Privacy & player data

1. Who we are

Next Level Prospects, formerly Next Level Recruiting MN ("Next Level," "we") runs this website and app. This page explains what we collect, why, who can see it, and the choices families have. It goes with our Terms of Service. Questions: Emiliodcisneros@icloud.com.

2. Athletes under 18 and children under 13

• Most athletes here are high school students, so many are under 18. Athletes make their own choices in the app (what's public, GPA, evaluations, emails) without waiting for a parent. A parent or guardian pays for any paid plan and can link their own login to see and change everything below.
• The Service is not for children under 13. We do not knowingly collect personal information from anyone under 13. If we learn we have, we delete it. Parents can contact Emiliodcisneros@icloud.com if they think this happened.
• We never sell athletes' information, and we never use it for advertising targeted at them.

3. What we collect

• Account info: name, email, password (stored only as a one-way hash), role (athlete, parent, coach) and school.
• Athlete profile: class, positions, height, weight, photos, film and highlight links, stats, testing numbers, awards, bio, social handles, high school and coach, recruiting interests, offers and commitments the athlete or staff add.
• Academics (optional): GPA, ACT/SAT, intended major and NCAA Eligibility Center ID if you add them.
• Contact info: athlete and parent phone numbers and emails, if you add them.
• Recruiting activity: your school list, coach emails you send with the Service and mark as sent (to whom, when and the subject), coach replies you log, follow-ups, rankings history, follows, goals and referrals.
• Profile views: when a profile link is opened, we record the time, and, for personal tracked links we create for a specific college coach, which coach opened it. That's how we show you "who's looking."
• Payments: handled by our payment processor. We see the plan, amount, date and status, never your full card number.
• Technical info: basic logs our host keeps for security and to keep the site running (such as IP address, browser and pages requested).

4. How we use it

• To build and show athlete profiles, match athletes with colleges, run the tracker, rankings, leaderboards and team locker rooms, and write the coach emails you send from your own email (or through the email account you connect).
• To run accounts, plans, payments, renewal reminders, receipts and support.
• To keep the Service safe: verify college coach accounts, stop fake accounts and spam, and investigate reports.
• To improve the Service using overall, non-identifying usage numbers.
• We don't sell personal information, share it for cross-site advertising, or use it to make legal or similarly significant decisions about anyone.

5. Who can see an athlete's information

• Public profile (on by default for app and team sign-ups): anyone with the link and signed-in verified college coaches can see the sections the family chooses to show. The athlete also appears in rankings and leaderboards. Turn it off or pick sections any time in the Sharing tab.
• Never public: passwords, email addresses and phone numbers, parent contact info, NCAA ID, private notes, evaluations (unless the athlete approves and shares one), recruiting activity and the coach contact directory. GPA is never public without a separate consent checkbox.
• Your recruiting team: the athlete's high school coach or recruiting coordinator on the Service, and Next Level staff and admins, can see the full profile to help with recruiting.
• College coaches you email: get what you put in the email plus your profile link.
• Other athletes: can see public profiles only, and can follow them. There is no private messaging between athletes.

6. Service providers we share with

We use trusted companies to run the Service. They only get what they need to do their job for us:

• Website hosting (Vercel) and database hosting (Supabase).
• Email sending (our email provider, such as Google Workspace or Gmail SMTP) for our account and notification emails. Emails to college coaches go out from your own email app or the account you connect below, not from ours.
• Connected email (optional): if you connect Gmail or Outlook, we only ask for permission to send the emails you review and tap Send on. We never read, search or delete anything in your mailbox. Your sign-in token is encrypted, used only to send your emails, never sold or shared, and you can disconnect anytime from Account → Email (or from your Google / Microsoft account settings). Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
• Payment processing (such as Stripe), for paid plans.
• Film and social sites you link (Hudl, YouTube, X, Instagram) load their own content when you view it, under their own privacy policies.

We may also share information if the law requires it, to protect someone's safety, or as part of a sale or merger of the business (with the same protections continuing).

7. Cookies

We use a small number of necessary cookies: one to keep you signed in, one that remembers you entered the site password, and short-lived ones while you switch between accounts as an admin. Light/dark mode is saved in a small cookie on your device. We don't use advertising or cross-site tracking cookies.

8. Your choices and rights

• See and download: athletes, parents and coordinators can download everything stored about an athlete as a file.
• Change: edit the profile, or control what's public in the Sharing tab.
• Delete: athletes, parents and coordinators can permanently delete a profile and its data (Account page). You can also ask us at Emiliodcisneros@icloud.com. We'll confirm within 45 days.
• Leave rankings: turn the public profile off.
• Emails: you can opt out of non-essential emails from us. We'll still send emails needed for your account and payments.
• Depending on where you live (for example, under the Minnesota Consumer Data Privacy Act), you may have more rights, such as to correct data or to appeal a decision we make about your request. Email Emiliodcisneros@icloud.com and we'll respond within 45 days. We won't treat you differently for using your rights.

9. College coach contact information

Coach names, titles and work contact details come from schools' public staff directories and similar public sources, with a source and last-checked date. They're shown only to help athletes and families reach coaches about recruiting. A coach who wants their details corrected or removed can email Emiliodcisneros@icloud.com.

10. How long we keep it

• We keep a profile while the account is active. After a class graduates, staff can run a cleanup that turns off public profiles and deletes evaluations and private notes more than one year after graduation.
• When you delete a profile or account, we delete it from the live Service. Backups held by our database host roll off on its normal schedule, typically within 30 days. Emails already sent to coaches can't be recalled.
• We may keep basic payment records as long as tax and accounting laws require.

11. Security

Passwords are hashed with bcrypt, sessions use signed HTTP-only cookies, every page checks the signed-in user's role, connections use HTTPS, and important actions are recorded in an audit log. No system is perfectly secure. If a breach affects your information, we'll notify you as the law requires.

12. Changes and contact

If we change this page in a meaningful way, we'll update the date at the top and, when it matters, tell you in the app or by email. Contact: Emiliodcisneros@icloud.com · Instagram @nxtlvlprospectsmn.