Privacy Notice
Effective September 1, 2026
This Privacy Notice explains how Athletix, New York ("Athletix," "we," "us") collects, uses, shares, and protects information in connection with ATHLETIX (the "Service").
1. Information We Collect
- Account information: name, email address, and role, via our identity provider (Hexclave).
- Athlete information, submitted by an agency or, where applicable, an invited athlete/guardian: name, sport, position, school, class year, and profile details such as major, priorities, and notes about their situation.
- Decision and offer information: the decisions an agency is tracking for an athlete, and the opportunities/offers being compared (school, NIL, contract, or professional terms).
- Documents: files uploaded in connection with a decision (e.g., offer letters, contracts), scanned for malware before storage.
- Connected social media data (only if explicitly connected, with confirmed consent): follower counts, engagement rates, and similar public metrics from YouTube, TikTok, or X, via read-only access. We never receive the account's login password.
- Usage and billing information: subscription plan, analysis usage/credits, and billing identifiers from our payment processor (Stripe). We do not receive or store full payment card numbers.
- Site content (administrators only): the small set of admin users who can edit our public marketing page may have their edits and uploaded images stored to operate that feature.
2. Cookies
We use one type of cookie: a session cookie set by our identity provider (Hexclave) that keeps you signed in. This cookie is strictly necessary for the Service to function — without it, you cannot stay logged in. We do not use advertising, analytics, or tracking cookies, and no data from your visit is sold or shared with ad networks.
Because this cookie is strictly necessary rather than optional, there is no cookie-consent choice to make for it (disabling it simply means you would need to sign in again on every page). If we ever add non-essential cookies — for example, analytics — in the future, we will update this notice and provide a real opt-in/opt-out choice before doing so. You can always clear cookies through your browser's own settings, which will sign you out.
3. How We Use Information
- To provide the Service: managing athlete/decision records, running Analysis, storing and securing documents, and processing billing.
- To generate Analysis: decision, athlete-priority, offer, and (where applicable) document and connected-account data is sent to our AI provider (Anthropic, for Claude models) and, for school-related decisions, to the U.S. Department of Education's public College Scorecard API, solely to produce the recommendation you requested. This data is processed by Anthropic under its own API terms; Anthropic does not use data submitted through its API to train its models by default, and we do not use your data to train any AI model ourselves.
- To communicate with you: account, billing, and security notifications.
- To secure the Service: malware scanning of uploads, audit logging of sensitive actions (like connecting a social account), and fraud/abuse prevention.
4. How We Share Information
We share information only as needed to run the Service:
- With our identity provider (Hexclave), for authentication.
- With our AI provider (Anthropic) and the College Scorecard public API, to generate Analysis, as described above.
- With our payment processor (Stripe), to process subscriptions and analysis-credit purchases.
- With the social media platforms you explicitly connect (YouTube, TikTok, X), solely to retrieve the public metrics you authorized.
- With other members of your own agency, according to their role — this is core to how a multi-user agency account works.
- With an athlete you've granted "Athlete Viewer" access to, limited to the decisions actually shared with them.
- If required by law, or to protect the rights, safety, or property of Athletix, our users, or others.
We do not sell personal information.
5. Minors' Information
ATHLETIX is not directed to children under 13, and we do not knowingly collect information directly from a child under 13. Athlete information about a minor is submitted by their representing agency, or by the athlete's parent/guardian using Athlete Viewer access, who is responsible for having any consent required to do so. A parent or guardian who believes their child's information was submitted without appropriate authorization can contact us at athletix963@gmail.com to request its removal.
6. Data Retention
We retain account and athlete data for as long as the account is active, and for a reasonable period after to comply with legal, tax, and dispute-resolution obligations. You can request deletion of an athlete's record or your account by contacting us (see Section 8); certain records may be retained longer where required by law or legitimate business need (e.g., billing history).
7. Security
We use technical safeguards including encrypted transport, malware scanning of uploaded documents, encrypted storage of connected-account tokens, and role-based access controls limiting who at an agency can see what. No system is 100% secure, and we cannot guarantee absolute security.
8. Your Choices and Rights
Depending on your location, you may have rights to access, correct, delete, or export your personal information, or to object to certain processing. To exercise these rights, or with any privacy question, contact athletix963@gmail.com. We will respond to verified requests within a reasonable time.
9. Changes to This Notice
We may update this notice as the Service evolves. Material changes will be reflected by an updated effective date above.