Privacy Policy

Last Updated: 05-18-2026

Privacy Policy

Effective Date: May 18, 2026  |  Last Updated: May 18, 2026  |  Version 1.0

Who this applies to: This Privacy Policy applies to all users of NIL Professional, including student-athletes, parents and guardians of minor athletes, and any other individuals who access or use our platform, website, or services. By using NIL Professional, you agree to the practices described in this policy.

1. Who We Are

NIL Professional LLC ("NIL Professional," "we," "us," or "our") is a Colorado-registered company that operates a technology platform and marketplace designed to help student-athletes build their personal brand, access Name, Image, and Likeness (NIL) opportunities, and facilitate college recruitment outreach. Our platform is available at nilprofessional.com.

NIL Professional is the data controller responsible for personal information collected through our platform and services.

2. Information We Collect

2.1  Information You Provide Directly

  • Account registration: Full name, date of birth, email address, password, sport, school, graduation year, and state of residence.

  • Athlete profile: Position, athletic statistics, highlight reel links, social media handles, bio, and profile photos or videos.

  • Parent/Guardian information: Full name, email address, relationship to the athlete, and consent documentation for minor athletes.

  • Payment information: Billing details processed securely through Stripe. NIL Professional does not store full credit card numbers on our servers.

  • Communications: Emails, support requests, and messages you send through or via the platform.

  • Content submissions: Photos, videos, and other media submitted for merchandise, brand campaigns, or promotional use.

  • NIL deal information: Deal terms, compensation details, brand names, and disclosure documentation you submit or generate through the platform.

2.2  Information Collected Automatically

  • Usage data: Pages visited, features used, clicks, time spent, and navigation paths within the platform.

  • Device and browser data: IP address, browser type, operating system, device identifiers, and referring URLs.

  • Log data: Server logs capturing access times, error reports, and activity records.

2.3  Information from Third Parties

  • Google / Gmail (via OAuth): When you connect your Google account, we receive limited data as described in Section 3.

  • Stripe: Payment confirmation, subscription status, and billing history.

  • Social media platforms: Publicly available profile data (follower count, engagement metrics) when you connect social accounts.

3. Google OAuth & Gmail Integration

IMPORTANT — Google API Services Limited Use Disclosure

NIL Professional's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. See: https://developers.google.com/terms/api-services-user-data-policy

3.1  Why We Use Google OAuth

NIL Professional integrates with Google OAuth and the Gmail API to allow users to connect their personal Gmail account for the purpose of sending recruitment outreach emails directly to college coaches from within the platform. This integration is entirely optional and user-initiated.

3.2  OAuth Scopes We Request

  • gmail.send: Send recruitment emails to college coaches on your behalf from your Gmail account. We do NOT read, store, or scan your existing emails or inbox.

  • userinfo.email: Confirm your Gmail address to associate the connected account with your NIL Professional profile. We do NOT use this for unsolicited marketing.

  • userinfo.profile: Display your name and profile picture within the platform to confirm which account is connected. We do NOT share this data with brands or third parties.

3.3  Limited Use Commitment

NIL Professional strictly commits to the following limitations on Google user data:

  • We use Google user data ONLY to provide the in-platform recruitment email feature and directly related platform functionality.

  • We do NOT use Google user data to serve advertising, build advertising profiles, or share data with advertisers.

  • We do NOT sell, lease, or transfer Google user data to any third party.

  • We do NOT use Google user data for any purpose unrelated to the recruitment outreach feature.

  • We do NOT read, index, or analyze the contents of your Gmail inbox, sent folder, or any existing messages.

  • Human review of Google user data is limited to security incident investigation only.

3.4  Revoking Google Access

You may disconnect your Google account from NIL Professional at any time through your NIL Professional account settings under Connected Accounts, or through your Google account security settings at myaccount.google.com/permissions. Revoking access immediately prevents NIL Professional from sending emails through your Gmail account.

3.5  Data Retention from Google

NIL Professional retains only your Gmail address and account display name for as long as the Google account remains connected to your profile. Upon disconnection or account deletion, this data is purged within 30 days. We do not retain any email content beyond the transmission of a specific sent email.

4. How We Use Your Information

  • Account management: Creating, maintaining, and authenticating your account.

  • Platform services: Providing access to NIL opportunities, recruitment tools, merchandise management, and educational resources.

  • Recruitment outreach: Facilitating athlete-initiated emails to college coaches through the Gmail integration described in Section 3.

  • Payments and payouts: Processing membership fees and disbursing earned merchandise and NIL compensation through Stripe.

  • Communications: Sending transactional emails and, with your consent, platform updates and marketing messages.

  • Compliance support: Providing tools to assist athletes with NIL disclosure reporting. Compliance obligations remain solely with the athlete.

  • Platform improvement: Analyzing usage patterns to improve features, performance, and user experience using aggregated or de-identified data where possible.

  • Safety and security: Detecting, investigating, and preventing fraudulent activity, abuse, and security incidents.

  • Legal compliance: Meeting applicable legal, regulatory, and tax obligations, including issuing Form 1099-NEC where required.

  • Parental oversight: Providing Parent/Guardian Portal functionality to allow authorized parents and guardians to monitor minor athlete activity.

5. How We Share Your Information

NIL Professional does not sell your personal information. We share your information only in the following limited circumstances:

5.1  With Brands and Campaign Partners

When an athlete applies for or is matched with a NIL opportunity, we share relevant profile information with the applicable brand or campaign partner solely for evaluating that opportunity. We share only what is necessary for that specific evaluation.

5.2  With Service Providers

  • Stripe — payment processing and subscription management

  • Google (Gmail API) — recruitment email delivery as described in Section 3

  • Cloud hosting providers — secure data storage and infrastructure

  • Email delivery services — transactional platform notifications

  • Analytics providers — aggregated, de-identified usage analysis

All service providers are contractually required to use your data only to provide services to NIL Professional and to protect it in accordance with this policy.

5.3  With Parent/Guardian Portal Users

For minor athletes, authorized Parent/Guardian Portal users have visibility into the athlete's profile, applied and accepted NIL deals, recruitment outreach activity, and compliance documentation.

5.4  Legal Requirements

We may disclose your information if required by law or to protect the rights or safety of NIL Professional, our users, or the public.

5.5  Business Transfers

In the event of a merger or acquisition, user data may transfer as part of that transaction. We will notify affected users prior to any such transfer.

6. Data Retention

  • Core account data is retained for 90 days after cancellation to facilitate reactivation, then deleted or anonymized.

  • Financial records, including payout history and tax documentation, are retained for 7 years to comply with IRS requirements.

  • Content submitted for active campaigns may be retained for the duration of the campaign agreement.

  • Google account data (email address, display name) is purged within 30 days of disconnection or account deletion.

  • Backup copies may persist for up to 90 days before full deletion from all systems.

7. Cookies & Tracking Technologies

  • Essential cookies: Required for the platform to function, including session authentication and security tokens. These cannot be disabled.

  • Functional cookies: Remember your preferences and settings to improve your experience.

  • Analytics cookies: Collect aggregated, de-identified usage data to help us improve the platform. We do not use third-party advertising cookies.

8. Minor Athletes & Parental Consent

  • Account creation for athletes under 18 requires documented parental or guardian consent before NIL deal participation or payout eligibility is activated.

  • Parent/Guardian Portal access is available to authorized adults to monitor athlete activity, review deals, and manage consent.

  • We do not knowingly collect personal information from children under 13 without parental consent.

  • Parents and guardians may request to review, correct, or delete their minor's personal information by contacting contact@nilprofessional.com.

This policy is designed to comply with COPPA, applicable state privacy laws, and Google's policies regarding services directed at minors.

9. Your Rights & Choices

  • Access: Request a copy of the personal information we hold about you.

  • Correction: Request that we correct inaccurate or incomplete information.

  • Deletion: Request deletion of your personal information, subject to legal retention requirements.

  • Portability: Request your data in a machine-readable format.

  • Opt-out of marketing: Unsubscribe from marketing communications at any time.

  • Withdraw consent: Where processing is based on consent (including Google OAuth), withdraw that consent at any time.

To exercise any of these rights, contact us at privacy@nilprofessional.com. We will respond within 30 days.

California residents have additional rights under CCPA/CPRA. Colorado residents have rights under the Colorado Privacy Act (CPA). NIL Professional does not sell or share personal information as defined under these laws.

10. Data Security

  • Encryption of data in transit using TLS (Transport Layer Security)

  • Encryption of sensitive data at rest

  • Access controls limiting data access to authorized personnel on a need-to-know basis

  • Regular security assessments and monitoring

  • Stripe's PCI-DSS compliant infrastructure for all payment data

  • OAuth 2.0 token-based authentication for Google integrations — no passwords stored

11. Third-Party Services & Links

The NIL Professional platform may contain links to third-party websites and brand partner sites. This Privacy Policy applies only to NIL Professional. Key third-party privacy policies: Google — policies.google.com/privacy; Stripe — stripe.com/privacy.

12. Changes to This Privacy Policy

  • Update the "Last Updated" date at the top of this document

  • Notify registered users via email and/or in-platform notification

  • For changes affecting Google OAuth data handling, re-request consent as required

Continued use of the platform after the effective date of a revised policy constitutes acceptance.

13. Contact Us

Inquiries: contact@nilprofessional.com

© 2026 Athlete Brands LLC. All Rights Reserved.

nilprofessional.com  |  contact@nilprofessional.com