Privacy Policy

Effective date: 2026-09-05.

This Privacy Policy explains how KCG LLC, a Texas limited liability company, doing business as NextCommitHQ ("NextCommitHQ", "we", "us") collects, uses, shares, and protects personal information when you use NextCommitHQ Network (the "Network"). It is written to match what the Network actually does today. When we add a feature that changes any of this, we update this policy first.

If you have a question this policy does not answer, write to privacy@nextcommithq.com.

1. The short version

The Network is for adults: coaches and the staff of basketball programs. We do not knowingly collect information from anyone under 18, and we do not host athlete or roster data.
You decide what is public. A coach profile is public only if you set it to discoverable, and search engines may index it only if you separately allow that. Compensation expectations, your email address, your conversations, private Chalkboard assessments, applications, offers, and notes are never public.
We do not sell personal information for money. Today there are no advertising or analytics trackers on the Network and the only cookies are the ones that keep you signed in. We may introduce advertising, including from third-party advertising networks, and measurement tools in the future; if we do, we will update this policy and the Cookie Notice first, ask for consent where the law requires it, and give you a way to opt out of targeted advertising.
Four companies process data for us: our hosting provider, our database provider, our sign-in provider, and our email delivery provider. They are listed in Service Providers.
You can edit, unlist, export, and delete your data yourself. Deletion takes effect for visibility immediately and for erasure after a 30-day grace period.

2. Information we collect

2.1 Information you provide

Account. Email address, display name, and the identifier our sign-in provider assigns to you. Passwords, passkeys, and multi-factor secrets are held by the sign-in provider, never by us.

Coach profile. Display name, primary and desired roles, city, state, and metro area, age groups and team categories you coach, practice days and window, season you are available for, availability status and the date you last confirmed it, coaching philosophy, strengths, experience entries (organization, title, dates, description), timezone, and your visibility settings. Optionally, compensation expectations (amount range, unit, currency, volunteer flag, expense terms) which are kept private.

Organization. Organization name, description, philosophy, city, state, metro, practice locations, season focus, whether general inquiries are accepted, teams (season, age group, category, level), staff memberships and titles, and openings (role, dates, schedule, compensation, expenses, responsibilities, capacity).

Hiring records. Applications and invitations, stage changes, candidate notes written by organization staff, assessment assignments, offers and their versions, acceptances, placements, cancellations and their reasons, and continuation check-ins.

Messages. Conversations, message text, interview proposals and accepted slots, thread status, blocks, and reports.

Chalkboard. Your scenario responses (text today; voice and video are not yet offered), follow-up answers, and, for private assessments, the reviewer findings, excerpts, and notes an organization's reviewers attach to your response.

Feedback and reports. Feedback tickets (type, description, what you expected, severity, whether we may contact you) and reports about other users (category, details). Feedback automatically includes the page route with identifiers removed, your device class, locale, and the app version. It never includes message text.

Legal records. The Terms version you accepted, when you accepted it, and your attestation that you are 18 or older.

2.2 Information collected automatically

Request logs. When you use the Network our servers and hosting provider record technical data needed to run and secure it: IP address, user agent, request path, response status, timing, and a request identifier. Application logs are structured to exclude message bodies and email addresses.

Analytics events. We record product events with fixed names (for example that a profile was completed or an offer was accepted) together with short, non-sensitive properties (such as a role type or a device class). Events reference your user identifier and are deleted after 30 days. We do not use third-party analytics services today; if we add one, or add advertising measurement such as conversion pixels, we will list it in Service Providers and the Cookie Notice first.

Audit trail. For security and accountability we record who did what to which record: sign-ins, identity links, profile status changes, opening publication, applications, offers, placements, staff changes, admin actions, and each time a reviewer opens a private assessment. Audit records are append-only.

Cookies. Only the cookies described in the Cookie Notice: a session cookie from our sign-in provider and, in development builds only, our own session cookie.

2.3 Information from other users

Organization staff may write notes about you as a candidate and findings about your private assessment. Other users may report or block you. We treat these as the author's content; they are visible to the organization's authorized staff (notes and findings) or to our platform administrators (reports), not to you, except where the law gives you a right of access.

2.4 What we do not collect

We do not collect government identification numbers, financial account numbers, precise geolocation, biometric data, or information about athletes or other minors. Please do not put that kind of information in messages or profiles.

3. How we use information

We use personal information to:

Provide the Network: create and display profiles and openings, run search and fit comparisons, deliver messages, schedule interviews, record applications, offers, and placements, and show notifications.
Send transactional email you have not turned off: new messages, application and offer events, staff invitations, feedback status changes, and security or account notices. We email only verified addresses.
Keep the Network safe: authenticate you, enforce authorization and rate limits, detect abuse, investigate reports, and maintain the audit trail.
Support you: answer questions and act on feedback tickets.
Understand and improve the product using aggregate and short-lived event data.
Comply with law, respond to lawful requests, and enforce our Terms.
Show and measure advertising and sponsored content if we introduce it, as described in Section 5.
Offer and bill paid features if we introduce them, using a payment provider we will name in Service Providers before it receives any data.

Aggregated and de-identified information. We may create aggregated or de-identified information from Network data, such as compensation ranges by role and region, demand by age group, or how quickly openings are filled, and we may publish it, use it in research and reports, or share it with partners. We only do this where the information cannot reasonably be used to identify you, and we commit not to attempt to re-identify it.

Fit and ranking. When an organization views candidates for an opening, the Network compares the opening's stated needs with what the coach entered (role, schedule, location, experience, compensation, travel) and shows a deterministic "fit" with the reasons and their sources. It never uses race, ethnicity, age, photo, gender identity, disability, or any inferred protected trait. Unknown information is shown as unknown, never treated as a match. No fully automated decision with legal or similarly significant effect is made about you; every hiring decision is made by a person at the organization.

No AI on your data today. The Network does not currently send your content to any AI or machine-learning provider. If we add AI features, we will update this policy and the Service Providers list first, name the provider, state retention and training terms, and label AI-generated text in the interface.

4. What is public and what is private

Public, if your coach profile is discoverable: display name, roles, city, state and metro, age groups and categories, practice days and window, season, availability status and freshness, philosophy, strengths, experience entries, showcase Chalkboard responses you chose to publish, and verification labels. If you also allow search-engine indexing, this page may appear in search results and in a link preview when shared.

Public, for organizations: organization name, description, philosophy, location, teams, published openings, and verification status. Staff names appear as the human sender in conversations they start and on openings they manage.

Private, always: your email address, compensation expectations, unlisted or paused profiles, conversations, interview details, applications and stages, candidate notes, assessment assignments and private Chalkboard responses, reviewer findings, offers, placements, notifications, feedback tickets, reports, blocks, deletion requests, and the audit trail.

Shared with a specific counterparty: when you message an organization, its authorized staff can see the conversation. When you apply or are invited, the organization's hiring staff can see your application, your profile including private fields relevant to the role such as compensation expectations, and any assessment you complete for them. When an organization sends you an offer, you can see the offer and the identity of the staff member who proposed it.

We share personal information only:

With other users as described in Section 4, and only according to their role and the organization context they hold at the time. Removing a staff member ends their access immediately.
With service providers that process data on our behalf under contracts that restrict their use of it: hosting, database, sign-in, and email delivery. See Service Providers.
For legal reasons when we believe in good faith that disclosure is required by law, subpoena, or court order, or is necessary to protect the safety of a person, particularly a minor, or to investigate fraud or abuse, or to enforce our Terms.
In a business transfer such as a merger, acquisition, or sale of assets, in which case this policy continues to apply and we will notify you of any change in control.
With your direction, for example when you share a link to your public profile.

Advertising. The Network does not show advertising today. We may introduce advertising and sponsored content in the future, including advertising served by third-party networks such as Google, and advertising measurement tools such as conversion pixels. Advertising networks may use cookies and similar technologies to show ads based on your activity on the Network and elsewhere and to measure them. If we introduce them we will: update this policy and the Cookie Notice before any advertising technology loads; ask for your consent where the law requires it; label sponsored content; never place advertising inside private conversations, assessments, or hiring records; and never pass your email address, messages, or private profile fields to an advertising network. You will be able to opt out of targeted advertising at any time from a link in the footer, and your opt-out will be honored across the Network.

"Sale" and "share" under state law. We do not sell personal information for money. Some state privacy laws define "sale" or "share" broadly to include allowing advertising networks to collect information through cookies for targeted advertising. If we introduce that kind of advertising, it may count as a sale or share under those laws, and the opt-out described above is how you exercise your right to say no. We honor browser-based opt-out signals such as Global Privacy Control where the law requires it. If we introduce optional partner services, such as background screening or certification, they will be opt-in: your information goes to that partner only when you choose the service, and we will name the partner and what it receives before you do.

6. Cookies and similar technologies

See the Cookie Notice. In short, the Network sets one cookie to keep you signed in. Today there are no advertising, analytics, or social-media cookies, and no third-party scripts run on our pages. Fonts are served from our own domain. If we introduce advertising or measurement cookies we will add a consent mechanism first and list each one in the Cookie Notice.

7. How long we keep information

Retention periods for each category are listed in Data Retention and Deletion. The main rules:

Your account and content are kept while your account is active.
If you request deletion, your profile is hidden at once and your primary data is erased after 30 days. Messages you sent in other people's conversations remain, attributed to "Deleted member," so those people keep an accurate record. Notes an organization wrote about you belong to the organization and stay with it.
Accounts that never completed onboarding and have been inactive for 90 days are erased.
Message text is deleted 24 months after the last message in a thread, private assessment responses 24 months after submission, closed feedback tickets 12 months after closure, the audit trail after 12 months, analytics events after 30 days, and delivered email records after 90 days. Request logs are kept by our hosting provider for its standard period.
Backups expire on a rolling basis; deletions are replayed if a backup is restored.
We keep records longer where the law requires it or where they are needed for an active dispute, investigation, or safety matter.

8. Your choices and rights

You can do the following yourself from the Network:

Edit your profile, experience, availability, and organization details at any time.
Control visibility: set your profile to discoverable, unlisted, or paused; allow or refuse search-engine indexing; choose whether to publish a showcase response.
Manage notifications by type and channel. Security and legal notices cannot be turned off.
Opt out of targeted advertising from the footer link, once any advertising exists. Opting out stops targeted ads and ad-network data collection; you may still see ads that are not based on your activity.
Decline, block, and report conversations, people, and organizations.
Export your data as a file from your profile. The export includes your account, profile, memberships, conversations and messages you can see, applications, offers, placements, Chalkboard responses, notifications, feedback, and blocks. It excludes other people's private notes about you.
Delete your account from your profile, with a 30-day grace period during which you can cancel.

Depending on where you live, you may have legal rights to access, correct, delete, or obtain a portable copy of your personal information, to opt out of certain processing, and to appeal a refusal. Residents of Texas may have rights under the Texas Data Privacy and Security Act, and residents of other states may have rights under their state laws. To exercise a right that the tools above do not cover, email privacy@nextcommithq.com from the address on your account. We will verify the request, respond within 45 days (extendable once by 45 days where permitted, with notice), and will not discriminate against you for exercising a right. If we refuse a request you may appeal by replying to our response; we will answer the appeal within 60 days and, if we still refuse, tell you how to contact your state attorney general.

Our sign-in provider holds your credentials. When your Network account is erased we delete your account with that provider as part of the same job.

9. Security

We protect personal information with technical and organizational measures that include: authorization checks on every request, enforced at the database level as a second wall so that a user cannot read another user's private data even if the application has a bug; a least-privilege database role; encrypted connections everywhere; a strict content security policy and security headers; rate limits; an append-only audit trail; secret scanning and dependency checks on every code change; and a written vulnerability disclosure process (see Vulnerability Disclosure). Platform administrators can see feedback, reports, verification records, and the audit trail; they cannot open your conversations or private assessments from the administration area.

No system is perfectly secure. If we learn of a breach affecting your personal information we will notify you and the relevant authorities as the law requires, and we will tell you what happened, what we did, and what you can do. Our incident contact is security@nextcommithq.com.

10. Children

The Network is for adults. We do not knowingly collect personal information from anyone under 18, and we do not offer accounts to athletes or hold rosters or player data. If you believe a minor has created an account, or that content on the Network identifies a minor, tell us at privacy@nextcommithq.com and we will remove it. Coaches and organizations must not post content depicting or identifying minors.

11. Where information is processed

The Network is operated from the United States and its providers store data in U.S. regions. If you use the Network from outside the United States, your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country.

12. Third-party sites

Organization pages may link to an organization's own website. The sign-in flow is hosted by our sign-in provider on its domain. Those sites have their own privacy practices, which we do not control.

13. Changes to this policy

We will post any changes here with a new effective date. For material changes we will notify you through the Network or by email before they take effect. Earlier versions are available on request.

14. Contact

NextCommitHQ, a brand of KCG LLC 1910 Pacific Ave, Suite 2000, PMB 2513, Dallas, TX 75201 Privacy requests: privacy@nextcommithq.com Security incidents: security@nextcommithq.com General: legal@nextcommithq.com