Privacy Policy

Athios, Inc. ("Athios"). Questions about this Policy: privacy@athios.ai. Please also review our Terms & Conditions.

This Privacy Policy describes how Athios, Inc. and its affiliates (collectively, “Athios,” “we,” “us,” or “our”) collect, use, share, and protect personal information in connection with athios.ai, the Athios platform, our related websites, applications, and services, and any features or content we offer (collectively, the “Services”). It also explains the choices and rights you have with respect to your personal information.

This Policy applies to information we collect through the Services. It does not apply to information collected by third parties that we do not own or control, including brands, creators, agencies, payment processors, or other websites and services that may be linked to or integrated with the Services. We encourage you to review the privacy policies of those third parties.

Please read this Policy carefully. If you do not agree with it, please do not use the Services. Where required by law, we will obtain your consent before processing your personal information, and you may withdraw that consent at any time as described in Section 6.

1. Who We Are and How to Contact Us

Athios, Inc. is the entity responsible for your personal information (the data “controller” under applicable law). You can reach us at: privacy@athios.ai

If you are located in the European Economic Area (“EEA”) or the United Kingdom (“UK”), see Section 9 for our representative and Data Protection Officer contact details, if applicable.

Our role. For most Services, Athios acts as the business or data “controller” that determines how your personal information is used.

2. Information We Collect

2.1 Information You Provide to Us

We collect information you provide directly, including when you register an account, complete a profile, communicate with us, or use features of the Services. This may include:

• Identity and contact information, such as your name, username, email address, mailing address, phone number, and date of birth or age.
• Profile and professional information, such as your biography, athletic or creator affiliations, social media handles, audience metrics, content categories, and brand or campaign preferences.
• Account credentials, including passwords and, where you use social or third-party login, associated account identifiers.
• Financial and payout information, such as bank account or payment-card details, payment-processor identifiers, and tax identification information needed to process payments and meet tax-reporting obligations.
• Content you submit, such as photos, video, messages, posts, comments, and other materials you upload to or create through the Services.
• Communications, such as the contents of messages, support requests, survey responses, and feedback you send to us.

Athlete directory information. Certain profile information commonly treated as public directory information, such as your name, school or team, sport, position, jersey number, and class year, may be displayed to Brands and, depending on your settings, to the public. You can control much of this information, including setting your profile to private, through your account settings.

2.2 Information We Collect Automatically

When you use the Services, we and our service providers automatically collect certain information, without the need of your approval, including:

• Device and connection information, such as IP address, device type, operating system, browser type, and unique device identifiers.
• Usage information, such as the pages and features you access, links you click, the dates and times of your visits, referring and exit pages, and how you interact with content and campaigns.
• Approximate location, which we may infer from your IP address.
• Cookies and similar technologies, as described in Section 5.

2.3 Information We Receive From Third Parties

We may receive information about you from third parties, including:

• Brands, creators, agencies, and players associations that interact with you through the Services.
• Social media platforms and integrated services when you connect an account or grant us access to your data.
• Google, if you choose to sign in with Google. See Section 2.5 for exactly what we receive.
• Social media content, handles, and audience and engagement metrics associated with your channels, including from accounts you connect and from publicly available sources. We use this information to build Creator profiles and to power marketplace search, matching, and recommendations.
• Analytics, advertising, identity-verification, fraud-prevention, and payment-processing partners.

If you connect a third-party account, you authorize us to collect information from that account in accordance with your settings on that platform. You can disconnect a connected account at any time through your account settings.

2.4 Affiliated Service

Wholly owned/controlled by Athios, Inc.

• Social media account connection and audience metrics are facilitated through Talent Pitch Pro, an affiliated platform operated by Athios, Inc. When you connect a social account through Talent Pitch Pro, your social media content, handles, and audience and engagement metrics are shared with the Athios platform in accordance with this Policy.

2.5 Sign in with Google

You can sign in to Athios, or create an Athios account, with your Google account. This section describes the Google user data involved. Athios's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

What we receive. We ask Google for the openid, email, and profile scopes only. When you sign in, Google sends us a signed identity token containing your Google account identifier, your email address and whether Google has verified it, and your name. We use only those items. We do not receive your Google password, contacts, calendar, mail, files, or any other Google data, and we do not call any other Google API.

How we use it.

• To recognize you and sign you in. If a verified Google email matches an Athios account, we link your Google account to it so you can sign in with Google next time. Because Google has already confirmed the address, we treat it as verified.
• To create your account if you do not have one. Your verified email becomes your account email and your name is offered as the starting point for your profile. Creating an account still asks you to accept our Terms of Use and this Policy and to provide your date of birth.

We do not use Google user data for advertising, to build advertising profiles, to train AI or machine-learning models, or for any purpose unrelated to signing in and creating your account.

What we store. We store your Google account identifier and the email address Google gave us, together with the dates you linked and last used the sign-in, and the name and email you keep on your Athios account. We do not store Google access tokens or refresh tokens, and we do not store your Google profile photo.

Who we share it with. We do not sell Google user data or share it with third parties. It is handled only by the service providers described in Section 4 that host and operate the Services, and it may be disclosed where required by law as described in that section.

Retention and deletion. The link between your Athios account and your Google account is kept while your account is open. When you close your account, you can no longer sign in, and the link is permanently removed when the closed account is purged (currently 30 days after closure, see Section 7). You can also revoke Athios's access at any time from your Google Account permissions page, and you can ask us to delete your data by contacting privacy@athios.ai.

3. How We Use Your Information

We use personal information for the following purposes:

• To provide, operate, maintain, and improve the Services, including matching Creators and Brands and facilitating campaigns and brand deals.
• To create and manage your account and verify your identity.
• To process payments, payouts, and related tax reporting.
• To communicate with you, including sending service-related messages, responding to inquiries, and providing customer support.
• To send marketing and promotional communications, where permitted, and to allow you to opt out at any time.
• To personalize your experience and present relevant opportunities, content, and recommendations.
• To monitor, analyze, and understand usage trends and the effectiveness of the Services and campaigns.
• To detect, investigate, and prevent fraud, abuse, security incidents, and other harmful or unlawful activity.
• To comply with legal obligations and enforce our terms and policies.
• For any other purpose disclosed to you at the time we collect the information or with your consent.

Legal bases (EEA/UK). Where the GDPR or UK GDPR applies, we rely on the following legal bases: performance of a contract with you; our legitimate interests (such as operating, securing, and improving the Services), provided those interests are not overridden by your rights; compliance with legal obligations; and your consent, which you may withdraw at any time.

How we use AI and automated tools. We use automated and AI-based tools to operate the content marketplace, including to power search, matching, and recommendations that help Brands discover and evaluate Creators, help with brand integration concepts, content ideas, and to help surface relevant Open Calls and Offers.

• You acknowledge that the Services may use artificial intelligence (“AI”) tools, including but not limited to large language models such as Claude (Anthropic) to power marketplace search, matching, and recommendations and to help Brands discover and evaluate Creators. These tools do not use voice recordings or call transcription, and the provider is contractually prohibited from using your data to train its own models. You understand and consent to the disclosure of information relating to your account and content—including confidential and privileged information—to such AI tools as reasonably necessary to render services, provided that the we shall (i) use only AI tools that, in our judgment, offer appropriate confidentiality, data-security, and non-training protections; and (ii) remain responsible for the supervision and review of any AI-generated work product.
• Matches, rankings, recommendations, and any automated compliance flags are provided to assist your own decisions. They are not advice, not a guarantee of fit, results, eligibility, or compliance, and they may be incomplete or inaccurate. You are responsible for your own decisions and for verifying that any Campaign complies with applicable federal and state laws and any school, league, players association, or governing body’s rules and regulations. Athios may, but is not obligated to, use automated tools to review or flag Content or Campaigns for potential legal and compliance issues.

Data that powers these tools. These tools draw on (i) social media content and audience and engagement metrics associated with Creator channels, including from connected accounts and publicly available sources, and (ii) the descriptions and parameters of Open Calls and Offers. We do not use voice recordings or call transcription in the Services.

Training and third-party AI providers. Training and third-party AI providers. We do not sell your personal information, and we do not use it to train AI models for unrelated third-party purposes. Where we use third-party AI providers to deliver these features, currently Anthropic (Claude), we do so under terms that prohibit the provider from using your data to train its own models.

Human oversight and limitations. Search results, matches, and recommendations are informational and are intended to assist human decision-making. They do not produce legal or similarly significant effects about you without human involvement, and they may be incomplete or inaccurate. If you have questions about our use of automated processing, contact us at: privacy@athios.ai.

4. How We Share Your Information

We do not sell your personal information for money. We may share personal information in the following circumstances:

• With other users of the Services, as needed to facilitate connections, campaigns, and brand deals. For example, a Brand may see Creator profile and audience information, and a Creator may see Brand campaign information. Your username and certain profile information may be visible to other users and, depending on your settings, to the public.
• With service providers and processors who perform services on our behalf, such as hosting, payment processing, analytics, customer support, communications, and security. These parties are permitted to use personal information only to provide services to us and are required to protect it.
• With players associations, agencies, or brand partners where you participate in a program or campaign that involves them, consistent with the purpose for which you provided the information.
• For legal and safety reasons, where we believe disclosure is reasonably necessary to comply with applicable law, legal process, or government request; to enforce our terms; to protect the rights, property, or safety of Athios, our users, or others; or to detect and prevent fraud or security issues.
• In connection with a corporate transaction, such as a merger, acquisition, financing, reorganization, or sale of assets, in which case personal information may be transferred as part of the transaction subject to this Policy.
• With your consent or at your direction, including when you choose to make information public or connect a third-party service.

Service providers and subprocessors. We use vetted service providers (subprocessors) to operate the Services, and we require them to protect personal information and to use it only to provide services to us. These currently include: hosting and object storage (Linode); payments and payouts (Stripe); SMS communications (Twilio); transactional email (Postmark); and AI-powered features (Anthropic). All of these providers process data in the United States. We maintain a current list of subprocessors and will update it as our providers change. Any and all terms and conditions, or privacy policies are available upon your express written request.

Some sharing of identifiers and online activity with analytics and advertising partners may be considered a “sale” or “sharing” of personal information under certain U.S. state privacy laws. You can exercise your choices regarding this activity as described in Section 5 and Section 6.

5. Cookies and Tracking Technologies

We use JSON Web Tokens (JWTs) to authenticate users and maintain sessions. We do not use tracking cookies, advertising pixels, analytics cookies, or similar technologies to monitor your behavior across other websites or services.

Because we do not use non-essential cookies or tracking technologies, no cookie consent banner or preference center is required. If this changes in the future, we will update this Policy and provide appropriate notice.

6. Your Privacy Rights and Choices

6.1 Choices Available to Everyone

• Account information. You can review and update your account and profile information by logging in to the Services.
• Marketing communications. You can opt out of marketing emails by using the unsubscribe link in the message or by contacting us directly at: privacy@athios.ai. We may still send you service-related messages.
• You agree not to initiate any litigation or arbitration regarding “anti-spam” laws, including the Commercial Electronic Mail Act (CEMA) and the Unfair and Deceptive Acts and Practices (UDAP) laws, without first contacting us in writing at, legal@athios.ai, notifying us of the alleged anti-spam violation, and providing us thirty (30) days with an opportunity to investigate and in good faith attempt to resolve the issue.
• Connected accounts. You can disconnect any third-party account you have linked to the Services at any time.

6.2 U.S. State Privacy Rights

Depending on your state of residence (including California, Virginia, Colorado, Connecticut, Utah, Texas, and other states with comprehensive privacy laws), you may have some or all of the following rights, subject to legal limits and exceptions:

• To know and access the categories and specific pieces of personal information we have collected about you, and how we collect, use, and disclose it.
• To correct inaccurate personal information.
• To delete personal information we have collected from you.
• To obtain a portable copy of your personal information.
• To opt out of the “sale” or “sharing” of personal information and of targeted advertising.
• To limit the use and disclosure of sensitive personal information.
• To not receive discriminatory treatment for exercising your rights.

Categories of personal information. In the preceding twelve months, we have collected the categories of personal information described in the table below. We collect this information from the sources, and use and disclose it for the purposes, described throughout this Policy.

California “Shine the Light.” California residents may request information about our disclosure of personal information to third parties for their direct marketing purposes. We do not share personal information with third parties for their own direct marketing without your consent.

How to exercise your rights. You or an authorized agent may submit a request by emailing: privacy@athios.ai. We will verify your request using the information associated with your account before responding, and we will not require you to create an account to make a request. If we deny your request, you may appeal by replying to our response, and we will inform you of the outcome of your appeal as required by law.

6.3 EEA and UK Rights

The Services are currently available to users in the United States only. If you access the Services from outside the United States, you do so at your own risk and your personal information will be transferred to and processed in the United States.

7. Data Retention

We retain personal information for as long as necessary to provide the Services, maintain your account, comply with our legal and tax obligations, resolve disputes, enforce our agreements, and for other legitimate business purposes. When personal information is no longer needed, we will delete or de-identify it, or securely store and isolate it from further use, in accordance with applicable law.

As general guidance, and subject to legal exceptions: we retain account and profile information for the life of your account and for up to 24 months after account closure; transaction, payout, and tax records for the period required by law, typically up to 7 years; marketing preferences until you opt out; and support communications for up to 24 months; and any linked Google or other sign-in account, which is removed when a closed account is purged, as described in Section 2.5. Specific periods may vary based on legal requirements and legitimate business needs.

8. Data Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, and disclosure. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential. If we become aware of a security incident affecting your personal information, we will notify you and applicable authorities as required by law.

Payment-card information is processed by PCI-DSS-compliant payment processors. We do not store full payment-card numbers on our own systems.

9. International Data Transfers

Athios is based in the United States, and we and our service providers process personal information in the United States. The Services are not directed to users in the European Economic Area or the United Kingdom.

10. Children’s Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you are under 18, you may use the Services only with the involvement and consent of a parent or legal guardian and only as permitted by applicable law. If we learn that we have collected personal information from a child under 13 without verifiable parental or legal guardian consent, we will delete it. If you believe a child has provided us with personal information, please contact us at: privacy@athios.ai.

To help enforce this requirement, we ask all users to confirm at registration that they are 13 years of age or older. At registration, all users must confirm that they are 13 years of age or older, and if they are under the age of 18, must have a parent or legal guardian review these Terms, and verify their age and relationship with proof of a valid State Identification Card, valid State Driver’s License, or valid U.S. Passport.

Parental consent and guardian-managed accounts. Where a Creator is a minor, a parent, legal guardian, or authorized representative may be required to provide verifiable consent and may create and manage an account on the athlete’s behalf. The adult who manages the account is responsible for the account, for the information provided, and for ensuring that the Creator’s participation complies with applicable federal and state law and any school, league, governing body, or association rules. We process information in these accounts in accordance with this Policy and applicable federal and state law.

11. Education Records (FERPA)

Athios does not collect or maintain education records protected by the Family Educational Rights and Privacy Act (“FERPA”), such as grades, transcripts, class schedules, student financial records, or disciplinary records. Where we provide Services to or on behalf of an educational institution, we handle any institution-provided data in accordance with our agreement with that institution and applicable law, including FERPA, if and where it applies.

12. Third-Party Links and Services

The Services may contain links to, or integrations with, third-party websites, platforms, and services that we do not control. This Policy does not apply to those third parties, and we are not responsible for their content or privacy practices. We encourage you to review their privacy policies before providing them with personal information.

13. Changes to This Policy

We may update this Policy from time to time. When we make material changes, we will update the “Last Updated” date above and, where required by law, provide additional notice or obtain your consent. Your continued use of the Services after the effective date of an updated Policy constitutes your acceptance of the changes, to the extent permitted by law.

14. How to Contact Us

If you have questions, comments, or requests regarding this Policy or our privacy practices, please contact us at:

Athios, Inc. privacy@athios.ai