Privacy

Last updated: June 5, 2026

What we collect

TransferIQ aggregates publicly-reported information about athletes in the NCAA transfer portal from open-source intelligence channels — news articles, public social posts, court records, public roster pages, public reference databases. We do not purchase data about private individuals from data brokers. We do not subscribe to any feed that includes information athletes have not made publicly available themselves or through reporting on them.

For coaches and compliance officers, we collect the information needed to provide the service: name, work email, phone (for SMS alerts), organization, role. Authentication is handled by Clerk; we store a minimum profile alongside Clerk's identity record.

For athletes, we maintain a dossier comprising biographical facts (school, position, class year, eligibility, hometown), portal status, and findings extracted from public sources. Every finding cites the public source it came from.

Text message (SMS) notifications

SMS notifications are an optional, off-by-default feature for authenticated users. You can use every part of TransferIQ without enabling them — consent to SMS is never a condition of using the service. To turn them on, a signed-in user enters a mobile number and affirmatively checks the SMS box in Dashboard → Settings → Channels (the box is never pre-checked).

• What we collect: your mobile phone number and your message preferences (which alert types, quiet hours, frequency).
• How we use it: solely to send the transactional watchlist alerts you opted into (portal entries, cluster alerts, high-severity findings). We do not send marketing or promotional SMS.
• No sharing: No mobile information — your number or opt-in data — will be shared with third parties or affiliates for marketing or promotional purposes. We share your number only with our SMS delivery provider, Twilio, strictly to deliver the messages you requested.
• Opt out anytime:reply STOP to any message, or uncheck the SMS box in Settings. Reply HELP for help. Message & data rates may apply; message frequency varies.
• Proof of consent: each opt-in and opt-out is recorded in a consent ledger (number, verbatim consent text and version, timestamp, IP). See our SMS Consent & Opt-Out Policy.

What we don't do

• We don't sell data to anyone, for any purpose.
• We don't use athlete data to train external models.
• We don't store credit cards, social security numbers, or any government-issued ID. We never need to.
• We don't aggregate criminal-record content for general background-check purposes. See the FCRA section below.
• We don't ingest from sources athletes have privacy-protected (closed social accounts, leaked private content, anything obtained via unauthorized scraping).

FCRA posture

TransferIQ surfaces public-record information for institutional due diligence. We do not operate as a Consumer Reporting Agency (CRA) under the Fair Credit Reporting Act. School customers using TransferIQ for decisions covered by FCRA (employment, housing, background-check-grade scholarship determinations) should consult their counsel about whether their use case requires a CRA-grade background-check provider.

Athlete rights

Any athlete who appears on TransferIQ may:

• Claim their profile at /me/claim. After email verification, they get the “Verified by athlete” badge on their dossier.
• Dispute any finding via the dossier. The finding shows as “Under review” immediately and a compliance officer reviews it within one business day. The athlete sees the resolution in their inbox.
• Request removal of their profile entirely by emailing support@transferiq.io. We delete or anonymize within 14 days.
• Export everything we hold on them in machine-readable form by emailing the same address.

Audit trail

Every dossier access is logged with the viewer's identity, a documented purpose (recruiting / compliance / due diligence / other), and a timestamp. Athletes can see who has reviewed their dossier in their inbox. Institutional admins can export the full audit log for their organization.

Data retention

Findings older than seven years are excluded from the corroboration math by default — a stale-information filter modeled on FCRA practice. Athletes who request profile deletion are removed within 14 days. Audit logs are retained for seven years to support compliance defensibility for our institutional customers.

Contact

Privacy questions, requests, or concerns: support@transferiq.io.