Privacy Policy

01Who is the data controller?

A “data controller” is the person or organisation that decides why and how personal data is processed.

Top Athlete Sports Group LLC (“TASG”, “we”, “us”, “our”), of 105 Wilton Avenue, Lexington, Kentucky 40508, USA, is the data controller for the personal data described in this policy. If you have any questions about this policy or about data protection at TASG, email [email protected] with “Data Protection” in the subject line.

02Key terms

Personal data is information that identifies a person, such as your name, date of birth, address, phone number, email address or IP address. Data is anonymous when it can no longer be linked to a person.

Special category data is personal data that needs extra protection because it is sensitive, for example health information. We only process it with your explicit consent.

Processing means virtually anything done with data, such as collecting, storing, using, sharing or deleting it.

03Which law applies?

We use your personal data only in line with the laws of the United States and the Commonwealth of Kentucky and, where they apply to you, the EU General Data Protection Regulation (“GDPR”) and the UK GDPR and as described in this Privacy Policy.

04Legal bases for processing

Unless a different legal basis is stated for a specific purpose below, we rely on one of the following:

• Contract: we need the data to provide the services you signed up or paid for, or to take steps you asked for before signing up.
• Consent: you have given clear permission for a specific purpose. You can withdraw it at any time.
• Legitimate interests: we need the data to run and improve TASG safely and well, after weighing our interests against yours.
• Legal obligation: the law requires us to process it, for example for tax and accounting records.
• Explicit consent: needed in addition to one of the above for special category data.

05Personal data you give us

You give us personal data when you apply, sign up, build a profile, upload documents, message other users, book a call, buy a plan or contact us. Depending on whether you are an athlete, a parent or guardian, a coach or a partner, this can include:

Account details

• Full name, email address and password (stored encrypted)
• Role on TASG (athlete, coach, agent) and the plan you chose

Identity and contact details

• Date of birth, gender, nationality, country of residence and city
• Phone and WhatsApp numbers, social media handles
• Parent or guardian name and contact details for athletes under 18
• Passport and visa details, where needed for college admission and student visas

Athletic profile

• Team (men’s or women’s basketball), position, height, weight, current club, league and club history
• National team history, statistics and links to stats pages
• Photos, highlight videos and game film
• Characteristics added by TASG staff, weekly schedule (school, practices, games) and time zone

Academic information

• Current school, graduation year, GPA, transcripts and intended major
• English and admission test scores (for example TOEFL, IELTS, Duolingo, SAT) and proof of those scores
• Other documents you upload, such as transcripts, passports and recommendation letters

Recruiting activity

• Colleges contacted on your behalf, coach interest, offers, visits and commitments
• Messages, voice messages and files exchanged on the platform, and call requests
• Tasks and notes shared between you and your TASG agent
• Contracts you sign with TASG, including your signature

Coaches

• Name, title, school, team, division and conference, and contact details
• Roster needs and openings you share, prospects you save, and athlete profiles you view

Special category data

• Health or injury information, only if you choose to share it with your TASG team (for example a strength and conditioning coach or dietitian on Premium+), and only with your explicit consent

Payments

• Plan, billing period and payment status. Card details go directly to our payment provider; TASG never sees or stores your full card number.
• For bank transfers, the payment reference and amount; for agents, the bank details needed to pay you

06Why we use your data

• To create and run your account and provide the plan you chose (contract)
• To assess your academic and athletic background and identify suitable colleges and programs (contract)
• To show your athlete profile to verified college coaches and share profile links with programs in outreach emails (contract)
• To send outreach and follow-ups to coaches, including from an email account you connect, and to track replies (contract)
• To organise calls, visits and deadlines, and to create video call links (contract)
• To guide you through applications, eligibility, scholarship offers and student visas (contract)
• To send you notifications, monthly reports and service emails (contract and legitimate interests)
• To take payments, handle refunds and keep accounting records (contract and legal obligation)
• To keep TASG secure, prevent fraud and misuse, and enforce our Terms (legitimate interests)
• To improve TASG, using aggregated information that does not identify you (legitimate interests)
• To feature testimonials or success stories, only with your consent (consent)

We recognise that your profile and documents are yours. You can view and update them in your account, and ask us to export or delete them.

Access by TASG staff is limited to people who need it for their work, such as your assigned agent and administrators. Agents can only see the athletes assigned to them.

If you give us personal data about someone else (for example a parent, guardian or reference), you confirm that you are allowed to share it and that they know about this policy.

07Children and young athletes

Many of the athletes we work with are under 18. We only collect personal data from a minor with the consent of a parent or legal guardian, who can review, correct or delete the minor’s data by contacting us. We do not knowingly market to children.

08Who we share data with

Within TASG

Authorised TASG staff and agents, on a need-to-know basis.

College coaches and programs

Approved, visible athlete profiles can be seen by verified college coaches on TASG, and profile links are shared with programs during outreach. You can hide your profile from coaches at any time by contacting us or from your account.

Your TASG team

On plans that include them, partner professionals such as a strength and conditioning coach, dietitian, mental performance coach or NIL advisor, only as needed to support you.

Service providers who process data for us

• Supabase: database, accounts, file storage and server functions for the platform
• Stripe: card payments and subscriptions
• Revolut Business: bank transfers and payouts
• Google: sending outreach through Gmail accounts you connect, Google Calendar and Google Meet links for calls, Google Fonts, and YouTube videos you choose to embed
• Cal.com: booking calls with our team
• Loom: Academy videos
• Microsoft: previewing Word, Excel and PowerPoint documents in the browser, through a short-lived link
• Our email provider, to send account and notification emails
• DigitalOcean and our app hosting provider: hosting the website and platform
• Apple and Google: distributing the TASG mobile app through their app stores

Authorities

Public authorities, courts or advisers where the law requires it or to protect our legal rights.

We do not sell your personal data.

09Website, cookies and technical data

When you visit tasg.us or use the platform, we automatically receive technical data such as your IP address, browser, device and the pages you visit. We use it to deliver the website, keep it secure and fix problems (legitimate interests).

We use cookies and similar storage that are needed for the site to work, such as keeping you signed in and remembering your light or dark mode and language. We do not currently use advertising or analytics cookies. If that changes, we will ask for your consent first and update our Cookie Policy.

Embedded content such as YouTube and Loom videos may set their own cookies when you play them, under those providers’ policies.

10International transfers

TASG works with athletes, coaches and providers in different countries, including the United States and the European Union, so your data may be processed outside your own country. When we transfer personal data internationally, we use appropriate safeguards, such as standard contractual clauses and data processing agreements with our providers.

11How long we keep your data

We keep personal data only as long as we need it for the purposes above. In general:

• Account and profile data: while your account is active, and deleted within a reasonable time after you close it or ask us to delete it
• Documents you upload: until you remove them or your account is closed
• Payment and accounting records: as long as tax and accounting law requires
• Applications that do not become accounts: deleted when no longer needed

We may keep data longer where the law requires it or for legal claims.

12Data security

Our website and platform use TLS encryption. Passwords are stored encrypted, documents are kept in private storage and opened through short-lived links, and access rules in our database limit who can see what. No system is completely secure, but we work to protect your data and review our safeguards regularly.

13Marketing

We only send you marketing messages if you have agreed to them or where the law allows us to contact existing users about similar services. Every marketing email includes a way to unsubscribe. Service messages about your account, calls and recruiting activity are not marketing.

14Social media and linked sites

If you contact us through social media, the platform and TASG may both process your data, and that platform’s privacy policy also applies. Our website and platform may link to other sites, such as college websites; we are not responsible for their privacy practices, and we encourage you to read their policies.

15Your rights

Depending on where you live, you have the right to:

• access your personal data
• correct inaccurate data
• have your data deleted
• restrict processing
• object to processing based on legitimate interests
• receive your data in a portable format
• withdraw consent at any time, without affecting processing already carried out

To use any of these rights, email [email protected] with “Data Protection” in the subject line. We will reply as soon as reasonably possible and within 30 days. If we need more time, or cannot do what you ask, we will tell you why.

16What we do not do

• We do not collect personal data from minors without the consent of a parent or legal guardian.
• We do not process special category data without explicit consent.
• We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Tools that suggest matches between athletes and openings only help our staff, who make the decisions.
• We do not sell your personal data.

17Complaints

If you believe we are not handling your personal data lawfully, you can complain to the Kentucky Office of the Attorney General or to the data protection authority where you live. We would appreciate the chance to deal with your concerns first, so please contact us at [email protected].

18Data breaches

If a security breach is likely to put your rights at risk, we will tell you and the relevant authority without undue delay, explain what happened and what we are doing about it.

19Changes to this policy

This policy was last updated on 27 October 2026. If we make important changes, we will update the date and tell registered users by email or in the platform.