Privacy Policy

1. Scope and our role

OG1 is the professional identity platform built for sports. This Policy describes how we handle personal information in connection with og1.app, app.og1.app, and other OG1 services that reference it. It applies to visitors, account holders, people whose professional records appear on OG1 before they join, endorsers, and organization representatives.

We determine the purposes and means of operating OG1's public professional-identity service. Where we process particular nonpublic organization information solely on an organization's documented instructions under a separate agreement, that agreement and the organization's notices also apply. An organization's administrative access does not make it the owner of an individual's identity or automatically give it access to private account information.

This Policy is a notice, not a request for blanket consent. The existence of a public record about you does not mean you created an account, consented to marketing, approved the record, or endorsed OG1.

2. Information we handle and its sources

2.1 Professional records, including records about non-users

We assemble and maintain professional records using publicly available professional information, information people submit about themselves, and information provided by organizations or other authorized contributors. Sources may include public staff directories, professional biographies, professional websites, published career materials, and an organization's submitted roster. The source and reliability of information can vary.

A record may include a name, professional role, sport, organization, current and historical employment, education, achievements, professional biography, location at a professional-directory level, and links to professional materials. Images, documents, and media may also appear where supplied or used with an appropriate basis. We do not treat public accessibility as unrestricted permission to use every item.

A pre-created record may concern someone who has never interacted with OG1. It may contain errors or outdated details. Our correction, removal, and privacy channels are available to those individuals without requiring registration or a profile claim.

2.2 Account and profile information you provide

When you create an account, claim a profile, or use profile features, we handle the contact and authentication information necessary for that account and the information you choose to submit. Profile content may include a photograph, banner, headline, biography, philosophy, specialties, career history, education, achievements, links, and supporting media or documents. Some fields are optional; required fields are identified in the relevant interface.

We use Clerk for sign-in and account management. Account information includes your name, your email address and the profile details you choose to add.

2.3 Endorsements, relationships, content, and messages

We handle endorsements and associated speaker information, submission permissions, invitations, approval status, and any supported media the endorser provides. An invited endorser may submit information without opening a full account where that workflow is offered. Public endorsements can identify the speaker and their professional relationship to the profile owner.

We also handle supported follows, connections, posts, comments, reactions, direct messages, and information needed to deliver those features. A person's public professional relationships may be visible where the interface identifies them as public. A message's content and delivery information are processed to provide messaging and address applicable safety, support, security, and legal needs.

Endorsements and posts can include text, photos and video. Mux processes and delivers video. Cloudflare R2 stores files and media.

2.4 Organization, support, and request information

Organization representatives may provide administrator contact details, role assignments, current staff rosters, invitations, organization content, and onboarding information. We also handle support communications, reports, correction requests, removal requests, and information reasonably necessary to assess identity, authority, or a dispute.

We use proportionate verification for the request involved. Do not send a government ID, a password, a Social Security number, or confidential school records through ordinary email or a public form. If additional evidence is necessary, we will explain what is needed and identify an appropriate submission method.

2.5 Device, usage, and visibility information

The Services can generate information about visits, profile views, search appearances, feature use, and engagement. These signals support service operation, security, product analysis, and the visibility analytics offered to users and organizations. Visibility statistics do not, by themselves, measure professional merit or suitability for employment.

OG1 collects usage data automatically, including the pages you visit, the actions you take, device information and your IP address. We use PostHog for product analytics. On our website, PostHog starts without cookies and keeps its identifier in memory only. If you accept cookies, PostHog stores an identifier in your browser and records your sessions to help us improve the site, and it masks what you type into form fields. Google Analytics 4, HubSpot and the LinkedIn Insight Tag can load, but only after you accept cookies. Vercel Analytics measures visits without cookies.

2.6 Payments and additional processing

Individual profiles are currently free. If an organization purchases services, we handle the business and transaction information needed to administer that relationship. Stripe processes payments for the organization plan. Card details go directly to Stripe, and OG1 does not store card numbers.

3. How we use information

We use relevant information to assemble, identify, and maintain professional records; enable authorized claiming and profile management; publish the content and professional context intended for public display; deliver endorsements, communications, and relationship features; and administer organization pages and current rosters.

We also use information to respond to requests, investigate inaccuracies or impersonation, protect accounts and the Services, diagnose problems, understand service use, provide supported visibility analytics, meet legal obligations, and establish or defend legal claims. These purposes are limited by the nature of the information, the context in which it was obtained, applicable settings, and law.

Where permitted, we may send product information or invitations to discover and claim an existing record. These communications do not represent that the recipient already joined OG1 or that their institution authorized the invitation. Promotional communications include an appropriate opt-out. Opting out of marketing and requesting removal of a record are separate choices; you may do either or both.

We will provide any notice and obtain any consent required before a materially different use of personal information. Accepting the Terms does not override privacy choices or create consent where a separate opt-in is required.

4. What is public and who receives information

4.1 Public audiences and search engines

Public professional profiles, public organization pages, approved public endorsements, and other published content may be available to anyone, including people outside your country and people without an account. Search engines may index these pages. Public links can be shared and supported profile exports can be distributed by their users.

Account credentials, identity-verification evidence, private support requests, and direct messages are not public profile fields. Contact information you intentionally place in a public field may become public even if the same information is also used privately for your account. Review the field and its audience before publishing.

4.2 Organizations and other users

An authorized organization administrator can receive information needed to manage its organization page, current roster, invitations, and contracted features. Removing you from an organization's current roster does not give it ownership of your profile. Other users receive information necessary for the interactions you initiate, such as your identity with a message or endorsement.

4.3 Service providers

We disclose information to providers that perform services for us to the extent needed for their work, subject to applicable contractual and legal restrictions. Relevant services may include hosting, authentication, storage, communications delivery, security, support, analytics, and payment administration. Our providers include Clerk (authentication and account management), PostHog (product analytics), Cloudflare R2 (file and media storage), Mux (video processing and delivery), Stripe (payment processing for the organization plan) and, on our website, Vercel (hosting and analytics), Cloudflare Turnstile (bot checks on forms) and Resend (email delivery). If you accept cookies, Google Analytics, HubSpot and LinkedIn also receive information from your browser.

4.4 Legal needs, safety, and business changes

We may disclose relevant information where reasonably necessary and lawful to comply with legal process, protect rights or safety, investigate fraud or abuse, or enforce valid agreements. We assess requests in context and do not treat every informal demand as sufficient authority for disclosure.

Information may be involved in a merger, financing, reorganization, acquisition, or sale of relevant business assets, subject to appropriate safeguards and applicable law. A transaction does not eliminate your rights or automatically authorize a materially different use inconsistent with required notice or consent.

4.5 Your direction and appropriately de-identified information

We may disclose information at your direction or with a valid permission. Where we create aggregated or de-identified information, we take measures appropriate to its intended non-identifiable status and do not attempt to re-identify it except as permitted to test or maintain those protections. Merely removing a name does not necessarily make information anonymous.

5. Cookies, advertising, sale, and sharing

Cookies and similar technologies can support sign-in, security, preferences, usage measurement, and other functions. The technologies actually deployed, their providers, purposes, duration, and available controls are described at section 2.5 of this Policy and in the Cookie settings control in the site footer. Where consent is required for nonessential technologies, we obtain it before their use. You can change applicable choices through the Cookie settings control in the site footer. Browser controls may also restrict cookies, although some features may not function without necessary storage.

We do not sell your personal information.

Where applicable law requires us to honor recognized opt-out preference signals, including Global Privacy Control, we apply them as required. The scope of a browser-level signal and any additional account-level choices are explained in [PRIVACY CHOICES INFORMATION].

6. Accuracy, corrections, and record removal

You can correct supported fields on a claimed profile. You can also report an error or request correction, restriction, or removal of a record or particular material at the record request form or support@og1coaches.com. You do not have to join OG1, claim a profile, accept the Terms, or pay to make a request.

Include the relevant page or profile link, the information at issue, the requested action, and enough context to help us assess the request. We may ask for proportionate verification where needed to protect against impersonation or unauthorized alteration. We do not require more information than reasonably necessary for that purpose.

We assess requests under applicable law, available evidence, and the rights and interests involved. Depending on the circumstances, we may correct information, add context, restrict visibility, remove material, or remove a record from public display. We explain a denial or material limitation where required and provide applicable review or appeal options. Statutory requests are not treated as purely discretionary editorial requests.

Removal from OG1 does not remove the original source, independently published third-party statements, already exported copies, or search-engine caches we do not control. We remain responsible for steps required of us by law, including appropriate downstream assistance or notification where applicable.

7. Retention and deletion

We retain personal information only as long as reasonably necessary for the disclosed purposes, subject to applicable legal requirements. Relevant considerations include whether an account or service relationship is active, whether a professional record remains accurate and appropriate to publish, a person's requests, legal recordkeeping, security needs, and unresolved disputes.

Account information and user submissions are generally retained while needed to provide the account and its requested features. Publicly sourced records are subject to ongoing accuracy, relevance, rights-request, and retention review; their public origin is not a reason for unlimited retention. Messages and endorsements may involve other people with separate rights and retention interests, which we consider when processing deletion requests.

When you request deletion of an account, we remove the claimed profile from public display and process associated information for deletion, subject to limited lawful exceptions. Information retained for security, legal obligations, dispute handling, or similar purposes is restricted to those purposes and is not used to recreate the deleted public profile.

We may retain a minimal suppression record where necessary and lawful to honor an opt-out or removal decision and prevent the same record from being automatically re-created. A suppression record is not a public profile and should not contain more information than needed for that purpose. Backups are restricted and deleted or overwritten according to the applicable retention schedule; restored systems must reapply relevant deletion and suppression decisions.

When you delete your account, we remove your personal information from the platform within 30 days, except where the law requires us to keep it. We may keep anonymized usage analytics.

8. Your privacy rights and choices

Depending on where you live, the information involved, and the laws applicable to OG1, you may have rights to confirm processing; access or obtain a copy of information; correct inaccuracies; request deletion; obtain a portable copy; withdraw consent; restrict or object to processing; opt out of sale, certain sharing, targeted advertising, or specified profiling; limit certain uses of sensitive information; and challenge certain automated decisions. Some jurisdictions also provide an appeal right and the right to complain to a regulator.

To exercise a right, use the privacy request form, support@og1coaches.com, or [OTHER LEGALLY REQUIRED REQUEST METHOD]. We do not require an account or a profile claim. Where necessary, we verify identity in a manner proportionate to the request and the sensitivity of the information. We do not impose identity verification on opt-out requests where the law prohibits it. Authorized agents may submit requests with the evidence of authority the applicable law permits us to request.

We respond within the time required by applicable law and explain any permitted extension. Rights may be subject to lawful exceptions, including protection of other people's rights, security, legal obligations, and applicable expression protections. Where we deny a request, we provide the explanation and review options required by law. We do not retaliate or unlawfully discriminate against you for exercising a right.

To appeal an eligible denial, contact the request form or support@og1coaches.com and reference the original request. We review the decision and provide the applicable response and regulator-contact information. You may also contact your relevant privacy authority without first contacting us. A marketing unsubscribe does not necessarily delete a profile; tell us when you also seek record removal.

9. Additional United States disclosures

The applicable rights and duties depend on statutory coverage, exemptions, and the context of processing, not merely on the state where OG1 is incorporated. This Policy's categories, sources, purposes, recipients, and retention information apply to the corresponding personal information we handle.

10. Children and sensitive information

OG1's account and endorsement services are intended for adults 18 and older. We do not permit a minor to open an account or submit an endorsement through the standard adult workflow. Do not submit protected student education records, medical records, sensitive identification documents, or content about a minor without the authority and safeguards required for that particular use.

An age statement does not remove our responsibilities when we learn that a child has provided personal information or when another law protects a minor's data. A parent, guardian, or other concerned person may contact support@og1coaches.com to report such information. We review the report and take appropriate steps, including restriction or deletion where required. Any future youth participation requires a separately approved process and notices before collection.

11. Security

We use administrative, technical, and organizational measures reasonably designed to protect the information we handle in light of its nature and risk. No online service can guarantee absolute security. You should use secure account practices and avoid submitting information the Services are not designed to hold.

We investigate relevant security events and provide legally required notifications. These measures include encrypted connections (TLS), sign-in through Clerk, and access controls on our internal systems.

12. International processing and additional EEA/UK information

Information is processed in the United States. Where cross-border processing is subject to transfer restrictions, we use an applicable lawful transfer mechanism and required safeguards.

Where the EU GDPR or UK GDPR applies, our legal bases depend on the processing purpose. Providing an account and requested features may be necessary to perform a contract with the account holder. Compliance with a legal duty may rely on legal obligation. Optional uses requiring consent rely on that consent. Maintaining appropriate professional records or securing the service may rely on legitimate interests only where the applicable necessity and balancing assessment supports that basis.

For information about a person who has not agreed to an account contract, we do not rely on that nonexistent contract as the legal basis for publishing their record.

Where required, people whose information we obtain from other sources receive the applicable indirect-collection information. A public website notice alone is not assumed to satisfy every individual-notice duty. Our practices must also account for objection, erasure, restriction, access, and other applicable rights, including objection to direct marketing.

13. Third-party services and changes

External websites, media hosts, and other independent services have their own information practices. Review their notices when you use them. Our use of a provider does not eliminate our responsibilities for information we control.

We update this Policy when our practices or legal obligations change. We will revise the effective date and provide notice of material changes as required. Where a new use requires consent, we will obtain it before that use. Contact support@og1coaches.com for questions, assistance, or an accessible copy.