What we collect, and what we do not.

Nextreks is a career-readiness platform for high school students, operating from Miami, Florida. This policy covers www.nextreks.com, our campaign pages, and the signed-in product.

Our product is used by minors, so we treat it as such by default rather than as an exception. Where this policy is stricter than the law requires, that is deliberate.

The waitlist form collects your email address and who you are (student, parent, counselor or organization), so we can send each group the right launch email. We also record which page you joined from and the site or campaign link that brought you there, if any.

We use it for exactly one purpose, which is to email you once when access opens.

• We do not require a name, a phone number, or your student’s details.
• We do not sell, rent, or trade waitlist emails. Not to anyone, at any price.
• We do not add you to a marketing sequence or a newsletter.

You can have your waitlist entry deleted at any time by emailing privacy@nextreks.com. We action deletion requests within 30 days and do not ask you why.

Signing a student up collects:

• The student’s name and email address
• Their date of birth, which we ask for first so we can stop anyone under 13 and ask a parent or guardian to approve anyone under 18
• Their school, and their counselor if they have one
• For a student under 18, a parent or guardian’s name and email address
• A password, which is stored only as a one-way hash and is never readable by us

As the student uses the product, we store the work they choose to do:

• Challenge submissions, including any text, files, images, or video they upload
• Reviewer and rubric feedback on that work
• Progress: Challenges and Islands finished, and Trait Cards
• Portfolio content, and whether the student has chosen to make it public

We do not ask for, and the product has no field for, a Social Security number, a home address, biometric data, or precise location.

Nextreks is for students aged 13 and older. Signup asks for a date of birth before anything else and stops anyone under 13 before an account exists, so we do not collect personal information from children under 13.

A student aged 13 to 17 needs a parent or guardian to approve their account. We email the guardian a link they must action before the student can start. A student aged 18 or older controls their own account and does not need a guardian.

A parent or guardian of a student under 18 may at any time:

• Review the personal information we hold about their student
• Ask us to delete it, which also closes the account
• Withdraw consent, which stops any further collection. We do not condition participation on giving us more information than the product needs.

Send any of those requests to privacy@nextreks.com from the guardian email on the account.

Where a school or district uses Nextreks with its students, we act as a school official with a legitimate educational interest under the Family Educational Rights and Privacy Act (FERPA). That means:

• Education records shared with us stay under the school’s control. We use them only to provide the service the school asked for.
• We do not use school-provided student data to advertise to anyone, and we do not build advertising profiles from it.
• We return or delete school-provided data on the school’s instruction, or when the relationship ends.

Schools pay nothing to use Nextreks, and that does not change what we owe them here.

A student portfolio is private by default. Nothing a student makes is visible outside their own account, their guardian, and their counselor unless the student publishes it.

When a student does publish, the portfolio becomes readable by anyone with the link, which is the point of it. The student can unpublish at any time, and unpublishing takes the page down. Their work is not deleted when they unpublish, and it stays theirs.

The site sets three cookies, all strictly necessary. They hold your session token, your refresh token, and your role, which is what keeps you logged in and shows you the right dashboard.

We use Vercel Web Analytics to count page visits and waitlist signups. It sets no cookies, does not identify you, and does not follow you to other websites. There is no advertising pixel and no other third-party tracker, and we do not run behavioural advertising to minors.

If we ever add anything beyond that, this section changes before it ships, and anything non-essential will be opt-in.

We share the minimum necessary with a short list of service providers, each contractually limited to working on our behalf:

• Payment processing. Card details go directly to our payment processor and never touch our servers. We hold only the fact of a subscription and its state.
• Hosting and infrastructure. The application and database are run by infrastructure providers on our behalf.
• Email delivery. Account and notification email is sent through an email provider.
• AI feedback. Challenge and Capstone submissions get feedback against a rubric from an AI model. Where a named adult also reviews a piece, the portfolio says so. Submissions are not used to train any third-party model.

We do not sell personal information, and we do not share it for cross-context behavioural advertising. We will hand over data if legally compelled, and we will tell the account holder unless we are legally barred from doing so.

• Waitlist emails: until access opens or you ask us to delete them, whichever is first.
• Account and portfolio data: for as long as the account is open. A student’s completed work is not deleted when a subscription lapses, because the proof is theirs and losing it would defeat the product.
• After account deletion: removed from live systems within 30 days, and from backups within 90 days.

Whatever jurisdiction you are in, you can ask us to:

• Tell you what we hold about you or your student
• Correct anything that is wrong
• Delete it
• Send you a copy in a portable format

Email privacy@nextreks.com. We reply within 30 days. We do not charge for these requests and we do not treat you differently for making one.

Traffic is encrypted in transit, passwords are stored as one-way hashes, and access to production data is limited to the people who need it to run the service. No system is perfect. If a breach affects your data we will tell you and the relevant regulator within the timeframes the law sets.

If we change how we handle personal information we will update this page and move the effective date. For a material change affecting existing accounts, we will email the account holder rather than relying on you to re-read this page.

Privacy questions, requests, and complaints: privacy@nextreks.com.

Anything else: hello@nextreks.com. Our Terms of Service cover the rest of the relationship.