Privacy Policy

This Privacy Policy explains how Next Play, Inc. ("Next Play," "we") collects, uses, shares, and protects personal information on makeyournextplay.com, the Next Play dashboards and apps, and Next Play events (the "Platform"). We do not sell your personal information.

1. Information we collect

Category	Examples	Where it comes from
Account details	Name, email, phone, password, school, sport, graduation year, current or alumni status	You, or your university's roster upload
Career profile	Resume, cover letters, LinkedIn drafts, work and volunteer history, career interests, documents in your vault, Next Play plan	You
Platform activity	Tools used, jobs viewed, "Apply on company site" clicks, directory searches, which contact buttons you tap, event RSVPs	Automatically, as you use the Platform
Messages	Messages between you and your connected university, and between you and the Next Play team	You and your university
Business information	Business name, contact details, license and insurance documents, verification records	The business, public sources, or licensing boards
Device and usage data	IP address, browser, device type, pages visited, cookies	Automatically
Event information	Registration details, attendance, photos or video taken at Next Play events	You and event staff

We do not ask for and you should not upload Social Security numbers, bank account numbers, or medical records. If you put health or other sensitive information in a document or message, it is stored only to provide the service to you.

2. How we use information

• Provide the Platform, including accounts, tools, directory, jobs, messaging, and events.
• Connect individual athletes to their university when the athlete or the university requests it.
• Give universities the roster, engagement, and outcome reports described in section 5.
• Show businesses aggregated, non-identifying counts of views and contact taps on their listing.
• Verify businesses and keep the directory accurate.
• Generate suggestions in career tools, including through AI service providers who process data on our behalf and are not permitted to use it to train their own models.
• Send service emails and, if you agree, updates about Next Play. You can unsubscribe from marketing at any time.
• Keep the Platform safe, prevent fraud and misuse, and comply with law.
• Improve the Platform using aggregated or de-identified data.

3. How we share information

With	What	Why
Your connected university	Profile, activity, RSVPs, and messages with that university	To provide its program, as set out in its agreement with us
Service providers	Only what each needs	Hosting, database, email, analytics, AI tools, job feeds; bound by contract to protect data
Businesses	Nothing that identifies you, unless you contact them yourself	When you call, email, or visit a business, you share information with them directly, under their own privacy policy
Employers	Nothing, unless you apply on their site	Applications happen on the employer's site
Legal and safety	As required	To comply with law, respond to lawful requests, or protect people's safety and rights
A buyer or successor	Account data	If Next Play is part of a merger, acquisition, or sale of assets, subject to this policy

We do not sell personal information and do not share it for targeted advertising.

4. Individual athletes

If you sign up as an individual, your data is not shared with any university until you choose to connect to one, or until a university you attend uploads you on its roster and you confirm the connection.

5. University data and FERPA

When a university uploads a roster or shares student records, it does so under a written agreement with Next Play. Under the Family Educational Rights and Privacy Act (FERPA), a university may share education records with an outside service provider treated as a "school official" when the provider performs a function the school would otherwise use its own staff for, stays under the school's direct control for how records are used and kept, and uses the records only for the purpose they were shared (U.S. Department of Education). For records a university shares with us, we:

• use them only to provide the services in that university's agreement;
• do not re-disclose them except as the agreement and FERPA allow;
• return or delete them when the agreement ends, as the agreement requires; and
• direct requests to inspect or amend education records to the university.

Alumni can keep their own account after graduation. A university's access to an alumni athlete's activity follows the athlete's settings.

6. Business listings

Some unverified directory listings are compiled from publicly available sources, such as business websites and public license lookups. A business can claim, correct, or ask us to remove its listing at any time by contacting info@makeyournextplay.com.

7. Cookies

We use essential cookies to keep you signed in and remember settings. With your permission, we also use analytics cookies (Google Analytics) to understand how the Platform is used. You choose in the cookie notice when you first visit, and you can change your choice anytime through "Cookie settings" in the footer. You can block cookies in your browser, but some features may stop working. We honor Global Privacy Control signals as an opt-out request where the law requires it.

8. How long we keep information

We keep account information while your account is open. When you close your account, we delete or de-identify your personal information within 90 days, except what we must keep for legal, security, or dispute reasons, or what a university agreement requires. Business verification records are kept for 3 years after a listing is removed.

9. Security

We use encryption in transit, access controls, and role-based permissions so universities see only their own athletes and businesses see only their own listing data. No system is perfectly secure. If a breach affects your information, we will notify you and the authorities as the law requires.

10. Your choices and rights

You can view and edit your profile, download your documents, change notification settings, disconnect from a university, and close your account in your settings. Depending on where you live, you may also have the right to:

• confirm whether we process your personal information and get a copy of it;
• correct or delete it;
• get it in a portable format;
• opt out of sale, targeted advertising, and certain profiling (we do none of these); and
• appeal if we deny a request.

Texas residents have these rights under the Texas Data Privacy and Security Act, in effect since July 1, 2024 (Baker Donelson). To make a request, email info@makeyournextplay.com. We will verify your identity and respond within 45 days. To appeal a decision, reply to our response with "Appeal" in the subject line. We will not treat you differently for using these rights.

11. Children and minors

The Platform is for people 17 and older. It is not directed to anyone under 17, and we do not knowingly collect their personal information. If we learn we have, we will delete it. Users who are 17 need a parent or guardian's permission. A parent or guardian can contact info@makeyournextplay.com to review or delete a minor's information.

12. Changes to this policy

If we make a material change, we will notify you by email or on the Platform before it takes effect.

13. Contact

Next Play, Inc. · 17304 Preston Rd Ste 800, Dallas, TX 75252 · info@makeyournextplay.com