Your information, and what we do with it.

Effective July 21, 2026 · Version 1.1

The short version

We collect only what we need to build your materials, run your member portal, and keep the site secure.
We never sell your information.
Your data is private to you. Other members can't see it, and brands don't have logins or access to the portal.
If you connect Instagram or TikTok, we use read-only access to record your public profile metrics over time. We never receive your social-media password.
We only share your details with a brand when you choose to move forward — and only what's needed to make that introduction.
You can ask us to show you, correct, or delete your information at any time.

The summary above is for convenience. The full policy below is what governs.

1Who we are

This site and member portal are operated by First String (“First String,” “we,” “us,” or “our”), a student-athlete branding and marketing company [insert full legal entity name once formed]. If you have any question about this policy or your information, email jgreenberg@firststringclub.com.

This policy explains what we collect from the two kinds of people who use First String — student-athletes and the brand representatives who request access — how we use it, and the choices you have.

2What we collect

Information you give us directly

When you request access or an interview through a form on our site: your name, email, and the details you enter (for athletes, your school, sport, and social handle; for brands, your company and what you're looking for).
When we set up your member account: your name and email. Your password is stored only as a securely hashed value — we never see or store it in readable form.
Your member intake: the answers you provide about your story, platforms, audience, and the brand categories you do and don't want, plus any analytics screenshots or images you choose to upload.
When you connect a social account: the platform account ID and username, encrypted authorization tokens, connection status, and read-only profile metrics made available by the platform, such as follower count, following count, total likes, and media count. We store dated snapshots so you can see growth over time. First String never receives or stores your Instagram or TikTok password.
Anything you send us by email or message in the course of working together.

Information created as you use the portal

The branding materials and plans we build for you.
Opportunities you claim on the Board.
Deal records we log for you on your Ledger (the brand, the date, and the cash or product value) so you can keep track of your NIL activity.

Information collected automatically

Our website host and database provider keep standard technical and security logs (such as IP address and basic request data) to run the service and protect it from abuse. We do not run advertising trackers, and we don't sell or share this data for advertising.

3How we use it

To build, personalize, and deliver your branding materials, plans, and educational resources.
To run your member portal, the Board, and your Ledger.
To refresh connected social-account metrics and show your follower growth and other verified profile statistics in the member portal.
To make the warm introductions you ask us to make.
To communicate with you about your account and your materials.
To keep the site secure, prevent abuse, and comply with the law.

4How we share it

We do not sell your personal information — ever. We share it only in these limited ways:

With brands, only when you choose to move forward. When you claim an opportunity or ask us to make an introduction, we pass along the information needed to make that introduction happen. Brands do not have accounts on, or access to, the member portal, and they cannot browse member information. Any resulting agreement is directly between you and the brand.
With service providers who help us run First String. We use trusted providers for secure database and file storage, user sign-in, website hosting, and email. They process your information only to provide those services to us and are required to protect it.
With a social platform you choose to connect. Instagram or TikTok receives the information necessary to authorize and service your connection under that platform's own privacy policy. We request only the permissions needed for the features shown in the portal.
When the law requires it, or to protect the rights, safety, and security of our members, our users, or First String.

We may share aggregated or de-identified information (for example, general audience trends) that cannot reasonably be used to identify you.

5How we protect it

Every member can see only their own information. Our database enforces this at the record level, so one member's data is never visible to another.
Information is encrypted in transit (HTTPS) and at rest.
Passwords are stored only as one-way hashed values.
Social-account authorization tokens are encrypted before storage and are not shown to other members or brands.
Access to member information is limited to First String staff who need it to do the work.
The sign-in page locks out repeated failed attempts, and the service throttles automated attacks.

No system is perfectly secure, but we take reasonable, current measures to protect your information and we keep improving them.

6How long we keep it

We keep your information for as long as you're a member and for a reasonable period afterward to meet legal, accounting, and record-keeping needs. You can disconnect a social account at any time; disconnection stops future refreshes. You can also ask us to delete the stored connection, authorization tokens, and historical metric snapshots, or delete your other information sooner — see your choices below.

7Your choices and rights

You can ask us at any time to:

Show you the information we hold about you.
Correct anything that's wrong.
Delete your information (where we're not required to keep it).
Disconnect a social account and delete its stored authorization tokens and metric history.

Depending on where you live, you may have additional rights under your state's privacy laws. To exercise any of these, email jgreenberg@firststringclub.com and we'll take care of it. We will not discriminate against you for exercising your rights.

8Age

First String is intended for college student-athletes and brand representatives who are 18 or older. If you are a student-athlete under 18, a parent or legal guardian must review this policy and agree on your behalf before you use the portal. We do not knowingly collect information from children under 13.

9Changes to this policy

If we make a material change, we'll update the version and effective date above and, for members, ask you to review the updated policy the next time you sign in. Continuing to use First String after an update means you accept the updated policy.

10Contact us

Questions, requests, or concerns about your privacy: jgreenberg@firststringclub.com.

This Privacy Policy explains how we handle information. It is not a contract for our services — the terms of using First String are in our Terms of Service, and paid engagements are governed by your separate services agreement.