Privacy Policy

NIL Ledger ("we," "us," or "our"), a trade name of Athlete Infrastructure LLC, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at nilledger.com and any related applications (collectively, the "Service"). By using the Service, you agree to the collection and use of information as described in this policy.

1. Information We Collect

A. Information You Provide Directly

• Account registration: name, email address, password, sport, school, and position
• Financial data: NIL income, expenses, brand deal details, payment amounts, and dates
• NIL deal information: brand names, contract values, payment schedules, and deliverables
• Compliance log entries: disclosure records and NCAA-related notes
• Communications you send us, including support requests

Payment Information: When you begin your free trial, we collect your credit card information, including card number, expiration date, and CVV, which is transmitted directly to and stored by our payment processor, Stripe, Inc. We do not store your full card number on our servers. Stripe stores and encrypts your payment information in accordance with PCI-DSS Level 1 standards. Your card will not be charged until the conclusion of your 7-day free trial period.

B. Information Collected Automatically

• Log data: IP address, browser type, pages visited, time and date of visits
• Device information: device type, operating system, unique device identifiers
• Usage data: features used, actions taken within the Service
• Cookies and similar tracking technologies (see Section 7)

C. Financial Account Data (Elite Plan — Plaid Integration)

If you connect a bank account through our Plaid integration (available on the Elite plan), we collect transaction data, account balances, and institution information through Plaid Technologies, Inc. We do not store your bank login credentials. Plaid's privacy policy is available at plaid.com/legal.

2. How We Use Your Information

• Provide, operate, and maintain the Service
• Process transactions and manage your subscription via Stripe, including storing your payment method for billing at the end of your free trial
• Automatically categorize imported transactions as NIL income types or athlete expenses
• Generate tax reserve calculations and financial summaries
• Send payment reminders and account notifications
• Generate CPA-ready export reports at your request
• Respond to your support requests and communications
• Improve and develop new features of the Service
• Comply with applicable legal obligations
• Detect and prevent fraud or abuse of the Service

We do not sell your personal information to third parties. We do not use your financial data for advertising purposes.

3. How We Share Your Information

• Supabase — our database and authentication provider, which stores your account and financial data securely
• Stripe — our payment processor, which handles subscription billing and secure storage of your payment method. Your credit card information is collected at signup and stored by Stripe to enable automatic billing at the end of your 7-day free trial. We do not store full card numbers on our servers. Stripe is PCI-DSS Level 1 compliant.
• Plaid (Elite plan only) — our bank connectivity provider, which facilitates secure access to your financial institution data
• Vercel — our hosting infrastructure provider
• Advisors or agents you authorize — if you grant Agent/Advisor access on the Elite plan, those individuals will have read-only access to your dashboard data
• Legal compliance — we may disclose information if required by law, subpoena, or court order

4. Data Security

• Encryption of data in transit using TLS 1.2 or higher
• Encryption of sensitive data at rest in our database
• Row-level security so each user can only access their own data
• Access controls limiting employee access to production systems
• Secure, hashed storage of passwords
• PCI-DSS compliant payment processing via Stripe — we never store full card numbers

5. Data Retention

We retain your account information and financial data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes. Aggregated, anonymized data may be retained indefinitely.

6. Your Rights and Choices

• Access — request a copy of the data we hold about you
• Correction — request that we correct inaccurate information
• Deletion — request that we delete your account and associated data
• Portability — request an export of your data in a machine-readable format
• Opt-out — opt out of non-essential communications at any time

To exercise any of these rights, contact us at support@nilledger.com. We will respond within 30 days.

7. Cookies

We use cookies and similar tracking technologies to maintain your session and remember your preferences. We use only essential cookies required for the Service to function. You may disable cookies in your browser settings, but doing so may affect functionality.

8. Children's Privacy

The Service is intended for college athletes who are at least 18 years of age, or athletes under 18 only with parental or guardian consent. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, contact us at support@nilledger.com.

9. California Privacy Rights

If you are a California resident, you have additional rights under the CCPA, including the right to know what personal information we collect, the right to delete it, and the right to opt out of its sale. We do not sell personal information. To exercise your rights, contact us at support@nilledger.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date and notify you via email or a prominent notice within the Service. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

Athlete Infrastructure LLC, d/b/a NIL Ledger
Email: support@nilledger.com