1. Introduction
Athenous (“we”, “our”, or “the Service”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered marketing platform and related services. By using the Service, you consent to the practices described here.
2. Information We Collect
We may collect:
- Account information: name, email address, password (hashed), and profile details you provide when registering or updating your account.
- Usage and product data: how you use the Service (e.g., tools used, prompts, inputs, and outputs) to provide, improve, and secure the Service.
- Payment information: billing details and transaction history; payment card processing is handled by our payment provider (e.g., Stripe), which has its own privacy practices.
- Technical and device data: IP address, browser type, device information, and log data (e.g., access times, referring URLs) for security and analytics.
- Communications: when you contact support or send us feedback, we keep records of those communications.
- Connected accounts: when you link third-party networks (for example social or advertising platforms), we receive authorization tokens and identifiers needed to publish, read, or sync data on your behalf. You complete sign-in on the provider’s site using OAuth (see Section 5). We do not store your passwords for those third-party accounts.
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and improve the Service.
- Authenticate you and manage your account and subscriptions.
- Process payments and send related communications.
- Send service-related notices (e.g., security alerts, product updates).
- Analyze usage patterns and troubleshoot issues.
- Comply with legal obligations and enforce our terms.
- With your consent or where permitted, send marketing communications (you may opt out at any time).
4. AI and Your Data
When you use AI features (e.g., content generation, insights), we send the inputs you provide to our AI systems (and, where applicable, to third-party AI providers) to generate outputs. We use this data to deliver the Service and may use it in anonymized or aggregated form to improve our models and features. We do not use your content to train third-party models for purposes unrelated to providing the Service, except where you have agreed otherwise or the data is anonymized/aggregated.
5. Third-party accounts and OAuth
When you connect an external channel (for example Meta, LinkedIn, Google, TikTok, or similar), we use OAuth or comparable authorization flows so you can approve access on the provider’s website or app. You choose which permissions to grant; we receive tokens and related identifiers scoped to those permissions so we can publish content, read performance metrics, or sync assets as described in the product. We do not store your social or ad-platform login passwords.
Data we receive from connected accounts depends on what you authorize and may include profile or page identifiers, ad account IDs, campaign or post metadata, and media you choose to attach. You can disconnect a connection in the Service at any time; tokens may expire or be revoked by you or the provider.
Those providers process their own data under their terms and privacy policies. Our Terms of Service govern your use of Athenous.
Google accounts and Google user data
When you connect Google services in Athenous (for example Google Drive, Google Sheets, YouTube, or Google Ads), we access Google user data only after you complete Google’s OAuth consent screen for the scopes you approve. Depending on the product you connect, data we may collect or process can include: OAuth access and refresh tokens and connection metadata; your Google account identifiers as returned by Google; file names, metadata, and content for files or spreadsheets you explicitly select for import or workflows; video uploads and related metadata you submit through our publishing flows; YouTube channel or analytics information needed to show publishing status or performance insights you request; and Google Ads customer, campaign, or asset data needed to publish or manage ads you configure in the Service.
How we use Google user data: We use it only to provide and improve user-facing features of Athenous that you initiate (for example importing creatives, reading sheet data you chose, publishing to YouTube or Google Ads, and showing relevant status or metrics). We do not sell Google user data. We do not use Google user data for targeted advertising, as a data broker, to determine creditworthiness, or for other purposes prohibited by the Google API Services User Data Policy, including the Limited Use requirements for restricted and sensitive scopes.
Sharing and subprocessors: Google user data may be processed by service providers that host or operate the Service under contractual safeguards, as described in Section 6. We do not disclose Google user data to third parties for their independent marketing.
Protection, retention, and deletion: We protect Google user data with the security measures summarized in Section 8. We retain it for as long as needed to provide the connected features and as described in Section 7. You may disconnect a Google integration in the Service at any time; you may also revoke Athenous in your Google Account permissions.
6. Sharing and Disclosure
We may share your information:
- Service providers: with vendors that help us operate the Service (e.g., hosting, analytics, payment processing, AI providers), under contractual obligations to protect your data.
- Legal and safety: when required by law, court order, or government request, or to protect the rights, property, or safety of Athenous, our users, or the public.
- Business transfers: in connection with a merger, sale, or other transfer of assets, subject to the same privacy commitments.
We do not sell your personal information to third parties for their marketing purposes.
7. Data Retention
We retain your information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated data; we will honor such requests except where we must retain data for legal or legitimate operational reasons.
8. Security
We implement technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is 100% secure; we encourage you to use a strong password and keep your credentials confidential.
9. Your Rights and Choices
Depending on your location, you may have the right to:
- Access, correct, or delete your personal information.
- Object to or restrict certain processing.
- Data portability.
- Withdraw consent where processing is consent-based.
- Lodge a complaint with a supervisory authority.
To exercise these rights, contact us at privacy@athenous.io. You can also update your account details and communication preferences in your account settings.
10. Cookies
We use cookies and similar technologies on our website and in our Service for the purposes described below. You can manage your choices at any time via Cookie preferences in the footer. For more detail, see our Cookie Policy.
Cookie categories
- Essential: Required for the site to function (e.g. security, load balancing, remembering your cookie preferences). These cannot be disabled.
- Performance & Analytics (optional): Help us understand how visitors use the site (e.g. Google Analytics, PostHog). We load these only if you click “Accept all” or enable this category under “Customize.” We use IP anonymization where supported. No analytics scripts run before you give consent.
Your choices
When you first visit, we show a cookie banner with three options: Essential only (no analytics), Customize (open a panel to turn Performance & Analytics on or off), or Accept all (allow optional cookies). Your choice is stored in local storage for up to 12 months. You can change it anytime using the Cookie preferences link in the footer. You can also refuse or delete cookies via your browser settings; blocking all cookies may affect how the site works.
Duration
Consent and preference storage last up to 12 months. Analytics cookies may persist for the duration set by the provider (e.g. 12–24 months) when you have enabled them.
11. Governing Law
These Terms are governed by the laws of France. Any disputes arising from or related to these Terms or the Service shall be subject to the exclusive jurisdiction of the courts of France.
12. Children
The Service is not intended for users under 18 (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children; if we learn we have done so, we will delete it promptly.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the “Last updated” date. Material changes may be communicated by email or a notice in the Service. Continued use after changes constitutes acceptance.
14. Contact Us
For privacy-related questions or to exercise your rights, contact us at privacy@athenous.io or through the contact options on our website.