Privacy

Last updated: May 22, 2026

What we collect

TransferIQ aggregates publicly-reported information about athletes in the NCAA transfer portal from open-source intelligence channels — news articles, public social posts, court records, public roster pages, public reference databases. We do not purchase data about private individuals from data brokers. We do not subscribe to any feed that includes information athletes have not made publicly available themselves or through reporting on them.

For coaches and compliance officers, we collect the information needed to provide the service: name, work email, phone (for SMS alerts), organization, role. Authentication is handled by Clerk; we store a minimum profile alongside Clerk's identity record.

For athletes, we maintain a dossier comprising biographical facts (school, position, class year, eligibility, hometown), portal status, and findings extracted from public sources. Every finding cites the public source it came from.

What we don't do

• We don't sell data to anyone, for any purpose.
• We don't use athlete data to train external models.
• We don't store credit cards, social security numbers, or any government-issued ID. We never need to.
• We don't aggregate criminal-record content for general background-check purposes. See the FCRA section below.
• We don't ingest from sources athletes have privacy-protected (closed social accounts, leaked private content, anything obtained via unauthorized scraping).

FCRA posture

TransferIQ surfaces public-record information for institutional due diligence. We do not operate as a Consumer Reporting Agency (CRA) under the Fair Credit Reporting Act. School customers using TransferIQ for decisions covered by FCRA (employment, housing, background-check-grade scholarship determinations) should consult their counsel about whether their use case requires a CRA-grade background-check provider.

Athlete rights

Any athlete who appears on TransferIQ may:

• Claim their profile at /me/claim. After email verification, they get the “Verified by athlete” badge on their dossier.
• Dispute any finding via the dossier. The finding shows as “Under review” immediately and a compliance officer reviews it within one business day. The athlete sees the resolution in their inbox.
• Request removal of their profile entirely by emailing privacy@transferiq.app. We delete or anonymize within 14 days.
• Export everything we hold on them in machine-readable form by emailing the same address.

Audit trail

Every dossier access is logged with the viewer's identity, a documented purpose (recruiting / compliance / due diligence / other), and a timestamp. Athletes can see who has reviewed their dossier in their inbox. Institutional admins can export the full audit log for their organization.

Data retention

Findings older than seven years are excluded from the corroboration math by default — a stale-information filter modeled on FCRA practice. Athletes who request profile deletion are removed within 14 days. Audit logs are retained for seven years to support compliance defensibility for our institutional customers.

Contact

Privacy questions, requests, or concerns: privacy@transferiq.app.