1. Scope and Eligibility
This Privacy Policy applies to information collected through the Service from Athletes, Brands, and Schools (each a “User”), and from prospective Users. The Service is restricted to individuals eighteen (18) years of age and older. Orenyx does not knowingly collect personal information from individuals under eighteen (18) years of age. If Orenyx becomes aware that it has collected information from an individual under eighteen (18), Orenyx will take reasonable steps to delete that information and terminate the associated account.
2. Information We Collect
Athlete Information. Name, school or team affiliation, contact information, Deal history, deliverable and script status, and offer acceptance records.
Brand Information. Company name, contact information, billing details and monthly package (Bronze, Silver, or Gold) information, and Deal postings and history.
School Information. Athletic department contact information and, where applicable, NIL Deal records used to support the School’s NCAA compliance reporting, including reporting to the NCAA’s NIL Go system.
Deal and Transaction Information. Deal terms, deliverables, and offer status associated with Deals processed through the Service.
Payment Information. Payments made through the Service are processed by Stripe, Inc. (“Stripe”). Orenyx does not collect or store raw payment card numbers; Stripe collects and stores payment instrument data subject to Stripe’s own privacy practices. Orenyx receives limited transaction metadata, such as payment status and amount, from Stripe.
Usage Information. Information about how a User interacts with the Service, including log data, device and browser information, and analytics data, some of which is collected using cookies as described in the Orenyx NIL Engine Cookie Policy.
3. How We Use Information
Orenyx uses the information described in Section 2 to: (a) operate, provide, and maintain the Service, including facilitating Deals between Athletes and Brands; (b) support School compliance-tracking and NIL Go reporting functionality; (c) process payments and manage billing; (d) verify Athlete, Brand, and School eligibility and legitimacy, including age eligibility; (e) monitor for fraud, abuse, and violations of the Orenyx NIL Engine Acceptable Use Policy; (f) communicate with Users about their accounts, Deals, and the Service; (g) improve and develop the Service; and (h) comply with applicable law and enforce Orenyx’s agreements.
4. How We Share Information
With Other Users. Information necessary to facilitate a Deal, such as an Athlete’s relevant profile information or a Brand’s Deal posting, is shared with the counterparty to that Deal as necessary to operate the Service.
With Schools. Where a School has joined the Service to obtain compliance visibility into its own Athletes’ Deals, Orenyx makes the applicable Deal records available to that School consistent with the Orenyx NIL Engine Terms of Service and, where applicable, a Data Processing Addendum between Orenyx and the School.
With Service Providers. Orenyx shares information with service providers that support the Service, including Stripe for payment processing and hosting and infrastructure providers, under confidentiality and data protection obligations consistent with this Privacy Policy.
For Legal and Safety Reasons. Orenyx may disclose information where required by law, regulation, legal process, or governmental request, or where Orenyx believes disclosure is necessary to protect the rights, property, or safety of Orenyx, its Users, or others, or to investigate fraud or violations of the Orenyx NIL Engine Acceptable Use Policy.
Business Transfers. Orenyx may disclose or transfer information in connection with a merger, acquisition, financing, or sale of assets, subject to customary confidentiality protections.
Orenyx does not sell personal information to third parties for monetary consideration.
5. Data Retention
Orenyx retains information for as long as reasonably necessary to provide the Service, comply with legal and regulatory obligations (including NCAA-related compliance recordkeeping requested by a School), resolve disputes, and enforce Orenyx’s agreements. Retention periods vary by data category and are determined based on these purposes.
6. Your Choices and Rights
You may access, update, or request deletion of certain account information by contacting Orenyx using the information in Section 9 or through account settings within the Service, where available. Orenyx will respond to verified requests consistent with applicable law. Depending on your state of residence, you may have additional rights under applicable state privacy law; Orenyx will honor such rights to the extent legally required.
Deletion or restriction of certain information may limit or prevent Orenyx from providing the Service, including Deal facilitation or School compliance-reporting functionality.
7. Data Security
Orenyx implements administrative, technical, and organizational measures designed to protect information against unauthorized access, use, or disclosure, as further described in the Orenyx NIL Engine Security Statement. No method of transmission or storage is completely secure, and Orenyx cannot guarantee absolute security.
8. Children's Privacy
The Service is not directed to, and is not intended for use by, individuals under eighteen (18) years of age. See Section 1.1 above.
9. Contact and Changes to This Policy
Questions about this Privacy Policy may be directed to Orenyx through the contact information published on the Service. Orenyx may update this Privacy Policy from time to time; material changes will be reflected by an updated Effective Date, and continued use of the Service after such changes constitutes acceptance of the revised policy.