Privacy Policy

We collect the following categories of information:

• Account information — name, email address, password credentials, organization or brand details, and your role (athlete, brand, or agency).
• Profile & social information — athlete profiles, social media handles, and connected-account identifiers (for example, your Instagram, Facebook, or TikTok account IDs) used to discover and run campaigns.
• Content & creative — photos, videos, captions, and other media you upload or submit as campaign deliverables.
• Campaign & advertising data — campaign participation, deliverables, partnership-ad and spark-code authorizations, and advertising performance metrics (such as spend, impressions, and results).
• Payment information — payout details and transaction records. Card and bank details are collected and processed by our payment processor; we do not store full card numbers.
• Integration data — information we access, with your authorization, from connected third-party services (see Section 4).
• Usage & device data — log data, IP address, browser and device information, and basic analytics about how you use the platform.

• Operate, maintain, and improve the platform and its features.
• Match athletes with brand campaigns and facilitate participation, content delivery, and approvals.
• Enable advertising features — including authorizing and running partnership and spark-code ads under your handle, and reporting performance.
• Publish and schedule content to your connected social channels at your direction.
• Process payouts and brand-funded payments.
• Communicate with you about your account, campaigns, and service updates.
• Detect, prevent, and address fraud, abuse, and security issues.
• Comply with legal obligations and enforce our terms.

A core part of Athletes is connecting your accounts so brands can collaborate with you and run advertising. When you connect an account or grant an authorization, we access and use only the data needed to provide that feature, and only with your permission.

• Meta (Facebook & Instagram) — with your authorization, brands may connect their Meta ad account and we may access ad accounts, Pages, Instagram business accounts, and advertising data to create and manage partnership ads using approved creator content. You can revoke this access at any time.
• TikTok — spark-code authorizations that let a brand run paid promotion behind your organic content.
• Shopify — to provision discount codes, comped products, and attribute sales for campaigns.
• Stripe — to fund campaigns and process creator payouts.
• Publishing & email providers — to schedule and publish posts to your channels and to send transactional email.

Your use of these third-party services is also governed by their own privacy policies and terms.

We do not sell your personal information. We share information only as follows:

• With brands and agencies you choose to work with — profile details, content, and campaign data necessary to run the collaboration.
• With service providers — hosting, database, payment, advertising, publishing, and email vendors that process data on our behalf.
• For legal reasons — to comply with law, respond to lawful requests, or protect the rights, safety, and property of Athletes, our users, and others.
• In a business transfer — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

We retain personal information for as long as your account is active or as needed to provide the service, comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or anonymize it.

• Access, update, or correct your account information in the app.
• Disconnect linked accounts (such as Meta, TikTok, Shopify, or Stripe) at any time from your settings.
• Revoke partnership-ad and spark-code authorizations at any time — your content stays under your handle and you remain in control.
• Request access to, or deletion of, your personal information (see Section 7).
• Opt out of non-essential email communications.

Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA. To exercise any of these rights, contact us at chris@athletes.app.

You can request deletion of your account and associated personal information at any time by emailing chris@athletes.app with the subject “Data Deletion Request.” We will verify your request and delete the data we hold about you, except where we are required to retain it by law. When you remove the Athletes app from your Meta (Facebook/Instagram) account, the associated connection and tokens we store are revoked and deleted.

We use technical and organizational measures to protect your information, including encryption of sensitive credentials and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

The platform is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

We operate in the United States, and your information may be processed and stored there or in other countries where our service providers operate. By using the platform, you consent to this transfer and processing.

We may update this Privacy Policy from time to time. We will post the updated version here and revise the “Last updated” date above. Material changes may be communicated through the platform or by email.

If you have questions about this Privacy Policy or our data practices, contact us at chris@athletes.app.