Privacy Policy

This Privacy Policy describes how NxtLevel NIL Inc. ("NxtLevel," "we," "us," or "our") collects, uses, discloses, and protects information when you visit nxtlevelnil.com or use the NxtLevel platform (the "Platform").

We take privacy seriously. We collect only what we need to operate the Platform safely, comply with the law, and improve our services. We never sell personal information.

We collect three categories of information:

(a) Information you provide directly. This includes name, email address, phone number, payment information, the participant's name and age (when booking sessions for a minor), bookings and scheduling preferences, code-of-conduct acknowledgments, and any messages you send to us or to other Platform users.

(b) Information from athletes specifically. Athletes who register on the Platform additionally provide identity verification information, school enrollment confirmation, SafeSport certification status, background-check status, IRS Form W-9 (for U.S. athletes), Stripe Connect account details, profile photo, biographical information, pricing preferences, availability, and NIL-disclosure-related information including counterparty details and cumulative deal value.

(c) Information collected automatically. When you use the Platform, we automatically collect device and usage data including IP address, browser type, operating system, pages viewed, referring URL, timestamps, and aggregate analytics. We use first-party analytics (Vercel Analytics) and may use a privacy-first third-party analytics provider that does not require cookies or share data with advertising networks.

We use information to: (a) operate, maintain, and improve the Platform; (b) facilitate bookings, payments, scheduling, and communication between Customers and Athletes; (c) verify athlete eligibility and maintain compliance with NCAA, NIL, and federal/state law including SafeSport and background-check requirements; (d) issue payouts to athletes and process refunds; (e) send transactional emails and SMS messages (booking confirmations, reminders, receipts, cancellations, NIL-disclosure alerts); (f) detect, prevent, and respond to fraud, abuse, security incidents, and code-of-conduct violations; (g) comply with legal obligations including tax reporting, NIL disclosure under state law, and lawful requests from authorities; (h) communicate platform updates, important policy changes, and (with your consent) occasional announcements.

We do not use personal information for behavioral advertising or sell it to third parties.

NxtLevel NIL serves youth athletes ages five (5) through eighteen (18). The Platform is intended for adults; children do not create accounts, browse, transact, or otherwise interact with the Platform directly. A parent or legal guardian browses athletes, books sessions, makes payments, and communicates with coaches on the minor's behalf, transacting as a guest — we do not require a standing parent account.

In connection with a booking, the parent or legal guardian provides limited information about the participating minor: first name, age, skill level, and any session-context notes the parent chooses to share (focus areas, recent challenges, position played). This is the only information about the minor that we collect, and it is used solely to (a) coordinate the coaching session, (b) prepare a session plan for the coach, and (c) communicate with the parent about the booking.

The Children's Online Privacy Protection Act (COPPA) governs the online collection of personal information from children under thirteen (13). We do not knowingly collect personal information directly from any child. Because the parent or legal guardian is the user of the Platform and provides the limited information about their child, the parent's consent — given through the Parental Consent & Waiver at each booking — serves as the verifiable parental consent for any child under thirteen. The parent may at any time (i) review the information we hold about their child, (ii) request that we delete it, and (iii) decline further collection by ceasing to book and emailing privacy@nxtlevelnil.com.

We never market to minors, never use their information for behavioral profiling, never sell or rent it, and never send AI-generated session plans that include the minor's name (the prompt sent to our AI provider refers only to "the player" and the player's age — names are stripped before generation).

Questions about a minor's information, or requests to review or delete it, can be sent to privacy@nxtlevelnil.com. We respond within thirty (30) days, or sooner where applicable law requires.

We share information only as needed to operate the Platform:

(a) With Athletes you book. The athlete you book a session with receives the participant's first name, age range, session details, and any notes you provide. The athlete does not receive your payment information.

(b) With service providers. We use third-party processors including Stripe (payments and Stripe Connect payouts), Supabase (database, authentication, storage), Resend (transactional email), and Twilio (transactional SMS). These providers are bound by confidentiality and data-processing obligations and may only use information to perform services for us.

(c) For legal and safety reasons. We may share information when required by law, court order, or governmental request, or when we have a good-faith belief that disclosure is necessary to protect our rights, your safety, the safety of a minor, or to investigate fraud or violations of our Terms.

(d) In connection with a business transaction. If NxtLevel is acquired, merged, or undergoes a similar transaction, information may be transferred as part of that transaction. We will notify users in advance of any such transfer.

If you provide a mobile phone number when booking a session or registering as an athlete, you consent to receive SMS text messages from NxtLevel related to your account and bookings. Typical messages include session-booking confirmations, schedule-change notifications, 24-hour and 2-hour session reminders, payout notifications (athletes only), and account-onboarding prompts.

Message frequency varies based on your booking activity — a parent who books one session per month will receive roughly three to five texts that month; an athlete with multiple weekly bookings may receive more. Message and data rates may apply, charged by your mobile carrier.

You can opt out of SMS messages at any time by replying STOP to any text from us. Once we receive your STOP message, we will stop sending SMS within one (1) business day, and you will receive one final confirmation text. You can resume messages later by replying START or by re-enabling SMS in your account settings.

Reply HELP to any text from us to receive support contact information, or email support@nxtlevelnil.com directly. You can also reach a human within one business day at that address for any SMS-related question.

We do not share, sell, rent, or otherwise transfer your mobile phone number or SMS opt-in status to third parties for marketing purposes. We share your phone number only with the service providers strictly necessary to deliver the SMS itself (currently Twilio), and only for the operational purpose of sending the message. This restriction applies regardless of how or when you provided your phone number to us.

All payments are processed by Stripe. NxtLevel does not store full payment-card numbers on our servers. Stripe's privacy practices are described at stripe.com/privacy.

Athletes who connect a Stripe Connect account agree to Stripe's Connected Account Agreement and Services Agreement. Stripe collects and processes information directly to verify athlete identity, comply with anti-money-laundering law, and issue payouts.

We retain personal information only as long as needed to provide the Platform, comply with legal obligations (including tax recordkeeping for the seven-year IRS retention period applicable to 1099-K issuance), resolve disputes, and enforce our agreements.

Booking records, NIL deal records, and audit-trail data are retained for a minimum of seven (7) years for compliance purposes. Account data may be retained longer in compliance with applicable law.

You may request deletion of your account by emailing privacy@nxtlevelnil.com. We will delete or anonymize your data unless retention is required by law.

We implement reasonable technical and organizational measures to protect personal information, including encryption in transit (TLS), encryption at rest (Supabase managed Postgres), row-level security policies, role-based access controls, and ongoing monitoring.

No method of transmission or storage is one hundred percent secure. We cannot guarantee absolute security but commit to notifying affected users promptly if a breach occurs.

Depending on your jurisdiction, you may have rights under applicable privacy law (including the California Consumer Privacy Act and the EU General Data Protection Regulation) to: (a) access the personal information we hold about you; (b) request correction of inaccurate information; (c) request deletion of your data, subject to legal-retention exceptions; (d) opt out of certain disclosures; (e) lodge a complaint with a supervisory authority.

To exercise any of these rights, contact us at privacy@nxtlevelnil.com. We will verify your identity before fulfilling requests and respond within applicable legal deadlines.

We do not sell personal information.

The Platform uses minimal cookies necessary for core functionality (authentication session, booking flow continuity). We do not use third-party advertising cookies or behavioral-tracking cookies.

Our analytics providers are configured to respect privacy. Vercel Analytics does not use cookies or collect personal data. Any third-party analytics we use will be disclosed here, and where required by law, we will request your consent before activating them.

We may update this Privacy Policy from time to time. Material changes will be communicated by email or through a notice on the Platform at least thirty (30) days before they take effect. Your continued use of the Platform after the effective date constitutes acceptance of the updated Policy.

Questions about this Privacy Policy or about how we handle personal information can be sent to privacy@nxtlevelnil.com. For questions specific to SMS messages or opt-out, use support@nxtlevelnil.com. Postal mail can be addressed to:

NxtLevel NIL Inc.

Boulder, Colorado

See also our Terms of Service for the rules governing your use of the Platform.