This operational draft is not legal advice or a claim of compliance. Data flows, retention periods, minors’ handling, notices, and user-rights procedures must be validated before beta/public launch.
Draft Privacy Policy
AthleteOrbit is the working product name of AthleteAlign LLC. This draft explains how AthleteOrbit proposes to handle information for athlete, brand, and agent marketplace users.
Information collected
Account identifiers and role; athlete, brand, and agent profile details; social and audience metrics users connect or submit; campaign preferences and budgets; messages; saved profiles and match interactions; verification status and masked/provider references; reports, dispute evidence references, responses and appeals; device/security records; communication preferences; and deletion requests. AthleteOrbit is designed not to store raw government ID images or selfies.
Why it is used
To provide accounts and profiles, filter and explain matches, support messaging, verify stated attributes, prevent abuse, perform human trust reviews, send requested notices, improve reliability, satisfy valid legal obligations, and recover from incidents.
Matching and automated signals
Profile, audience, performance, values, personal-brand, campaign and feasibility data may affect match rankings and confidence. Trust signals may gate recommendations. Automated or AI signals do not by themselves make serious accusations, suspend an account, or produce an irreversible reputation decision.
Sharing and processors
Information may be disclosed to users as directed by profile settings; to infrastructure, database, authentication, email, storage, analytics, identity-verification and AI providers acting for the service; to professional advisers; or when lawfully required. AthleteOrbit does not currently sell personal information. [ATTORNEY REVIEW: state-specific “sale/share” and targeted-advertising definitions, processor contracts, international transfers]
Retention and deletion
Active account data is kept while needed to provide the service. A verified deletion request enters a proposed 14-day cooling-off period. Profiles and ordinary marketplace data should then be deleted; shared messages may be anonymized to preserve the other participant’s record; aggregate analytics should be de-identified. Narrow fraud, security, dispute, audit, backup, and legal-hold records may be isolated and retained temporarily, then deleted on schedule. [ATTORNEY REVIEW: final periods, legal bases, minors, litigation holds, backup deletion, tax/contract records if later added]
Choices and rights
Settings allow communication choices, discoverability and social-metric visibility. Users can report or block another user and request deletion. Access, correction, portability, objection, opt-out and appeal rights will be handled as applicable after identity verification. [INSERT REQUEST EMAIL/FORM, RESPONSE PERIODS, APPEAL PROCESS, AND AUTHORIZED-AGENT PROCEDURE]
Cookies and analytics
The current MVP documentation identifies no non-essential advertising or cross-site analytics. Essential session, security and preference storage may operate without a marketing-consent banner where permitted. A consent manager must be added before enabling non-essential analytics or advertising cookies.
Security and children
Controls include role checks, least-privilege routes, validation, rate limits, audit trails, blocks and recovery planning. No system is perfectly secure. The current MVP is not ready to onboard minors until guardian consent, age assurance, contact restrictions, school/NIL requirements, and privacy notices receive specialist review.
Contact and changes
[INSERT CONTROLLER/LEGAL ENTITY, PRIVACY EMAIL, POSTAL ADDRESS, EFFECTIVE DATE, JURISDICTION-SPECIFIC NOTICES, AND CHANGE-NOTICE PROCESS.]