Privacy

What this covers

SportPass NIL is software a university athletic department licenses to run its name, image and likeness program: budgets, offers, agreements and payments to its own student-athletes. The school is the customer and the controller of its athletes’ data; SportPass processes it on the school’s instructions. This policy says what the product collects, why, who can see it, and what is never done with it.

Effective 22 September 2026. It applies to nil.sportpass.com — the staff console, the athlete portal, the sign-in page and the text messages the product sends. Questions go to sean@prth.com.

What is collected, and from whom

From the school, about its staffName, work email, job title, an optional phone number, and the seat they hold: which desks, sports and figures they may see. Sign-in is by Google or Microsoft; the product never holds a password.

From the school, about its athletes and recruitsName, sport, position, class year, date of birth where an agreement needs it, contact details the school records, and the offers, agreements and payments the school makes to them.

From the athlete, in their own portalTheir signature on an agreement, the documents they hand in (a W-9, a photo of an ID), their answers to an offer, whether they want text messages and at which number.

From a parent or guardianA name and a signature when the athlete is a minor and the school’s rules ask a parent to co-sign. A parent does not get an account.

The product also keeps an audit journal of who changed what and when, and logs of refused requests (the seat, the path, the reason), because a compliance product has to be able to show its work. Tax identity is held apart from the desks that spend money: the full tax number lives with the school’s tax vendor, and staff seats read only its kind and last four.

How it is used

To run the school’s NIL program — budgeting, making and signing offers, scheduling and releasing payments, and the reports the school files with the College Sports Commission and its clearinghouse.
To reach the people the program is about — an email carrying the link to an offer, a text carrying the one-time code that opens it, a notification that an agreement is waiting for a signature or a payment went out.
To keep the product safe — verifying sign-ins, asking for a second factor before money moves, rate-limiting, and logging refusals.

Nothing is used for advertising. Nothing is sold. No data is used to train a model. The one optional AI feature researches a school’s published facts — the sports it fields, its public rosters, its colours — when a school is first set up, and is built so that it cannot receive or return a financial figure or a private record.

Text messages

Texts are sent only to a number the person gave, for the program they are part of, and every one says who it is from and how to stop.

A recruit who is sent an offer receives one text with the one-time code that opens it, at the number they gave the school for that purpose. The email carries the link; the text carries the code; neither alone opens the offer.
A student-athlete or staff member receives ongoing texts — an agreement waiting for them, a payment released, a filing due — only after turning texting on in their own profile. They can turn it off there at any time, or reply STOP.
Message frequency varies with the school’s activity. Message and data rates may apply. Reply HELP for help. The full terms are at nil.sportpass.com/sms/.
Marketing texts — new paid work a school opens to them — need a separate yes: their own checkbox with their own wording, recorded apart from the notices, never ticked for them, and never a condition of any agreement. A STOP ends both kinds.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Mobile numbers and texting preferences are used only to send the messages described here, and are shared only with the carrier-registered messaging provider that delivers them.

How it is kept, and for how long

Encrypted in transit and at rest. Each school’s rows are separated by the database itself: a query with no school bound returns nothing.
Kept for as long as the school is a customer and for the retention its compliance obligations require afterwards; an agreement and the payments under it are records the school must be able to produce. A school that leaves has its data deleted on request, with a seven-day recovery window and not after.
Backed up daily. Access, sign-ins and refusals are logged.

Your choices

A staff member or athlete who wants to see, correct or delete what the product holds about them asks their school, which controls the data, and SportPass carries out the school’s instruction. Anyone can turn text messages off in their own profile or by replying STOP, and turn push notifications off on their device. The product is for a school’s staff and its athletes; it does not knowingly hold an account for a child under 13, and a minor’s agreement is co-signed by a parent.