Privacy Policy | NILSync

NILSync (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.

1. Information We Collect

Information you provide directly

Account information: Name, email address, password, sport, school, and graduation year.
Profile information: Social media handles, follower counts, engagement rates, and NIL valuation data you enter.
Deal and contract data: Brand names, deal values, contract terms, and deliverable information you add to the platform.
Communications: Messages you send to our support team.

Information collected automatically

Usage data: Pages visited, features used, time spent, and interaction patterns within NILSync.
Device data: IP address, browser type, operating system, and device identifiers.
Cookies and similar technologies: We use cookies for authentication, preferences, and analytics.

Information from third parties

Social media platforms: If you connect your Instagram, TikTok, YouTube, or X accounts, we receive follower and engagement metrics you authorize.
Payment processors: Stripe processes payments; we receive confirmation of payment status but not full card details.

2. How We Use Your Information

We use collected information to:

Provide, operate, and improve the NILSync platform
Calculate your NIL valuation and generate personalized insights
Send transactional communications (receipts, security alerts)
Respond to support requests and inquiries
Prevent fraud and ensure platform security
Comply with legal obligations
Send product updates and marketing communications (with your consent)

3. How We Share Your Information

We do not sell your personal information. We may share information with:

Service providers: Supabase (database), Stripe (payments), Resend (email), Vercel (hosting). These providers are contractually bound to protect your data.
Legal requirements: When required by law, court order, or governmental authority.
Business transfers: In the event of a merger, acquisition, or sale of assets, with notice provided to you.

We never share your individual deal information, contract terms, or negotiation data with brands or third parties without your explicit consent.

4. Data Security

We implement industry-standard security measures including:

TLS encryption for all data transmitted between your browser and our servers
AES-256 encryption for data stored at rest
Row-level security in our database (each user can only access their own data)
Regular security audits and penetration testing
Access controls limiting which team members can access production data

No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Your Rights and Choices

You have the right to:

Access: Request a copy of the personal data we hold about you
Correction: Update inaccurate or incomplete information through your account settings
Deletion: Request deletion of your account and associated data
Portability: Export your deal and contract data in CSV format
Opt-out: Unsubscribe from marketing emails at any time

To exercise these rights, contact us at privacy@nilsync.com or through your account settings.

6. Data Retention

We retain your data for as long as your account is active. If you cancel, your data remains accessible for 90 days, then is permanently deleted. Anonymized, aggregated analytics data (with no personal identifiers) may be retained longer for product improvement.

7. Children's Privacy

NILSync is intended for college athletes aged 18 and older. We do not knowingly collect personal information from individuals under 18. If you believe we have inadvertently collected such data, contact us immediately at privacy@nilsync.com.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a prominent notice in the platform at least 30 days before the change takes effect.

9. Contact Us

For privacy questions or to exercise your rights:

Email: privacy@nilsync.com
Address: 1201 West Peachtree Street NW, Suite 2300, Atlanta, GA 30309