What we collect, and what we do not.

Nextreks is a career-readiness platform for high school students, operating from Miami, Florida. This policy covers www.nextreks.com, our campaign pages, and the signed-in product.

Our product is used by minors, so we treat it as such by default rather than as an exception. Where this policy is stricter than the law requires, that is deliberate.

The waitlist form collects one thing: an email address. We also record which page you joined from, so we know whether you came in as a parent, a student, or a counselor.

We use it for exactly one purpose, which is to email you once when access opens.

• We do not require a name, a phone number, or your student’s details.
• We do not sell, rent, or trade waitlist emails. Not to anyone, at any price.
• We do not add you to a marketing sequence or a newsletter.

You can have your waitlist entry deleted at any time by emailing privacy@nextreks.com. We action deletion requests within 30 days and do not ask you why.

Signing a student up collects:

• The student’s name, email address, and school year
• A parent or guardian’s name and email address
• A password, which is stored only as a one-way hash and is never readable by us

As the student uses the product, we store the work they choose to do:

• Challenge submissions, including any text, files, images, or video they upload
• Reviewer and rubric feedback on that work
• Progress: XP, islands completed, Trait Cards earned
• Portfolio content, and whether the student has chosen to make it public

We do not ask for, and the product has no field for, a Social Security number, a home address, a date of birth, biometric data, or precise location.

Nextreks is built for high school students, so our users are typically 14 and older. Where a student is under 13, the Children’s Online Privacy Protection Act (COPPA) applies and we obtain verifiable parental consent before that account becomes usable.

Signup requires a parent or guardian email regardless of the student’s age, and the guardian receives a consent link they must action. A parent or guardian may at any time:

• Review the personal information we hold about their student
• Ask us to delete it, which also closes the account
• Withdraw consent, which stops any further collection. We do not condition participation on giving us more information than the product needs.

Send any of those requests to privacy@nextreks.com from the guardian email on the account.

Where a school or district uses Nextreks with its students, we act as a school official with a legitimate educational interest under the Family Educational Rights and Privacy Act (FERPA). That means:

• Education records shared with us stay under the school’s control. We use them only to provide the service the school asked for.
• We do not use school-provided student data to advertise to anyone, and we do not build advertising profiles from it.
• We return or delete school-provided data on the school’s instruction, or when the relationship ends.

Schools pay nothing to use Nextreks, and that does not change what we owe them here.

A student portfolio is private by default. Nothing a student makes is visible outside their own account, their guardian, and their counselor unless the student publishes it.

When a student does publish, the portfolio becomes readable by anyone with the link, which is the point of it. The student can unpublish at any time, and unpublishing takes the page down. Their work is not deleted when they unpublish, and it stays theirs.

The site sets three cookies, all strictly necessary. They hold your session token, your refresh token, and your role, which is what keeps you signed in and shows you the right dashboard.

There is no analytics tag, no advertising pixel, and no third-party tracker on this site. We do not track you across other websites, and we do not run behavioural advertising to minors.

If we ever add analytics, this section changes before the tag ships, and anything non-essential will be opt-in.

We share the minimum necessary with a short list of service providers, each contractually limited to working on our behalf:

• Payment processing. Card details go directly to our payment processor and never touch our servers. We hold only the fact of a subscription and its state.
• Hosting and infrastructure. The application and database are run by infrastructure providers on our behalf.
• Email delivery. Account and notification email is sent through an email provider.
• AI review. Student submissions are reviewed against a rubric by an AI model. Submissions are not used to train any third-party model.

We do not sell personal information, and we do not share it for cross-context behavioural advertising. We will hand over data if legally compelled, and we will tell the account holder unless we are legally barred from doing so.

• Waitlist emails: until access opens or you ask us to delete them, whichever is first.
• Account and portfolio data: for as long as the account is open. A student’s completed work is not deleted when a subscription lapses, because the proof is theirs and losing it would defeat the product.
• After account deletion: removed from live systems within 30 days, and from backups within 90 days.

Whatever jurisdiction you are in, you can ask us to:

• Tell you what we hold about you or your student
• Correct anything that is wrong
• Delete it
• Send you a copy in a portable format

Email privacy@nextreks.com. We reply within 30 days. We do not charge for these requests and we do not treat you differently for making one.

Traffic is encrypted in transit, passwords are stored as one-way hashes, and access to production data is limited to the people who need it to run the service. No system is perfect. If a breach affects your data we will tell you and the relevant regulator within the timeframes the law sets.

If we change how we handle personal information we will update this page and move the effective date. For a material change affecting existing accounts, we will email the account holder rather than relying on you to re-read this page.

Privacy questions, requests, and complaints: privacy@nextreks.com.

Anything else: hello@nextreks.com. Our Terms of Service cover the rest of the relationship.