Last updated: May 30th, 2026
This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.
We use Your Personal Data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.
The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.
For the purposes of this Privacy Policy:
While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. This may include, but is not limited to:
Usage Data is collected automatically when using the Service. Usage Data may include information such as Your Device's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.
When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, unique device identifiers and other diagnostic data.
While using Our Application, in order to provide features of Our Application, We may collect, with Your prior permission:
The Service allows Athletes to connect their own third-party accounts so that We can calculate and display the VTX Index. We only access these accounts after You explicitly connect them and grant permission, and only for the connected Athlete's own account.
Instagram (via the Instagram API with Instagram Login). When an Athlete connects their Instagram Business or Creator account, We collect and process, for that Athlete's own account only:
We use this Instagram data to compute the Social Performance Index, a component of the VTX Index displayed on the Athlete's public profile to help fans and sponsors evaluate and fund the Athlete. To derive the sentiment signal described above, comment text and post captions are sent to a third-party machine-learning inference provider (Hugging Face) for analysis (see "Third-Party Service Providers"). Instagram access tokens are stored in encrypted form and refreshed automatically; they are deleted when You disconnect Your account or request deletion. Our access to and use of Meta Platform Data is further described in the "Meta Platform Data" section below.
Strava. When an Athlete connects their Strava account, We collect activity and performance data for that Athlete's own account, including activity type (such as rides, runs and swims), distance, duration, elevation, intensity metrics and timestamps, together with basic Strava athlete profile information. We use this data to compute the Training Performance Index, a component of the VTX Index. This information is used and disclosed in accordance with this Privacy Policy and with Strava's applicable terms.
We use cookies and similar tracking technologies to operate and analyze the Service. We use Google Tag Manager and associated Google analytics tools to understand how visitors use the Service (for example, pages viewed, events and general usage trends). These technologies may set cookies on Your Device and collect Usage Data as described above. You can instruct Your browser to refuse cookies or to indicate when a cookie is being sent; however, some portions of the Service may not function properly without cookies. Where required by law, We obtain consent before placing non-essential cookies.
The Company may use Personal Data for the following purposes:
We may share Your information in the following situations: with Service Providers who process data on Our behalf; in connection with a business transfer; with Affiliates who agree to honor this Privacy Policy; with business partners; with other users when You interact in public areas of the Service; and with Your consent. We do not sell Your Personal Data.
We rely on the following categories of Service Providers, each of which processes data only as needed to provide its service:
| Provider | Purpose | Data shared |
|---|---|---|
| Meta Platforms / Instagram | Source of connected-account data for the Social Performance Index | Authentication; We receive Instagram profile, media, insights and comment data for connected Athletes |
| Strava | Source of fitness-activity data for the Training Performance Index | Authentication; We receive activity and athlete data for connected Athletes |
| Hugging Face, Inc. | Machine-learning sentiment analysis of Instagram comment text and captions | Instagram comment text and post captions (with URLs and @-mentions removed before sending) |
| Stripe, Inc. | Payment processing and payouts (VTX Wallet) | Payment and payout information; processed under Stripe's Privacy Policy at https://stripe.com/privacy |
| SendGrid (Twilio) | Transactional and marketing email and email engagement analytics | Email address and email engagement data (opens, clicks, delivery status) |
| Amazon Web Services (AWS) | Authentication (Amazon Cognito), cloud hosting and image storage (Amazon S3) | Account credentials, uploaded images and stored application data |
| Google (Tag Manager / Analytics) | Usage analytics | Usage Data and cookie identifiers |
Our collection and use of data obtained through the Instagram and Meta APIs comply with the Meta Platform Terms and Developer Policies. Specifically:
You can stop Our access to a connected third-party account and delete the associated data at any time:
If You are in the European Economic Area or the United Kingdom, You have the right to access, correct, update or request deletion of Your Personal Data; to object to or restrict processing; to data portability; and to withdraw consent at any time where We rely on consent. Where We process Meta Platform Data, We rely on Your consent as the legal basis. To exercise these rights, contact Us at support@vtxathlete.com. You also have the right to lodge a complaint with a supervisory authority.
If You are a California resident, You have the right to know what personal information We collect, use and disclose; to request deletion or correction of Your personal information; and to opt out of the "sale" or "sharing" of personal information as those terms are defined under California law. We do not sell Your personal information. To exercise these rights, contact Us at support@vtxathlete.com. We will not discriminate against You for exercising any of these rights.
The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy, and to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies. Usage Data is generally retained for a shorter period, except when used to strengthen security or improve functionality, or where We are legally obligated to retain it longer. Data obtained from connected third-party accounts is deleted upon disconnection or a valid deletion request, as described above.
Your information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located. This information may be transferred to — and maintained on — computers located outside of Your state, province, country or other governmental jurisdiction where the data protection laws may differ. Your consent to this Privacy Policy followed by Your submission of such information represents Your agreement to that transfer. The Company will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy.
If the Company is involved in a merger, acquisition or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy.
Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).
The Company may disclose Your Personal Data in the good faith belief that such action is necessary to: comply with a legal obligation; protect and defend the rights or property of the Company; prevent or investigate possible wrongdoing in connection with the Service; protect the personal safety of users of the Service or the public; and protect against legal liability.
The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage, is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.
Our Service does not address anyone under the age of 13, and connecting an Instagram account requires You to meet Instagram's minimum age requirements. We do not knowingly collect personally identifiable information from anyone under the age of 13. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us. If We become aware that We have collected Personal Data from anyone under the age of 13 without verification of parental consent, We take steps to remove that information from Our servers. Where a minor between 13 and 17 uses the Service, We process their data only as described in this Policy and, where required, with parental consent.
Our Service may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.
We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We will let You know via email and/or a prominent notice on Our Service prior to the change becoming effective. You are advised to review this Privacy Policy periodically for any changes.
If you have any questions about this Privacy Policy, or to exercise any of Your rights, You can contact us: