Privacy Policy
- Summary
- Who we are
- Information we collect
- How we use information
- What is public
- How we share information
- Cookies and similar technologies
- How long we keep information
- How we protect information
- Children and teens
- Your choices and rights
- U.S. state privacy rights
- EU/EEA/UK residents
- International transfers
- Changes to this policy
- Contact
1. Summary
- We collect what you give us to run your account and profile, plus limited technical and security information.
- We do not sell your personal information, do not share it for cross-context behavioral advertising, and do not show ads. We do not use advertising or analytics cookies.
- We never see or store your full card number; payments are handled by Stripe.
- You control your profile's visibility (Public, Semi-private or Private), and you can delete your account and data at any time from the app.
- We remove location (GPS) and camera metadata from JPEG photos you upload.
- The Service is for ages 13 and older, with extra protections for users under 18.
2. Who we are
OVEXO CORPORATION, a Florida corporation doing business as AboutByMe ("AboutByMe," "we," "us") operates aboutbyme.com and the AboutByMe app (the "Service") and is responsible for the personal information described in this Privacy Policy. Capitalized terms not defined here have the meanings in our Terms of Use.
3. Information we collect
Information you provide
| Category | Examples |
|---|---|
| Account information | Full name, email address, password (stored only as a salted cryptographic hash), date of birth, country or region, profile address (username), parent/guardian permission confirmation for users under 18, acceptance of the Terms, and marketing email preference. |
| Profile content | Display name, headline, location you choose to add, biography, sport and position or discipline, level, key numbers, sports profile details (such as team, style, home base and equipment), sports journey, achievements, goals, tags, sections, links, public contact email (if you add one), video links, visibility setting and color theme. |
| Photos | Profile, cover and gallery images you upload. We remove location (GPS), camera and similar metadata from JPEG images when you upload them, keeping only orientation. |
| Articles and videos | Titles, text, original links, cover images and YouTube links you publish, the public title and channel name of those YouTube videos (which we fetch from YouTube), their review status, and view counts. If you use Import, we fetch the web page you link to and copy its title, text and featured image into your draft; the image is stored as one of your uploads. |
| Athletic Résumés | The Athletic Résumés you create (name, contact details, sport, position, measurables, stats, experience, education, skills and other content you add), their visibility settings and private links, and how many times each was viewed and when it was last viewed. |
| Social activity | Connection invitations and connections, your private friend groups, communities you create or join, your role in them, and the posts, comments and reports you submit. |
| Plan and payment information | Your plan, plan status and renewal date, invite codes you redeem, and identifiers from Stripe (customer and subscription IDs). Stripe collects and processes your payment card details directly; we do not receive your full card number. |
| Two-factor authentication | If you turn it on, a secret key for your authenticator app and hashed recovery codes. |
| Communications | Information you include when you contact us (for example, support, privacy or legal requests). |
Information collected automatically
| Category | Examples |
|---|---|
| Session information | An essential session cookie that keeps you logged in. We store only a hash of the session token. |
| Security and activity log | For account security events (such as logins, failed logins, password or two-factor changes): date and time, IP address, approximate country derived from the IP address, and browser/device type (user agent). You can see a summary of this log in the app. |
| Anti-abuse information | Temporary records of sign-up, login and posting attempts keyed to your email address, account or IP address, used to rate-limit abuse. |
| Technical data processed by our providers | When you load our pages, your browser connects to our hosting provider (Cloudflare) and, for fonts and some images on our marketing pages, to Google Fonts and Unsplash, which receive your IP address and standard browser information. If our anti-bot check is enabled, Cloudflare Turnstile processes signals from your browser to tell humans from bots. |
Information from others
Other users may add information about you, for example by inviting you to connect or to a community, mentioning you in a post, or including you in a photo. Stripe tells us whether a payment succeeded. We do not buy personal information from data brokers.
Password safety check
When you create or change a password, we check whether it has appeared in known data breaches using the "Have I Been Pwned" range service. Only the first five characters of a one-way hash of your password are sent; your password itself never leaves our servers and is not stored by that service.
4. How we use information
- To provide the Service: create and secure your account, build, preview and publish your profile, apply your visibility settings, run connections, friend groups and communities, and process plan changes and invite codes.
- To keep the Service safe: authenticate you, detect and prevent fraud, spam, bots, abuse and security incidents, enforce our Terms, apply safety protections for minors, and review reports.
- Automated content review: when you share a post, its title and text (and the YouTube title and channel) are checked by rule-based filters and may be checked by artificial intelligence models run by our hosting provider, Cloudflare (Workers AI), before or shortly after it appears, to detect harmful content, spam and prohibited advertising. Posts may also be reviewed by our moderators. This review decides only whether a post appears or stays published; it is not used to make other decisions about you.
- AI Sports Assistant (ABOUTBYME+): when you ask it to, we send the content of that résumé and of your profile to Cloudflare Workers AI to generate suggestions. It runs only when you press an AI button.
- Statistics: we count views of your profile, posts and résumés, and scans of your profile QR code, to show you simple statistics. We do not identify who viewed them.
- To communicate with you: about your account, security, transactions, changes to our Terms, and support. Product news only if you opted in; you can opt out at any time.
- To improve the Service and fix problems.
- To comply with law and protect rights: respond to lawful requests, handle legal claims, and protect the rights, property and safety of users, the public and AboutByMe.
We do not use your personal information to make decisions that produce legal or similarly significant effects about you based solely on automated processing, and we do not sell it or use it to target advertising.
5. What is public
Once you publish your profile, what others can see depends on your visibility setting:
- Public: anyone on the internet, including search engines, can see your published profile content (name, photos, category, headline, location if added, biography, statistics, sections, links, videos and public contact email if added).
- Semi-private: the public sees only your name, photo and category; your approved connections see your full profile.
- Private: only your approved connections can see your profile.
Posts you share (links, articles, videos and photos) are public: they appear on their own pages and in the Explore portal, with your name, photo and category, and can be indexed by search engines. Résumés are private unless you choose to share them by link or show them on your profile. Published profiles that are not Private, of users 18 and older, may be listed in the Explore directory.
Friends and followers: your number of friends and followers is shown on your profile. If your profile is public, your friends and followers lists can be seen by others (members with a private profile appear without a link). For members under 18 these lists are only visible to their friends.
Friend search: other members can find you by name or username when they search for friends, and see your name, username, profile photo and sport, even if your profile is private. Your full private profile is only shown to people you accept as friends.
Free-plan profiles can be public. Community pages publicly show the community's name and description and the names, photos and categories of members whose profiles are published and not private; community posts and comments are visible only to members. Anything that others can see can be copied or shared by them, and search engines may keep cached copies for some time after you change or delete content.
6. How we share information
We share personal information only as described here:
- With other users, according to your settings and actions (for example, your profile, connection invitations, and your posts in communities).
- With service providers who process data for us under contract and only on our instructions: Cloudflare (hosting, database, image storage, security, anti-bot checks), Stripe (payments and billing) and, if we add email sending, an email delivery provider. Our marketing pages load fonts from Google Fonts and images from Unsplash. Pages with YouTube videos load video thumbnails and the embedded player from YouTube (Google), which receives your IP address and browser information when you view them.
- For legal reasons: if we believe in good faith it is necessary to comply with law, regulation, legal process or a lawful government request; to enforce our Terms; to detect or prevent fraud or security issues; or to protect the rights, property or safety of any person. When legally permitted, we try to notify affected users of requests for their data.
- In a business transfer: in connection with a merger, acquisition, financing, reorganization, bankruptcy or sale of assets, subject to this Privacy Policy.
- With your consent or at your direction.
7. Cookies and similar technologies
We use one essential cookie (__Host-abm_s) to keep you logged in securely. It is strictly necessary and cannot be turned off without breaking login. If our anti-bot check is enabled, Cloudflare Turnstile may use technologies strictly necessary to protect our forms from abuse. Your browser may also store small preferences locally (for example, an invite code you arrived with, during your visit). We do not use advertising, tracking or analytics cookies. Because we do not sell or share personal information for targeted advertising, there is nothing to opt out of; we nevertheless respect Global Privacy Control signals as a request to opt out of any such future practice.
8. How long we keep information
- Account and profile data: for as long as your account exists. When you delete your account in the app, we delete your account, profile, uploaded images, posts, résumés, connections, friend groups, community memberships, the communities you own (including their posts), your posts and comments, and your security log from our live systems.
- Backups: our database provider keeps point-in-time recovery data for up to 30 days, after which deleted data is permanently removed.
- Security log: up to 90 days. Anti-abuse rate-limit records: typically deleted within 24 hours. Sessions: expire after 30 days.
- Reports you submit and records needed for legal compliance, fraud prevention or disputes may be kept as long as reasonably necessary for those purposes.
- Payment records are kept by Stripe according to its obligations; we keep plan and subscription identifiers while your account exists.
9. How we protect information
We use administrative, technical and organizational measures designed to protect personal information, including HTTPS encryption in transit, salted password hashing, optional two-factor authentication with single-use recovery codes, secure session cookies, protections against cross-site attacks, rate limiting, security headers, checks against breached passwords, metadata removal from photos and access controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You help protect your account by using a unique password and turning on two-factor authentication. If we learn of a security breach affecting your personal information, we will notify you and authorities as required by law.
10. Children and teens
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us information, contact [email protected] and we will delete it. Users aged 13–17 may use the Service only with a parent's or guardian's permission. For their safety, their profiles start as semi-private, they cannot join or create communities, and they can connect only with other users under 18. A parent or guardian may contact us to review or delete their teen's information.
11. Your choices and rights
- Access and correct: view and edit your profile and account information in the app at any time.
- Visibility: change who can see your profile, unpublish it, or remove connections at any time.
- Delete: delete your account and data in the app (Account & security → Delete account).
- Copy of your data: request a copy by emailing [email protected] from your account email.
- Marketing: opt out of product news at any time; we will still send essential account and security messages.
We will verify requests by confirming control of your account email, and may ask for more information if needed. You may use an authorized agent where the law allows; we may require proof of authorization. We will not discriminate against you for exercising your rights. We respond within the time required by law (generally 30–45 days).
12. U.S. state privacy rights
Depending on where you live (for example, California, Colorado, Connecticut, Virginia, Texas, Oregon and other states with consumer privacy laws), you may have the right to know what personal information we collect and how we use and disclose it; to access, correct and delete it; to obtain a portable copy; and to opt out of the sale or sharing of personal information, targeted advertising and certain profiling. We do not sell or share personal information and do not engage in targeted advertising or profiling that produces legal or similarly significant effects. In the past 12 months we have collected the categories of information described in Section 3 (identifiers, account and profile information, photos, commercial information about your plan, internet activity limited to security logs, and approximate location derived from IP address), from the sources and for the purposes described above, and disclosed them to the service providers described in Section 6 for business purposes. Date of birth is used to apply age protections. To exercise your rights, email [email protected]. If we deny your request, you may appeal by replying to our decision; if you are unsatisfied with the appeal, you may contact your state attorney general. California residents may also request information about disclosures for direct marketing (we make none).
13. EU/EEA/UK residents
If you are in the European Union, European Economic Area or United Kingdom, OVEXO CORPORATION is the controller of your personal data. Our legal bases are: performance of our contract with you (to provide the Service); legitimate interests (to secure the Service, prevent fraud and abuse, protect minors, and improve the Service, balanced against your rights); consent (for optional product news, which you can withdraw at any time); and legal obligation. You have the rights to access, rectify, erase, restrict and object to processing, to data portability, and to withdraw consent at any time without affecting prior processing. You may lodge a complaint with your local data protection authority. Contact us at [email protected].
14. International transfers
We are based in the United States, and our providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards for international transfers, such as the European Commission's Standard Contractual Clauses or certifications under the EU-U.S. Data Privacy Framework maintained by our providers.
15. Changes to this policy
We may update this Privacy Policy. If changes are material, we will provide notice (for example, by email or in the app) before they take effect. The "last updated" date shows the latest version.
16. Contact
OVEXO CORPORATION, doing business as AboutByMe
5304 SW 138 PL, Miami, FL 33175
Privacy: [email protected] · Support: [email protected]