Privacy Policy

Effective Date: October 21, 2025
Entity: Nukleus Co
Principal Office: 22525 SE 64th Pl. Ste 200, Issaquah, WA 98027
State of Incorporation: Delaware

1. Introduction

Nukleus Co (“Nukleus,” “Company,” “we,” “us,” or “our”) respects the privacy of its users and is committed to protecting personal information in accordance with applicable privacy and data protection laws, including the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and, where applicable, the General Data Protection Regulation (GDPR).
This Privacy Policy describes the types of information we collect, how that information is used and disclosed, and the rights available to users of our services.

This Privacy Policy applies to all websites, web applications, mobile applications, software-as-a-service offerings, and related services provided by Nukleus (collectively, the “Services”).

By accessing or using the Services, you acknowledge that you have read, understood, and agreed to this Privacy Policy.

2. Information We Collect

We may collect the following categories of information:

(a) Information Provided by Users

• Account registration information (name, email address, organization, password).

• Profile or business information (agency name, title, phone number, address, or team affiliation).

• Player and client data entered by users, including contracts, communications, performance records, or compliance data.

• Financial data, if provided by agencies or organizations using integrated payment or accounting features.

• Correspondence or support communications.

(b) Automatically Collected Information

• Technical and usage data such as IP address, browser type, operating system, device identifiers, date/time stamps, pages visited, and actions performed.

• Authentication and session information, including cookies or similar technologies used for login and analytics.

(c) Information from Third Parties

Where users or organizations connect external applications or services (such as Plaid, DocuSign, Microsoft, or QuickBooks), we may receive limited information necessary to enable those integrations. Nukleus does not directly collect or store banking credentials or financial account numbers unless explicitly provided by the user or their organization.

3. Purpose of Processing

We use personal and business information solely for the following legitimate purposes:

• To provide, maintain, and enhance the Services.

• To authenticate users and facilitate secure collaboration between agents, athletes, and associations.

• To process, manage, and store contracts, communications, and financial transactions.

• To detect, investigate, and prevent security incidents or fraudulent activity.

• To provide technical support, training, and administrative communications.

• To comply with applicable laws, regulations, and contractual obligations.

4. Data Sharing and Disclosure

We do not sell, rent, or lease personal information.
Information may be shared only as follows:

• Authorized Access: With users or organizations granted access to shared data.

• Service Providers: With third-party vendors performing services on our behalf (e.g., hosting, analytics, communications, or integrations).

• Legal Compliance: When required by law, subpoena, or to protect the rights, property, or safety of Nukleus, its users, or others.

• Corporate Transactions: In the event of a merger, acquisition, or asset transfer, information may be transferred as part of the transaction.

All third-party processors are bound by contractual obligations to safeguard personal data and use it solely for the purposes described herein.

5. Data Retention

We retain information only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable law, regulation, or contractual obligation.
Upon termination of an account, users may request deletion of their data, subject to legal and operational retention requirements.

6. Data Security

Nukleus employs commercially reasonable administrative, physical, and technical safeguards designed to protect data against unauthorized access, destruction, alteration, or disclosure.
All data is encrypted in transit and at rest using industry-standard protocols (TLS, AES-256).
Despite these measures, no system can be guaranteed to be completely secure.

7. User Rights

Depending on applicable law, users may have rights to:

• Access and obtain a copy of their personal data;

• Request correction or deletion of data;

• Restrict or object to processing;

• Request data portability; and

• Opt out of marketing communications.

Requests may be submitted to support@nukleus.co.
Verification of identity may be required to process certain requests.

8. Data Transfers

All data is processed and stored in the United States.
Users located outside the U.S. consent to the transfer and processing of their information in the United States, where privacy laws may differ from those in their jurisdiction.

9. Children’s Data

The Services are not intended for use by individuals under the age of thirteen (13). Nukleus does not knowingly collect personal data from minors. Any such data discovered will be promptly deleted.

10. Third-Party Websites and Integrations

The Services may include links or integrations to third-party sites and applications. Nukleus is not responsible for the privacy practices or content of those third parties. Users should review their respective privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The “Effective Date” at the top will indicate the most recent revision.
Continued use of the Services following any update constitutes acceptance of the revised Policy.

12. Contact Information

Nukleus Co
22525 SE 64th Pl. Ste 200
Issaquah, WA 98027
Email: support@nukleus.co