Privacy Policy

The Athlete Sports Exchange LLC (operated by The Athlete Sports Exchange LLC, a Delaware limited liability company, "we," "us," or "our") is committed to protecting your privacy and personal rights. Our registered address is 8 The Green, Ste B, Dover, DE 19901. We advocate for minimal data collection and will never sell your personal information to third parties—this commitment is irrevocable.

This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our website (getathx.com or athexhq.com), mobile applications, and related services (collectively, the "Services"). The Services provide a skill-based platform for trading virtual shares in athletes based on fantasy sports performance.

By using the Services, you consent to the practices described in this Policy. If you do not agree, please do not use the Services. We may update this Policy at any time; material changes will be notified via email or in-app notice at least 30 days in advance. Continued use constitutes acceptance.

This Policy complies with applicable U.S. laws, including the California Consumer Privacy Act (CCPA). We prioritize data minimization, collecting only what is necessary for the Services.

1. Information We Collect

We collect the minimum information needed to provide, improve, and secure the Services.

1.1 Information You Provide Directly

• Account Registration: Name, email address, date of birth, username, password, and contact information to create and verify your account.
• Social Login (Google Sign-In): If you choose to sign in with Google, we receive only the basic profile information you have authorized Google to share (typically your name, email address, and profile picture). We do not request or receive any additional data from Google beyond what is necessary for authentication and account creation. We do not access your Google contacts, calendar, drive, or any other Google services.
• Identity Verification: Government-issued ID, address, or other documents for age, location, and KYC/AML compliance (e.g., to prevent fraud and ensure eligibility).
• Payment Information: Billing details (e.g., credit/debit cards, bank account info) processed securely via our exclusive provider, Stripe; we do not store full payment details.
• User Content: Profile preferences, communications with support, contest entries, or shared portfolios (if you choose to share publicly).
• Surveys or Feedback: Optional responses to improve the Services.

1.2 Information Collected Automatically

• Device and Usage Data: IP address, browser type, device ID, operating system, app version, pages viewed, time spent, and interactions (e.g., trades entered).
• Location Data: Approximate location (from IP) or precise GPS (with consent) for geo-fencing to comply with state laws and prevent access from restricted areas.
• Cookies and Tracking Technologies: Essential cookies for functionality (e.g., session management). We use Google Analytics on the website to collect anonymized statistics (e.g., page views, session duration) for improving site performance. Google Analytics data is anonymized (IP masking enabled) and aggregated; we do not link it to personal identifiers. You may opt out via browser settings or Google's tools. No third-party trackers for advertising or personalized profiling.

1.3 Information from Third Parties

• Verification Services: Data from identity providers (e.g., for KYC).
• Sports Data Providers: Aggregated athlete stats (non-personal) from APIs like SportsDataIO.

We do not purchase or receive personal data from data brokers.

We do not collect sensitive information (e.g., race, health data) unless required for legal compliance.

2. How We Use Your Information

We use your information solely for providing and improving the Services, with a focus on transparency and necessity:

• Account Management: To create, verify, and secure your account (including via Google Sign-In); process deposits/withdrawals; and enforce eligibility.
• Service Delivery: To facilitate trading, calculate payouts, display leaderboards, and provide educational content.
• Compliance and Security: For fraud detection, AML/KYC checks, geo-restrictions, and legal obligations (e.g., tax reporting via 1099 forms for winnings over $600).
• Communications: To send transactional emails (e.g., payout confirmations) or support responses. We may send optional marketing (e.g., promotions) only with your consent; opt out anytime.
• Improvement and Analytics: Anonymized data (including from Google Analytics) to analyze usage patterns and enhance features (e.g., better scarcity algorithms). No personalized profiling for ads.
• Legal Purposes: To respond to subpoenas, audits, or disputes.

We do not use your data for automated decision-making that produces legal effects or for any purpose not disclosed here.

3. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties for marketing or any commercial purposes. Sharing is limited to:

• Service Providers: With trusted vendors (e.g., Stripe for payments, Supabase for hosting, Google for optional Sign-In authentication and anonymized Analytics) who are contractually bound to use data only for our Services and maintain confidentiality/security. For Google Sign-In, we share only the authentication token necessary to verify your identity—no additional data is shared beyond what Google already provides with your consent. Google Analytics receives anonymized data only.
• Legal Compliance: If required by law, subpoena, or government request; for fraud prevention; or to protect our rights/safety.
• Business Transfers: In a merger, acquisition, or asset sale, with notice and opt-out where possible.
• Aggregated/Anonymized Data: Non-personal insights shared for research or analytics (e.g., total trades per sport).

International transfers are minimized; any to vendors use appropriate safeguards.

4. Data Security

We implement industry-standard measures to protect your data:

• Encryption (e.g., SSL/TLS for transmissions, at-rest encryption for stored data)
• Access controls, firewalls, and regular security audits
• Segregated user funds in compliant accounts

While no system is 100% secure, we follow best practices and notify you of breaches as required by law.

5. Your Rights and Choices

We respect your privacy rights and provide easy controls:

• Access, Correction, Deletion: Request a copy of your data, updates, or deletion via support@getathx.com. We respond within 30-45 days (per CCPA).
• Opt-Outs: Unsubscribe from marketing via email links or account settings. Opt out of Google Analytics via browser add-ons or settings.
• Do Not Sell/Share: We do not sell data, but CCPA users can confirm via a dedicated "Do Not Sell My Personal Information" link on our site.
• Withdrawal of Consent: For non-essential processing (e.g., marketing).
• Portability: Export your data in a machine-readable format.
• Complaints: File with us or the California Attorney General for CCPA concerns.

For verification, we may require ID. Some data (e.g., transaction logs) is retained for legal/compliance reasons (up to 7 years for tax/audit).

6. Children's Privacy

The Services are not for users under 18 (or 21 in some states). We do not knowingly collect data from minors. If discovered, we delete it immediately.

7. Data Retention

We retain data only as long as necessary: Account info while active + 7 years for legal reasons; anonymized analytics indefinitely. You can request deletion sooner.

8. Third-Party Links

The Services may link to external sites (e.g., sports APIs). We are not responsible for their privacy practices—review their policies.

9. U.S. Users Only

The Services are intended for users in the United States only. We do not target or collect data from international users.

10. Contact Us

For questions or requests:

• Email: privacy@getathx.com
• Mail: The Athlete Sports Exchange LLC, 8 The Green, Ste B, Dover, DE 19901
• Phone: (302) 215-3636

For CCPA requests: Use our "Do Not Sell My Personal Information" link or call (302) 215-3636.

11. Changes to This Policy

We may update this Policy; changes posted with the "Last Updated" date. Material changes notified 30 days in advance via email/in-app.