THIRD Advisory ("THIRD," "we," "our," or "us") is committed to protecting the privacy and security of student-athletes and institutional partners who use our platform. This Privacy Policy explains how we collect, use, share, and protect your information — and the specific guarantees we make about athlete-only data.
1. Information We Collect
We collect information you provide directly when you create an account, complete your athlete or institution profile, submit NIL contracts for review, or communicate with THIRD advisors. This includes your name, contact information, sport, institution, year of eligibility, financial records, and any documents you upload for review.
We also automatically collect certain technical data such as device type, browser, IP address, and usage patterns to improve platform performance and security.
2. How We Use Your Information
Your information is used exclusively to deliver THIRD's advisory and athlete development services. This includes: providing contract review and NIL compliance guidance, connecting you with licensed attorneys and CPAs, generating your personalized THIRD Coach insights, tracking eligibility and career stage milestones, and communicating service updates and advisor messages.
We do not use your data for advertising, profiling for third-party sale, or any purpose beyond the service you have enrolled in.
3. Athlete Data Privacy (ATHLETE-ONLY Principle)
THIRD operates on a strict data compartmentalization policy. Wellness data, mental health check-ins, personal financial details, and any information submitted through the Wellness or Support pillars is classified as ATHLETE-ONLY. This information is never shared with your athletic institution, coaches, compliance staff, or any institutional partner — regardless of their subscription level.
Institutions using THIRD's platform access only aggregated, anonymized program-level data. Individual athlete records are never surfaced to institutional accounts.
4. Sharing of Information
THIRD does not sell your personal information. We share data only in the following limited circumstances:
— With licensed professionals (attorneys, CPAs, financial advisors) you explicitly engage through the THIRD platform, bound by their own professional confidentiality obligations.
— With third-party infrastructure providers (hosting, storage, authentication) under strict data processing agreements that prohibit secondary use.
— When required by law, court order, or to protect the safety of users or the public.
All sharing is documented and auditable upon request.
5. Data Retention
We retain your account data for as long as your account is active. Following account deletion, personal data is removed within 30 days, with the exception of records required for legal compliance or dispute resolution (retained for up to 7 years per applicable financial record-keeping laws).
You may request a copy of all data held on your account at any time by contacting privacy@third.co.
6. Security
THIRD implements industry-standard security controls including end-to-end encryption for data in transit (TLS 1.3), AES-256 encryption for stored documents, multi-factor authentication options, and regular third-party security audits. Access to your data within THIRD is role-limited and logged.
No system is completely immune to breach. In the event of a security incident affecting your data, we will notify you within 72 hours as required by applicable law.
7. Your Rights
You have the right to access, correct, export, or delete your personal data at any time through your account Settings page or by contacting us directly. You may also opt out of non-essential communications at any time.
If you are located in a jurisdiction with specific data protection rights (including California under CCPA, or EU/EEA under GDPR), those rights apply to your data and THIRD will honor them. Submit requests to privacy@third.co.
8. Cookies
THIRD uses session cookies strictly necessary for authentication and platform function. We do not use tracking cookies, third-party advertising cookies, or behavioral analytics cookies. You may disable cookies in your browser, but certain platform features will not function without session cookies.
9. Changes to This Policy
We may update this Privacy Policy as our services evolve or regulations change. When we make material changes, we will notify you via email and display a notice in your dashboard at least 14 days before the change takes effect. Continued use of THIRD after that date constitutes acceptance of the updated policy.
10. Contact
Questions, requests, or concerns about this Privacy Policy should be directed to:
THIRD Advisory — Privacy Team
privacy@third.co