Last updated: October 13, 2026
Privacy Policy
Learn who is responsible for your data, why we use it and how to exercise your rights.
1. Data controller and scope
The data controller for ath.bio is Federico Miranda, CUIT (Argentine tax ID) 20-38889440-8, at Paraguay 4884, Ciudad Autónoma de Buenos Aires, Argentina. Contact: support@ath.bio. This policy covers accounts, profiles, catalogs, forms and browsing on the platform.
2. Data we process
We process registration and authentication data; profile data such as names, biographies, images, videos, birth dates, nationality, sports characteristics, career history, statistics and links; agency and represented-person data; contact requests; and subscription, billing and payment references. Available fields depend on the profile type.
We also process technical and usage information, including identifiers, IP addresses, browsing, interactions, preferences and errors. Data may be provided by you, an agency representing you or an authentication provider when you use that sign-in method.
3. Purposes
We use data to operate the platform, present profiles and catalogs, manage accounts and subscriptions, handle requests, send service communications, measure usage and performance, prevent abuse and meet legal obligations.
Data needed for a function is requested in the relevant form; without it, the function may be unavailable. Optional data helps complete a profile’s presentation. We do not sell personal data or use profiles for third-party advertising. Promotional use on our channels requires specific, prior permission.
4. Publication and agency profiles
Published information can be viewed by profile and catalog visitors, including scouts, agencies and brands, and may appear in search engines. Access is not limited to people receiving a link. Visibility settings determine what information is shown within ath.bio.
An agency may upload data about an athlete it represents. If a profile identifies you, you can exercise your rights even without your own account. Independent athlete accounts are intended for people aged 18 or over; agency-managed profiles may include minors. We do not use profiles of minors in ath.bio promotional posts.
5. Providers and recipients
We use Supabase for databases and authentication; Cloudflare R2 for files; Vercel for hosting; Resend for transactional communications; Cloudflare Turnstile for abuse prevention; and PostHog for analytics. These providers receive data needed for their functions.
Stripe processes payments for the US-dollar option. Futbolmkt & Consulting LLC, as that option’s service provider, receives data needed to manage payment and invoicing. Rebill will process Argentine subscription payments once that option is enabled. We may disclose information to meet a legal obligation or a valid request from a competent authority.
6. Analytics, cookies and similar technologies
We use cookies and similar technologies for authentication, operation and service measurement. PostHog receives browsing events, interactions and errors. In the dashboard, analytics are associated with account identifiers and properties such as name, email, user type and plan; they are not exclusively anonymous.
Session recordings are disabled in the dashboard. On the public site and profiles, browsing recordings with input-field masking may be used to understand usage and identify problems. We do not use advertising cookies. You can manage cookies in your browser; blocking them may affect some functions. For questions or requests about your analytics data, email support@ath.bio.
7. Processing outside Argentina
Our providers’ infrastructure may involve data processing outside Argentina. Data needed for Stripe subscriptions is also disclosed to the US service provider Futbolmkt & Consulting LLC. International transfers must respect applicable legal requirements and safeguards. You can ask about recipients and processing locations by emailing support@ath.bio.
8. Retention and deletion
We retain data as long as needed to provide the service and meet the stated purposes. Some billing, payment, security or complaint records may need to be kept to meet legal obligations or address liabilities.
You can request account deletion through account settings or by emailing support@ath.bio. Account deletion does not by itself equal subscription cancellation. Deletion requests also cover data processed by providers, subject to applicable retention exceptions. We do not promise a single deletion period for every record and backup.
9. Security
We use authentication, access controls and permission restrictions to protect data. No system guarantees absolute security. If you notice an incident or unauthorized access, contact support@ath.bio.
10. Your rights
You can request access to, correction, updating or deletion of your data by emailing support@ath.bio, even without an account. We may request necessary, proportionate information to verify your identity and authority to act. Access requests are handled within 10 calendar days, and correction, updating or deletion requests within 5 business days, under applicable Argentine law. Legal retention exceptions are respected.
You can complain to the Argentine Agency for Access to Public Information (AAIP), the supervisory authority under Law 25,326. Information on rights and complaints is available at https://www.argentina.gob.ar/aaip/datospersonales/derechos.
11. Changes and contact
We will communicate significant changes to this policy by email or a notice on the platform. New purposes requiring permission will be presented before being applied. To exercise your rights or ask privacy questions: support@ath.bio.