Privacy Policy

1. What we collect

We only collect what you tell us and what is generated by your contact with us. We do not buy lists and we do not collect third-party data about you.

• Athlete data: name, date of birth, WhatsApp number, school year, school, city, sport, position, clubs, achievements, Instagram profile and any videos you choose to send.
• Academic and profile data: school performance, English level, and your answers to the profile and commitment questionnaire.
• Parent or guardian data: name, phone number, e-mail address, occupation and intended investment range.
• Address: country, postal code, street, number, complement, neighborhood, city and state.
• Conversations: the content of messages exchanged with us on WhatsApp and on Instagram (direct messages and comments on our own posts).
• Meetings: date, time and, when a meeting is recorded with notice to participants, the transcript generated by Google Meet.
• Technical and attribution data: referrer, landing page, campaign parameters (UTM), session identifier, device type and the moment the form was started.

2. Why we use it

• To assess the athlete's profile and whether a U.S. athletic scholarship project is feasible.
• To get in touch, answer questions and schedule meetings.
• To deliver the contracted service and support the family throughout the process.
• To understand which marketing channels work, so we can invest better.
• To comply with legal, contractual and tax obligations.

3. Use of artificial intelligence

We use artificial intelligence (Google Gemini) for an initial assessment of the profile submitted through the form, and to summarize conversations and meetings internally. This assessment organizes our service queue — it does not decide on its own whether you will be served, and every relevant decision is made by a member of our team.

In automated conversations on WhatsApp and Instagram, automated replies identify themselves as such and always offer a path to a human agent.

4. Who we share it with

We do not sell your data. We do not hand it over for third-party advertising. We share it only with the providers required to operate the service, and only what is required:

• Supabase — the database where information is stored, encrypted at rest.
• Google Cloud Platform — execution of our processing services.
• Vercel — hosting of this website.
• Google Workspace (Sheets, Calendar, Meet and Drive) — internal organization, scheduling and meeting transcripts.
• Z-API — sending and receiving WhatsApp messages.
• Meta (Instagram) — receiving and replying to messages and comments on our account.
• Resend and Brevo — sending transactional e-mails.
• Google Gemini — the assessment and summaries described in item 3.
• Google Analytics, Google Tag Manager and Meta Pixel — audience measurement and campaign performance.

5. How long we keep it

For as long as the service or the contractual relationship lasts, and afterwards for the period required by law (for example, tax and accounting obligations). After those periods, data is deleted or anonymized.

If you request deletion before that, we comply as described in item 7.

6. How we protect it

• All communication over encrypted connections (HTTPS/TLS).
• Data encrypted at rest in the database.
• Role-based access: each team member sees only what their work requires.
• Audit logs of sensitive actions performed in our internal systems.

7. Your rights

Under the Brazilian General Data Protection Law (LGPD, Law 13.709/2018) you may, at any time:

• Confirm whether we process your data and obtain access to it.
• Correct incomplete, inaccurate or outdated data.
• Request anonymization, blocking or deletion of unnecessary data or data processed unlawfully.
• Request data portability.
• Withdraw consent and request deletion of data processed on that basis.
• Object to processing and request review of automated decisions.

8. How to exercise your rights

Write to contato@bolsaatletausa.com with the subject “Privacy”. We reply within 15 days.

To delete your data, see our Data Deletion page for step-by-step instructions.

9. Minors

Our service involves teenage athletes. Registration is completed by the legal guardian, or with their knowledge and consent. If we identify a minor's data submitted without such consent, we delete it as soon as we become aware.

10. Changes to this policy

If we change this policy, we publish the new version on this page with the updated date. Material changes are communicated through the contact channels you provided.

11. Contact

BAUSA GLOBAL PLACEMENT LTDA (“Bolsa Atleta USA”), a Brazilian company registered under CNPJ 61.792.817/0001-34. Data protection contact: contato@bolsaatletausa.com.