Privacy Policy

REIGN (Rights & Earnings Intelligence Guide for NIL) is an AI-powered educational platform owned and operated by The C-Suite by Connect, a North Carolina limited liability company. REIGN is accessible at reignnil.com and through our mobile applications.

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use the REIGN platform. By using REIGN you agree to the collection and use of information in accordance with this policy.

REIGN is designed to provide educational information about NIL contracts and regulations. We are not a law firm and do not provide legal advice. Nothing in this Privacy Policy constitutes legal advice or creates an attorney-client relationship.

Information You Provide Directly

• Account Registration: Full name, email address, password (encrypted), user role, and subscription tier selection
• Profile Information: Role-specific details provided during onboarding
• Contract Uploads: NIL contracts and documents you upload to the Contract Vault in PDF format
• Chat and Q&A Interactions: Questions submitted to the REIGN Engine and Glory Engine
• Saved Responses: Questions and AI-generated responses you choose to save
• Communications: Messages you send to us via email or support channels
• Payment Information: Billing name, email, and payment method — processed exclusively through Stripe. REIGN does not store full payment card details

Information Collected Automatically

• Usage Data: Pages visited, features used, questions asked, contracts uploaded, time spent, click patterns
• Device Information: Device type, operating system, browser type and version
• Log Data: IP address, access times, referring URLs, and error logs
• Cookies: Session cookies for authentication, preference cookies, and analytics cookies

Information From Third-Party Services

• Google OAuth: Name, email address, and Google profile picture
• Apple OAuth: Name and email address or Apple private relay email
• Stripe: Transaction confirmations, subscription status, customer IDs, and billing events
• Supabase: Authentication and application data stored on AWS infrastructure

• To provide, operate, and maintain the REIGN platform
• To authenticate your identity and manage your account
• To process NIL contract uploads and generate AI-powered educational analyses
• To power the REIGN Engine and Glory Engine AI features
• To enforce subscription tier limits
• To process payments and manage subscriptions through Stripe
• To send transactional emails including account confirmation and password reset
• To monitor and enforce our Terms of Service
• To analyze usage patterns and improve the platform
• To send NIL law update notifications if you have opted in
• To comply with applicable legal obligations

We recognize that NIL contracts contain sensitive personal and financial information. We treat contract data with heightened care:

• Contract files are stored in encrypted Supabase Storage buckets accessible only to your authenticated account
• Row Level Security policies ensure no user can access another user's contract data
• Contract text sent to the Anthropic API for analysis is processed under Anthropic's Commercial Terms which explicitly prohibit Anthropic from using customer content to train AI models
• We do not sell, rent, license, or share your contract content with any third party except as required to provide the Service
• Deleted contracts are removed from storage. We do not maintain hidden copies of deleted files

REIGN's AI features are powered by the Anthropic Claude API operated by Anthropic, PBC.

• When you submit a question or upload a contract, the relevant text is transmitted to Anthropic's API servers for processing
• Under Anthropic's Commercial Terms, Anthropic may not use content submitted via the API to train or improve its AI models
• Your interactions are subject to Anthropic's Privacy Policy at anthropic.com/privacy
• We store questions and responses you explicitly choose to save in our Supabase database under your authenticated account

• Supabase, Inc. — Database, authentication, file storage, and serverless functions. Infrastructure: Amazon Web Services, US East region. Privacy Policy: supabase.com/privacy
• Anthropic, PBC — AI language model processing. Does not use API customer content for model training. Privacy Policy: anthropic.com/privacy
• Stripe, Inc. — Payment processing and subscription management. PCI-DSS compliant. REIGN does not store full payment card numbers. Privacy Policy: stripe.com/privacy
• Google LLC — Google OAuth authentication and Google Fonts. Privacy Policy: policies.google.com/privacy
• Apple Inc. — Apple OAuth authentication. Privacy Policy: apple.com/legal/privacy
• Lovable AB — Application development platform and frontend hosting. Privacy Policy: lovable.dev/privacy
• GitHub, Inc. (Microsoft) — Source code version control. No user personal data stored in repository. Privacy Policy: docs.github.com/site-policy/privacy-policies

REIGN is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are under 13 you may not use REIGN.

If you are between 13 and 17 years of age, you may use REIGN only with verifiable consent of a parent or legal guardian. By creating an account, users between 13 and 17 represent that their parent or guardian has reviewed and agreed to this Privacy Policy and our Terms of Service on their behalf.

If we become aware that we have collected personal information from a child under 13 without parental consent, we will immediately delete that information. Contact us at contact@reignnil.com if you believe we may have collected information from a child under 13.

• Account Data: Retained for the duration of your account and 90 days following deletion
• Contract Files and Analyses: Retained until you delete them or your account
• Q&A History: Unsaved questions not retained beyond your session. Saved responses retained until deleted
• Payment Records: Retained 7 years as required by tax and financial record-keeping law
• Usage Logs: Retained 12 months for performance and security monitoring
• Deleted Data: Removed from active databases within 30 days. Residual backup data purged within 90 days

California Residents — CCPA

• Right to Know: Request disclosure of personal information collected about you
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: We do not sell your personal information
• Right to Non-Discrimination: We will not discriminate for exercising CCPA rights

To exercise CCPA rights contact contact@reignnil.com with subject line "CCPA Request."

European Users — GDPR

• Right of Access: Request a copy of personal data we hold
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion under certain circumstances
• Right to Restrict Processing: Request restriction of processing
• Right to Data Portability: Request transfer to another provider
• Right to Object: Object to processing for direct marketing

To exercise GDPR rights contact contact@reignnil.com with subject line "GDPR Request."

All Users

• Access and Correction: Update profile information anytime through My Profile
• Account Deletion: Request deletion at contact@reignnil.com. Processed within 30 days
• Data Export: Request a copy of your data at contact@reignnil.com
• Marketing Opt-Out: Click unsubscribe in any marketing email

• Essential Cookies: Required for authentication and session management. Cannot be disabled
• Preference Cookies: Store your platform settings
• Analytics: Privacy-focused analytics only. We do not use Google Analytics

You may disable non-essential cookies through browser settings. Disabling essential cookies will prevent login.

• All data in transit encrypted using TLS 1.2 or higher
• Data at rest encrypted using AES-256
• Contract files accessible only via signed URLs expiring after 60 minutes
• Row Level Security prevents any user from accessing another user's data
• Passwords hashed and salted using bcrypt — never stored in plaintext
• API keys stored as encrypted environment variables — never in source code

No method of electronic storage is 100% secure. We cannot guarantee absolute security.

If REIGN offers SMS notifications in the future, we will obtain express written consent before sending text messages. You may opt out by replying STOP. Standard message and data rates may apply. Transactional emails are sent without opt-in requirement as they are necessary for account operation.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy with a new effective date and, for significant changes, by email notification to your registered address. Your continued use of REIGN after changes take effect constitutes acceptance.

Email: contact@reignnil.com

Subject Line for Privacy Requests: "Privacy Request — REIGN"

Mailing Address: The C-Suite by Connect, Charlotte, North Carolina

We will respond to all privacy inquiries within 30 days.