Privacy Policy

This Privacy Policy describes how Kivikoski Labs LLC, operator of Cornerstone ("Cornerstone," "we," "us," or "our"), collects, uses, discloses, and protects information when people and organizations use Cornerstone.

Cornerstone is a recruiting and athlete-management platform used primarily by schools, coaches, athletic programs, and other authorized organizations.

The privacy role Cornerstone plays depends on the information involved. For information we collect directly to operate Cornerstone, such as account, billing, support, and website information, Kivikoski Labs LLC determines how that information is processed.

For athlete, recruit, student, communication, evaluation, and similar information submitted by a customer Organization, Cornerstone generally processes that information on behalf of and at the direction of the Organization. Where required, additional contractual terms such as a data processing agreement may govern that processing.

We may collect:

• name;
• email address;
• Organization;
• role or title;
• sport, team, or program assignments;
• authentication and account information;
• account activity;
• preferences; and
• support communications.

Organizations may submit information about prospective or current athletes, including name and contact information, school, club, team, and graduation information, athletic position and recruiting information, recruiting status, event and visit information, notes, evaluations and scouting reports, areas or schools of interest, communications, uploaded documents, photographs, files, and other information an Organization chooses to track in Cornerstone. This information may concern minors.

When Organizations use Cornerstone's communications features, we may process sender and recipient addresses, subject lines, message content, attachments, timestamps, delivery information, and other communication metadata.

We may process documents, photographs, screenshots, notes, spreadsheets, rosters, and other files uploaded to Cornerstone.

We may automatically collect information such as IP address, browser and device type, operating system, pages or features accessed, timestamps, authentication and security events, diagnostic information, and cookies or similar technologies necessary to operate and secure the Service.

We use information to:

• provide and operate Cornerstone;
• authenticate users and manage access;
• maintain Organization workspaces;
• provide recruiting and athlete-management functionality;
• send and receive communications requested by users;
• process imports and uploads;
• provide OCR, transcription, AI-assisted, or automated features;
• provide customer support;
• maintain security and prevent abuse;
• diagnose and improve product performance;
• comply with applicable law; and
• enforce our agreements.

We do not sell student information for advertising. We do not use student information supplied by educational institutions for targeted advertising. We do not use children's information collected under school authorization for unrelated commercial purposes.

Cornerstone is designed primarily for authorized adult users rather than independent use by children. Schools and other educational organizations may provide Cornerstone with student information in connection with recruiting, admissions, athletics, or related institutional activities.

Where FERPA applies, an educational institution may under certain circumstances use a third-party contractor to perform institutional services involving education records, subject to requirements including institutional control over use and maintenance and restrictions on reuse and redisclosure.

Where COPPA applies, Cornerstone will comply with obligations applicable to Cornerstone as an operator. We will not state that a school or teacher is solely responsible for Cornerstone's COPPA compliance.

Where Cornerstone relies on authorization provided through a school for information concerning a child under 13, such information will be used for the authorized educational purpose and not unrelated commercial purposes.

Cornerstone may process content using optical character recognition, transcription, machine learning, artificial intelligence, or similar technologies to provide requested product features. For example, these technologies may help extract text from uploaded notes or organize recruiting information.

Automated processing may produce inaccurate results. Authorized users should review generated or extracted information before relying on it.

Information in an Organization's workspace may be available to authorized Staff according to their roles and permissions.

We use service providers to help operate Cornerstone, which may include providers of cloud infrastructure, databases and storage, authentication, email delivery, monitoring and security, file processing, OCR and AI services, analytics, and customer support.

These providers may process information only as necessary to perform services for Cornerstone and subject to applicable contractual obligations.

We may disclose information where reasonably necessary to comply with law, legal process, or valid governmental requests; enforce agreements; investigate fraud or abuse; or protect the rights, safety, and security of Cornerstone, customers, users, or others.

If Kivikoski Labs LLC is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction subject to applicable law and appropriate protections.

Cornerstone does not sell student or athlete information provided by Organizations. Cornerstone does not use such information to build advertising profiles or serve targeted advertising to students.

We retain information only for as long as reasonably necessary to provide Cornerstone, fulfill the purposes described in this Policy, meet contractual commitments, maintain security, resolve disputes, and comply with law.

Organization Data may be deleted or de-identified after an Organization terminates its use of Cornerstone, subject to applicable agreements, legal requirements, backups, and reasonable technical retention periods.

Information concerning children will not knowingly be retained longer than reasonably necessary for the purpose for which it was collected.

We use administrative, technical, and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, loss, or misuse. No system can guarantee absolute security.

Organizations and users are also responsible for maintaining secure credentials, assigning appropriate access, and promptly removing Staff who should no longer have access.

Organizations may request access to, correction of, export of, or deletion of Organization Data, subject to applicable contractual and legal requirements.

Individuals seeking access to or correction of information maintained by a school or other Organization through Cornerstone may need to direct their request to that Organization. Cornerstone will assist customers with appropriate requests where required.

For information Cornerstone controls directly, individuals may contact us using the information below.

Cornerstone accounts are intended for authorized organizational users and are not currently intended for independent account creation by children under 13. Organizations may nevertheless enter information concerning student athletes who are minors.

If Cornerstone later introduces athlete or family self-service accounts, this Privacy Policy and the associated consent and onboarding design must be reviewed before that feature launches.

Cornerstone uses cookies and similar technologies necessary for authentication, security, preferences, and operation of the Service. These necessary features remain available regardless of your optional privacy choice.

With your permission, Cornerstone uses first-party activity measurement to record authenticated page routes and related activity timestamps so we can understand product use and support Organizations. You may accept, reject, or later change this optional choice through the Privacy choices control in the public footer.

Cornerstone may display YouTube videos and thumbnails. YouTube content is blocked until optional features are enabled. Loading it sends request information, such as your IP address and browser information, to YouTube under its own privacy practices.

Organizations may choose to connect Cornerstone with third-party products or services. Information transmitted to a third party at an Organization's direction may also be governed by that third party's privacy practices.

We encourage Organizations to evaluate third-party services before enabling integrations involving sensitive information.

We may update this Privacy Policy as Cornerstone evolves or legal requirements change. We will publish the updated version and effective date. Where appropriate, we will provide additional notice of material changes.

Privacy questions or requests may be sent to Kivikoski Labs LLC, Cornerstone, New Hampshire, United States.

support@usecornerstone.app