Privacy Policy
Last updated: April 24, 2026
1. Who we are
Settlyou ("we", "us", "our") is a relocation guide platform for professional and college athletes. We operate at settlyou.com and provide AI-generated relocation guides to sports clubs, universities, and athletes. Our contact email is hello@settlyou.com.
2. What information we collect
We collect information in the following ways:
- ·Athlete profile data — name, nationality, age, sport, destination city, family details, housing preferences, dietary needs, and other relocation-related information submitted through our onboarding form. This data is used solely to generate a personalized relocation guide.
- ·Contact information — email address provided by athletes and club administrators during onboarding and account creation.
- ·Account information — email address and role for club portal and admin accounts created by Settlyou.
- ·Usage data — anonymized events such as guide views, form submissions, and PDF prints, used to improve our service. No personally identifiable information is attached to these events.
- ·Contact form submissions — name, organization, and email submitted via our website contact form.
3. How we use your information
We use collected information exclusively to:
- ·Generate personalized AI relocation guides for athletes
- ·Deliver relocation guides to athletes via private link and email
- ·Communicate with clubs and universities about their athletes' relocation status
- ·Improve and maintain the Settlyou platform
- ·Respond to inquiries and support requests
We do not sell, rent, or share your personal data with third parties for marketing purposes. We do not use athlete profile data for any purpose other than generating the relocation guide for which it was submitted.
4. AI processing
Relocation guides are generated using the Anthropic Claude API. Athlete profile data submitted through our forms is sent to Anthropic's API to generate the guide content. Anthropic's data handling is governed by their Privacy Policy. We do not permit Anthropic to use submitted data for model training. Data sent to the API is used solely for the purpose of generating your relocation guide.
5. Data storage and security
All data is stored in Supabase (a PostgreSQL-based database platform) with row-level security policies. Relocation guides are accessible only via unique private links. Club portal and admin accounts are protected by email and password authentication. We use industry-standard encryption (TLS) for all data in transit. While we implement reasonable security measures, no system is completely secure and we cannot guarantee absolute security.
6. Data retention
Athlete profile data and generated relocation guides are retained for the duration of the club or university's active subscription. Upon account termination or written request, we will delete all associated athlete data within 30 days. Contact form submissions are retained for up to 12 months. Usage event data (anonymized) may be retained indefinitely to support platform improvements.
7. Your rights
Depending on your location, you may have rights including:
- ·The right to access the personal data we hold about you
- ·The right to correct inaccurate personal data
- ·The right to request deletion of your personal data
- ·The right to object to or restrict certain processing
- ·The right to data portability
To exercise any of these rights, contact us at hello@settlyou.com.
8. Cookies
Settlyou uses only essential cookies necessary for authentication and session management (via Supabase Auth). We do not use advertising cookies, tracking pixels, or third-party analytics that set persistent cookies. You can disable cookies in your browser settings, though this may affect your ability to log in to the platform.
9. Third-party services
We use the following third-party services to operate Settlyou:
- ·Supabase — database and authentication. Privacy Policy
- ·Anthropic — AI guide generation. Privacy Policy
- ·Vercel — hosting and deployment. Privacy Policy
- ·Resend — transactional email. Privacy Policy
10. Children's privacy
Settlyou is not directed at children under the age of 13. We do not knowingly collect personal data from children. Athlete profile forms may include information about an athlete's children (such as ages for school matching) — this information is used solely for generating the relocation guide and is not stored separately or used for any other purpose.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will notify active club and university accounts of material changes by email. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of Settlyou after changes take effect constitutes acceptance of the revised policy.
12. FERPA (U.S. educational institutions)
When contracted by a U.S. educational institution, Settlyou operates as a "School Official" with a legitimate educational interest under the Family Educational Rights and Privacy Act (FERPA), 34 CFR §99.31(a)(1). We access student education records solely to provide our agreed services — generating relocation guides and collecting required documents on behalf of the institution.
Student data is never disclosed to third parties without the institution's or student's written consent, except as required by law. Institutions remain the data controller and may request access to or deletion of their students' records at any time. See our Compliance page for full details.
13. GDPR (EU/EEA)
For institutions and athletes based in the European Union or EEA, Settlyou acts as a Data Processor under the General Data Protection Regulation (GDPR), processing personal data only on the documented instructions of the institution (the Data Controller). Our legal bases for processing include contractual necessity, legitimate interest, and explicit consent obtained at the point of data collection.
EU/EEA residents have rights of access, rectification, erasure, restriction, portability, and objection. Data transfers to the United States are covered by Standard Contractual Clauses (SCCs). A Data Processing Agreement (DPA) is available upon request for institutions that require it. In the event of a personal data breach, we will notify affected institutions within 72 hours as required by GDPR Article 33.
For GDPR inquiries or to request a DPA, contact hello@settlyou.com. See our Compliance page for full details.
14. Governing law and jurisdiction
Settlyou operates internationally and is committed to complying with applicable data protection laws in the jurisdictions where it serves customers, including U.S. federal and state privacy laws.
For U.S.-based institutions and athletes, this Privacy Policy is interpreted in accordance with applicable U.S. law. California residents have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal data we collect, request deletion of their data, and opt out of any sale of personal information. We do not sell personal information. To exercise your rights, contact us at hello@settlyou.com.
We aim to resolve any privacy-related disputes directly and amicably. Please reach out to us at hello@settlyou.com before initiating any formal proceeding.
15. Contact us
For any privacy-related questions, data requests, or concerns, contact us at: hello@settlyou.com