← weNATIONIL

Privacy

Version 2026-10-09

Draft — pending attorney review (2026-09-30): the social-accounts sentence now says what we keep (the account name, who posts) and what we never hold (a password).

In one breath

We collect
what is needed to run a deal and pay for it — and for a minor, deliberately as little as that takes
We never sell
your information, and we never profile a young athlete for advertising
Location
for anyone under 19 is stored and shown at town level. Never a street, never a school, never coordinates

1. Overview

Gold Polaris Holdings LLC operates weNATIONIL, a local marketplace where a business orders a short video from an athlete near them. This policy says what we collect, why, who sees it, and what you can make us delete. Using the platform means agreeing to it.

2. What we collect

Account. Name, email, phone, date of birth (to check age), sport, club or team, town and state, profile photo and bio. For anyone under 19, a parent or guardian's contact details.

Location. Town and state. For a minor we store nothing finer and render nothing finer — the map places every athlete at their town centre, on purpose.

Money. Payment details are collected and held by Stripe. We do not store card numbers or bank details. We keep the record of what a deal was worth, what each party was owed, and what was paid.

Compliance. Disclosure records sent to a school or association where a rule requires it, and the reporting history that goes with them.

Usage. Pages visited, device and browser, IP address, and how you got here.

We do not collect follower counts and we do not compute a score about you. We keep the name of the account your family posts from and who in the family posts; we never hold a password and we never post for you.

3. Passes, codes and where you are

  • A customer's pass is a random code. It carries no name. It works once, for 24 hours.
  • A family's code is made from a parent's first name, never the surname. If an older code of yours carries your surname, write to ben@wenationil.com and we will change it.
  • We never use a phone's location to decide that someone was at a business. A visit counts only when the business scans a pass or enters a code at its counter.
  • “Near me” asks for your location only when you tap it. We use it once to find your town and do not store it.
  • We never store or show a precise location for a child. On the public map a pin is rounded to about a kilometre and sits at the town.

4. Why we use it

  • To keep your card and profile, and show it to businesses near you.
  • To run a deal: the offer, the approval, the delivery, the payment.
  • To meet tax and reporting rules, including a 1099 where the threshold applies, and to disclose a deal to a school or association where their rules require it.
  • To check age and eligibility.
  • To tell you when something needs you — an offer, an approval, a payment.
  • To stop fraud and enforce our terms.

5. Who sees it

We do not sell your personal information. It is shared only:

  • With a business, when you take their offer: first name, town, sport, and the card. Never your financial details.
  • With a parent or guardian, for every athlete under 19 — all of it, always.
  • With an agent, only if you (or your guardian) granted them access. They see offers, deals and the ledger; they can never act. You can withdraw it at any moment.
  • With a school or association, where their NIL rules require a disclosure.
  • With regulators and the IRS, where the law requires it.
  • With the services that run the platform (next section).
  • Where the law compels us — a subpoena or a court order.

6. The services we use

  • Supabase — database, sign-in and file storage, hosted on AWS.
  • Stripe — payouts and billing.
  • Cloudflare — DNS, CDN and protection.
  • Vercel — hosting.

Each handles data under its own privacy policy. We pick providers that hold industry-standard security certifications.

7. How it is protected

  • Encrypted in transit (TLS 1.2+) and at rest (AES-256).
  • Row-level security, so an account reaches its own data and not anybody else's.
  • Access to personal data limited to who needs it.
  • Regular security review.

No system is perfectly secure. We can say what we do; we cannot promise nothing will ever go wrong.

8. How long we keep it, and why

Nothing about a young person is kept indefinitely. Every line below has an end. Each one says what we collect it for, why we need to keep it that long, and when it goes.

  • The card — first name, town, sport, age class, number, photograph: collected because it is the card a business buys. Kept while the card exists. Gone 30 days after a family closes it, the photograph and its cutout together.
  • Date of birth: collected to enforce the age floor and set the age class. Kept while the card exists, and afterwards only as the dated fact that the floor was met.
  • Parent consent and countersignatures: collected because nothing happens without a parent's yes. Kept seven years — a consent with no record is not a consent, and this is the record that gets tested.
  • Deal, split and payout records: collected to pay the family and file taxes. Kept seven years, because tax rules require it.
  • Seasons and development credits: a season is locked for life by design, so programs can be paid from it. On closure it is reduced to a dated fact with no personal detail.
  • Security and session logs: kept 90 days for fraud and incident response, then deleted.
  • Anything uploaded and then removed: deleted immediately, original and every version made from it.

Closing a kid's card closes every copy of it anyone is keeping. Ask us to delete something and we answer within 30 days: ben@wenationil.com.

9. Photographs are never turned into faceprints

When a card photo has its background removed, the picture is streamed through the tool and handed straight back. It is not stored there, it is not used to train anything, and no face template or faceprint is created at any point. The tool separates a person from their background; it cannot identify anyone or match one photo to another.

There is no face detection, face matching or recognition anywhere in this product. If that ever changes, this page changes first.

10. Under 19

Athletes 13 and older may use weNATIONIL. Under 19 you are a minor in Nebraska, so if you are under 19:

  • A parent or guardian consents first, before anything is collected or shown.
  • They countersign every deal, every development credit, and every piece of content.
  • They can see, correct or delete anything we hold about you, at any time — ben@wenationil.com.
  • We collect as little as the job needs, and your location never gets finer than your town.
  • No advertising profiling. Ever. We do not build behavioural profiles of minors and we do not sell their information.

Under 13, we cannot make a card at all. The sign-up refuses a date of birth under 13 and says so. That is the federal children's privacy rule (COPPA, which covers children under 13), not our preference — and it is why a nine-year-old who plays cannot be here yet, however much we would like them to be. If we find we hold anything from a child under 13, we delete it.

One person is responsible for this: Ben Jones, ben@wenationil.com. Write to him about anything on this page. We keep a written retention policy and a written security program, we review them every year, and we ask every company that handles data for us to commit in writing to the same protections.

11. School records (FERPA)

weNATIONIL is not a school and holds no education records as FERPA defines them. Some of what you tell us — your club, your sport — may overlap with what a school holds, but we do not obtain records from a school. What you give us directly is governed by this policy.

12. Your rights

Depending on where you live, you can ask us to:

  • Show you what we hold about you.
  • Correct anything wrong.
  • Delete your account and data, other than what a tax or compliance rule makes us keep.
  • Export it in a machine-readable file.
  • Stop marketing messages.
  • Limit how we process it.

Write to ben@wenationil.com. We answer within 30 days, or sooner where the law says sooner.

13. California (CCPA)

  • Know what we collect and why.
  • Ask for deletion.
  • Opt out of the sale of personal information — we do not sell it.
  • Not be treated differently for exercising these rights.

14. Europe and the UK (GDPR)

Our legal bases:

  • Contract — what it takes to provide the service.
  • Consent — where you gave it, such as marketing email.
  • Legitimate interest — security, fraud prevention, improving the product.
  • Legal obligation — tax and reporting rules.

You may withdraw consent at any time, and you may complain to your data protection authority.

15. Cookies

Essential cookies and browser storage, to keep you signed in and remember your preferences. No third-party tracking cookies, no advertising cookies.

16. Changes

We may update this policy. Material changes are announced by email or in the app at least 14 days before they take effect.

17. Contact

Privacy questions, or to exercise any right above: ben@wenationil.com

Gold Polaris Holdings LLC · Nebraska, United States

Back to weNATIONIL

Questions: ben@wenationil.com. This document is written to be read without a lawyer; it is still a contract.