1. Information processed
Applications may include organization, competition, contact, role, team size, current workflow, use case, pilot goal, data requirements, confidentiality needs, consent state, campaign labels, status, and qualification notes.
Approved workspaces may contain member identities, roles, invitations, shortlists, player research, scores, confidence, decisions, internal notes, assignments, reports, feedback, usage events, outcomes, success criteria, and renewal records.
2. Processing purposes
ARES uses this information to qualify and onboard organizations; authenticate and authorize members; operate shared research; generate requested reports; protect the service; provide support; measure adoption and value; handle privacy or legal requests; and document extension, conversion, or decline decisions.
3. Organization visibility
Organization-visible shortlists, notes, assignments, reports, and member details may be viewed by authorized members of the same approved organization according to their role. Private notes and private shortlists are limited to their creator where the product marks them private.
4. Confidentiality duties
Members must not disclose workspace content outside the approved organization, share invitation links or sign-in codes, remove source or confidence labels, or represent ARES analysis as an official transfer fee, valuation, employment decision, medical conclusion, or guaranteed scouting outcome.
5. Access controls
Access requires a valid ARES session, active organization membership, approved or active organization state, accepted current agreements, and the exact unexpired entitlement issued for that organization and user. Roles are owner, admin, scout, analyst, and viewer.
6. Reports and exports
Authenticated members may create HTML or JSON report snapshots. Exports preserve methodology, freshness, scores, decisions, notes, and disclaimers at generation time. The organization is responsible for controlling further distribution of downloaded reports.
7. Measurement
ARES records governed workspace events and outcomes such as active users, player reviews, shortlists, assignments, reports, feedback, time saved, decisions influenced, trial extensions, and willingness to pay. These records are used to evaluate the pilot and improve the product, not to activate billing automatically.
8. Retention and deletion
Pilot records are retained while needed to operate, evaluate, document, secure, or resolve the pilot and related legal obligations. Account export includes associated personal pilot records. Account deletion removes private notes and anonymizes shared organization work so one member cannot destroy the organization’s research. Legal deletion or correction requests may require separate verification.
9. Sources and player data
Football facts, player identities, photographs, badges, marks, and source records remain subject to their respective rights and correction controls. ARES preserves provenance, freshness, confidence, and methodology context where available. Academy and minor-player information must be handled lawfully and only for legitimate football purposes.
10. Service providers
Cloudflare may process hosting, routing, D1, R2, security, and Worker operations. Resend may deliver account, invitation, and alert email. Other providers apply only when identified in the Privacy Policy or an approved institutional arrangement.
11. Security and incidents
ARES uses secure sessions, hashed invitation tokens, role checks, entitlement checks, rate limits, no-index controls, protected administrative routes, and audit records. Organizations should report suspected unauthorized access promptly through the legal request channel.
12. Changes and termination
Pilot access may expire, be paused, revoked, extended, converted, or closed. A conversion decision records commercial intent only; it does not create a subscription or payment obligation. Material processing changes require a new version and renewed acceptance where appropriate.