the request, the type of browser making the request, the preceding page view, and other information about your engagement with our site and services. We may also collect your IP address and your Device Identifier. A Device Identifier is a number automatically assigned to the computer, cell phone, or tablet used to access the Internet.

When you browse our website(s), we may collect information about you regardless of whether you have created a registered user account. However, if you choose to access our websites anonymously, we may not be able to provide you with particular products or services.

3. Athlete Profile Pages

These pages may contain and collect: name, home and email addresses, phone number, school (name, city, and state), graduation year, GPA, ACT/SAT scores, transcripts, parent/guardian information (name, relation, email, and phone), age, birth date, photograph, height, weight, jersey number, social media handles, sports position, performance metrics, speed and strength information, sports awards, sports videos featuring the athlete, and other athlete profile information, as may be updated from time to time.

This information can be accessed by the athlete, coaches, and team administrators. For athletes located in the EU, affirmative consent will be obtained during the account registration process or through a separate consent prompt prior to recruiter access being enabled. Verified recruiters may access the profile information of athletes located outside the EU, and of those athletes inside the EU who have affirmatively consented to this access. The general public may have limited access to athlete profile information based on administrator-selected privacy settings. Home and email addresses, phone number, GPA, ACT/SAT scores, transcripts, parent/guardian information, age, birth date, graduation year, and sports awards are not available to the general public by default.

Athlete profile data, including academic records, performance metrics, and any health-related information, will not be used for AI model training purposes in personally identifiable form. See Section 3A below for details on how anonymized data may be used.

3a. Use of Data for AI and Machine Learning

LeagueProof is building AI-powered features designed to connect female athletes with recruiting opportunities, including athlete-recruiter matching and personalized profile recommendations. These features are central to LeagueProof's mission and will be introduced as the platform develops.

To build and improve these features, LeagueProof uses anonymized, de-identified data derived from platform usage to develop and train its AI and machine learning models. Before any data is used for this purpose, all personally identifiable information is removed or anonymized such that the data cannot reasonably be used to identify any individual user. LeagueProof will never use athlete profile data, academic records, or sensitive personal information for AI training in personally identifiable form.

By creating an account and using the Services, you consent to the use of your anonymized data for AI model training and platform improvement as described above. If you do not wish to have your anonymized data used for this purpose, you may withdraw this consent at any time by contacting us at privacy@leagueproof.com. Withdrawal of consent will not affect your ability to use the platform.

When AI-powered features that affect recruiting decisions are introduced, LeagueProof will provide advance notice and updated disclosures explaining how those decisions are made and what rights you have with respect to them.

4. Data Storage

LeagueProof uses third-party vendors and hosting partners to provide the necessary hardware, software, networking, storage, and related technology required to run the LeagueProof platform. LeagueProof owns the code, databases, and all rights therein. We incorporate reasonable safeguards to help protect and secure your personal information. However, no method of transmission over the Internet, wireless transmission, or electronic storage of information can be guaranteed to be 100% secure.

5. Disclosures to Third Parties

There are circumstances where we may wish to disclose or are compelled to disclose your personal data to third parties. We may share your personal information with: our subsidiaries, branches, or associated offices; our partners, vendors, licensees, agents, representatives, distributors, independent contractors, legal advisors, and other professional advisors; and/or any other third party where you have provided your permission.

We may also disclose your information: (a) in connection with a merger, acquisition, dissolution, or similar event, in which case you will be notified before your information is transferred and becomes subject to a different privacy policy; (b) when required by law or legal process; or (c) to protect the rights, property, or safety of LeagueProof, our users, or others.

When sharing data with third parties, we ensure that formal data sharing agreements are in place to protect your personal information and govern its use. We require all third parties to respect the security of your personal data and to treat it in accordance with applicable law.

6. Children

We do not knowingly collect personal information from children under age thirteen (13) (or the otherwise applicable age of digital consent in any particular jurisdiction) without verifiable parental consent. Children under the applicable age of digital consent are not permitted to use our websites and Services. Users between the ages of 13 and 17 represent that they have obtained parental or guardian consent prior to creating an account. LeagueProof reserves the right to require verification of such consent at its discretion. Parents or guardians of minor users have the right to review, correct, or request deletion of their child’s personal information by contacting us at privacy@leagueproof.com.

7. Web Beacons

Our website contains electronic images (generally, single-pixel .gif images) called “web beacons.” Web beacons allow LeagueProof and third parties to monitor and collect information about the viewer of the web page, such as the type of browser requesting the web beacon, the Device Identifier the web beacon is sent to, and the time the web beacon was viewed. LeagueProof uses web beacons to count web browsers, visits, and page views, and to monitor traffic and conversion patterns, personalize your experience, and determine whether messages were opened or links were clicked.

8. Cookies

A “cookie” is a small amount of data that often includes an anonymous unique identifier sent to your browser from a website and stored on your computer’s hard drive. When you access this website, cookies may be sent to your web browser and stored on your computer or mobile device. We use cookies to record information about your online preferences and allow us to tailor our websites to your interests. LeagueProof also uses cookies to serve some targeted advertising.

To help promote LeagueProof teams and athletes, we sometimes embed content from social media and other third-party websites. These may include YouTube, X (formerly Twitter), Facebook, SoundCloud, Instagram, and Pinterest. As a result, when you visit a page containing such content, you may be presented with cookies from these websites. LeagueProof does not control the dissemination of these third-party cookies, and you should check the relevant third party’s website for more information.

9. Hosted Service Partners and Their Privacy Options

Our major network advertising partners may include Facebook, Google, X (formerly Twitter), and their respective advertising networks. These partners may use cookies, web beacons, and similar technologies to collect information and use that information to provide measurement services and target ads. If you wish to restrict or refuse cookies, you should do this through the browser settings for each browser you use to access the Internet.

You can opt out of Facebook collection at www.aboutads.info/choices. You can opt out of Google Analytics at https://tools.google.com/dlpage/gaoptout, and adjust other Google privacy settings at https://myaccount.google.com/data-and-privacy. X also uses conversion tracking and tailored audience products for advertisements; you can modify your X privacy settings through the X platform’s privacy controls. Our website may also provide hyperlinks to other websites owned and controlled by others. LeagueProof is not responsible for the privacy practices of any website that it does not own or control.

10. Tracking

LeagueProof’s website does not respond to “Do Not Track” signals in browsers at this time. California residents may exercise additional privacy rights under CCPA/CPRA, including the right to opt out of the sale or sharing of personal information, as described in Section 17 of this Policy.

11. Messaging and Notifications[KW1]

LeagueProof’s private messaging tools (“LeagueProof Messaging”) are available to LeagueProof subscribers. Messages may be between one sender and one or more recipients, enabling users to have conversations with individual athletes, coaches, custom groups, or the whole team on the same LeagueProof roster.

When a message is sent, all participants in the conversation (except the sender) receive a notification that they have a new unread message. Once a message is deleted from the sender’s personal account, it is deleted from the recipient(s)’ account(s) as well. However, any information the sender submits through messaging may be passed along by the recipient without the sender’s knowledge, such as by forwarding the notification email or capturing and forwarding a screenshot of the message prior to deletion.

LeagueProof supports the privacy and competitiveness of teams by requiring authentication to view messages and files shared within a specific team. LeagueProof reserves the right, but is not obligated to, disclose any information if, in its sole opinion, it suspects the information involves a party who may be the victim of harassment in any form. Appropriate authorities may include, without limitation, law enforcement agencies, child protection agencies, or court officials.

We may use aggregated Messaging information for purposes such as auditing, data analysis, and research to improve LeagueProof’s products, services, and customer communications. LeagueProof will not share with any partners any information provided via Messaging, except in aggregate, unless explicitly approved by the team admin.

12. Retention of Personal Information

Your personal information will be retained for as long as necessary to carry out the purposes set out in this Privacy Policy (unless longer retention is required by applicable law). We will not retain any of your personal information beyond this period, and retention of your personal information will be subject to periodic review. We may keep an anonymized form of your personal information, which will no longer refer to you, for statistical purposes without time limits, to the extent that we have a legitimate and lawful interest in doing so.

13. Confidentiality and Security

LeagueProof is committed to seeking to safeguard all personal information that you provide to us; seeking to ensure that it remains confidential and secure; and taking all reasonable steps to ensure that personal privacy is respected. We obtain consent from users for the collection and processing of their personal data through opt-in mechanisms on our website and in our services. We maintain physical, electronic, and procedural safeguards to protect your personal information from misuse, unauthorized access or disclosure, and loss or corruption. We limit access to personal information to those staff members, joint venture partners, subsidiary companies, and third parties who need to know that information for the purposes set out in this Privacy Policy.

14. Compliance with Privacy Laws

LeagueProof complies with the California Consumer Privacy Act (CCPA) and its amendments under the California Privacy Rights Act (CPRA) as the baseline standard for all users regardless of location. LeagueProof also aligns its data practices with the General Data Protection Regulation (GDPR) as part of its broader commitment to data security, privacy, and compliance, including SOC II certification requirements. To the extent any user is located in the European Union or European Economic Area, LeagueProof will process their personal data in accordance with applicable GDPR requirements.

If you have concerns about how we handle your personal data, you have the right to lodge a complaint. In the first instance, please contact our Data Protection Officer at privacy@leagueproof.com. If you are not satisfied with our response, you may also have the right to complain to the relevant data protection authority in your jurisdiction.

If you wish to withdraw your consent for the processing of your personal data, please contact our Data Protection Officer at privacy@leagueproof.com. We will process your request within 30 days and update our records accordingly. Please note that withdrawing consent may affect our ability to provide certain services to you.

15. Right to Erasure

Users have the right to request the deletion of their personal data held by LeagueProof under certain conditions, such as when the data is no longer necessary for the purposes for which it was collected, or when the user withdraws consent. To exercise this right, users can contact our Data Protection Officer at privacy@leagueproof.com. We will review each request and, if approved, delete the personal data within 30 days of receiving a verified request, unless retention is required by law or for legitimate business purposes.

16. Right to Object

Users have the right to object to certain types of data processing, including direct marketing. If you wish to object to the processing of your personal data for direct marketing purposes or any other legitimate interests pursued by LeagueProof, you can contact our Data Protection Officer at privacy@leagueproof.com. We will honor your request and cease the relevant processing activities within 30 days of receiving a verified request, unless we have compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.

17. California Privacy Rights

Residents of California have rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to:

•       Know what personal information we collect about you, from where we collect it, and how it is used and shared.

•       Access a copy of the personal information we hold about you.

•       Correct inaccurate personal information we hold about you.

•       Understand how we process your personal information and how it may be shared.

•       Opt out of the sale or sharing of your personal information with third parties.

•       Request we delete your LeagueProof account and personal information.

•       Non-discrimination for exercising your privacy rights.

To make any of the above requests, please send an email to support@leagueproof.com. To opt out of the sale or sharing of your personal information, you may submit a request to privacy@leagueproof.com. We will respond to verified requests within 45 days, or up to 90 days where reasonably necessary with prior notice.

18. Notice for Users Outside California

Residents of certain states have additional privacy rights under their applicable state laws. The following states have enacted comprehensive privacy legislation that may provide you with rights including access, correction, deletion, and the ability to opt out of certain data processing activities:

Virginia Residents have rights under the Virginia Consumer Data Protection Act (CDPA), including the right to access, correct, delete, and obtain a copy of your personal data, and the right to opt out of profiling and targeted advertising.

Colorado Residents have rights under the Colorado Privacy Act (CPA), including the right to access, correct, delete, and obtain a copy of your personal data, and the right to opt out of profiling and targeted advertising.

Texas Residents have rights under the Texas Data Privacy and Security Act (TDPSA), including the right to access, correct, delete, and obtain a copy of your personal data, and the right to opt out of the processing of personal data for targeted advertising.

New York Residents are protected under the New York SHIELD Act, which requires LeagueProof to maintain reasonable data security safeguards and provide timely notification in the event of a data breach affecting your personal information.

Illinois Residents are protected under the Illinois Biometric Information Privacy Act (BIPA). LeagueProof does not currently collect biometric data. In the event LeagueProof introduces any features involving biometric data collection, Illinois residents will be notified and separate consent will be obtained prior to any such collection.

To exercise any of the rights described above, please contact us at privacy@leagueproof.com. We will respond to verified requests within 45 days, or up to 90 days where reasonably necessary with prior notice. LeagueProof will not discriminate against you for exercising any of your privacy rights.

19. Contact Us

This website is owned and operated by UR Prospects, Inc.

LeagueProof

Legal Department

480 N. Canton Center Rd., Suite 87574

Canton, MI 48187

legal@leagueproof.com

20. Changes

LeagueProof may periodically update this Privacy Policy. The most current version of the Privacy Policy will govern our use of your information and will always be available on the Site. By using the websites and products, you acknowledge your agreement to the terms of this Privacy Policy. We will notify you about material changes in the way we treat personal information by sending a notice to the email address specified in your membership account or by placing a prominent notice on our website. Any changes to this Privacy Policy will become effective on the date specified in the notice, which will be no less than 30 days from the date of notification.