1. Overview
Atla Hub Tech ("AtlaHub," "we," "our," or "us") is committed to protecting the privacy and security of the personal data we process. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you visit our website, create an account, or use the AtlaHub platform and related services (collectively, the "Service").
If you are a business customer using AtlaHub to manage communications with your own end customers, note that AtlaHub acts as a data processor on your behalf for your customers' data, and you remain the data controller responsible for that data.
By using the Service, you acknowledge that you have read and understood this Privacy Policy.
2. Data We Collect
2.1 Account & Identity Data
- Name, email address, phone number, and job title provided during registration
- Company name, billing address, and VAT/tax identification number
- Password (stored in hashed, salted form — never in plain text)
2.2 Usage & Platform Data
- Feature usage patterns, page views, and session activity within the platform
- API request logs (endpoint, timestamp, response code, volume)
- Conversation metadata (timestamps, channel source, agent assignment, resolution status)
- Device information, browser type, operating system, and IP address
2.3 Communications Data
When you use AtlaHub's omnichannel inbox, the content of customer messages received via connected channels (WhatsApp, Facebook Messenger, Instagram Direct, TikTok) is processed and stored within our platform to enable you to manage and respond to those communications. This content is Customer Data controlled by you; we process it solely on your instructions.
2.4 Payment Data
Full payment card details are never stored on AtlaHub's servers — they are handled directly by our PCI-compliant payment processor. We only retain the last four digits of your card, card type, and billing address for reference.
2.5 Data Collected Automatically
We use cookies, pixel tags, and similar technologies to automatically collect certain information when you access our website or Service. See Section 5 (Cookies & Tracking) for full details.
3. How We Use Your Data
- Service Delivery: To create and manage your account, provide platform access, process transactions, and deliver support.
- Platform Improvement: To analyze usage patterns, identify bugs, develop new features, and improve Service quality.
- Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, abuse, and unauthorized access.
- Communications: To send transactional emails (confirmations, invoices, password resets), product updates, and — with your consent — marketing communications.
- Legal Compliance: To comply with applicable laws, regulations, legal processes, and law enforcement requests.
- Analytics & Reporting: To generate aggregated, anonymized insights about usage trends. Such data cannot be used to identify you personally.
4. Legal Basis for Processing (GDPR)
For users in the EEA, UK, or similar jurisdictions, our legal basis for processing personal data is:
- Contract Performance: Processing necessary to perform our contract with you, including providing the Service and processing payments.
- Legitimate Interests: Processing for our legitimate interests such as improving the Service, preventing fraud, and ensuring platform security.
- Legal Obligation: Processing necessary to comply with legal obligations.
- Consent: Where you have given us specific consent — for example, for marketing emails. You may withdraw consent at any time.
6. Third-Party Integrations & Data Flows
6.1 Meta (WhatsApp Business API, Facebook Messenger, Instagram Direct)
When you connect your Meta Business accounts to AtlaHub, you authorize us to access and process messages exchanged via the Meta platform APIs. The following data flows apply:
- Message content, media attachments, timestamps, and sender identifiers are received by AtlaHub and stored in your workspace.
- AtlaHub does not sell or independently use this message data. It is processed solely to power your inbox, automation, and analytics within the platform.
- Your use of these integrations is also subject to Meta's Privacy Policy.
- AtlaHub participates in Meta's official partner programs and adheres to Meta's data handling requirements for API partners.
6.2 TikTok Messaging API
When you connect a TikTok Business account to AtlaHub, we access TikTok Direct Messages through TikTok's official API:
- Message content, sender identifiers, and timestamps are received and stored in your AtlaHub workspace.
- This data is processed solely to deliver the inbox functionality you requested. AtlaHub does not share TikTok conversation data with any third parties beyond those necessary to operate the Service.
- Your use is also subject to TikTok's Privacy Policy.
6.3 Meta Pixel & TikTok Pixel (Marketing Website Only)
On our marketing website (atlahub.tech), we may use the Meta Pixel and TikTok Pixel to measure advertising effectiveness and deliver relevant ads. These pixels may collect:
- Your IP address and browser user agent
- Pages visited and actions taken on our marketing website
- Hashed email address (if provided during sign-up) for ad matching
You can opt out via our Cookie Preference Center or platform-level ad controls. These pixels are not active within the SaaS platform itself — only on our public marketing website.
6.4 Other Service Providers
- Cloud Infrastructure: Cloud hosting providers (e.g., AWS, Google Cloud) for secure data hosting.
- Payment Processing: PCI-compliant processors (e.g., Stripe) for subscription billing.
- Email Delivery: Transactional email providers (e.g., SendGrid) for system notifications.
- Analytics: Analytics platforms (e.g., Google Analytics) for website measurement.
All third-party processors are bound by data processing agreements ensuring compliance with applicable privacy law.
7. How We Share Your Data
AtlaHub does not sell your personal data to any third party. We share data only in these limited circumstances:
- Service Providers: With vetted sub-processors providing infrastructure, payment, and operational services.
- Third-Party Channel APIs: Data exchanged with Meta and TikTok APIs as part of the core integration functionality you explicitly requested.
- Legal Requirements: When required by applicable law, court order, or governmental authority.
- Business Transfers: In connection with a merger or acquisition, provided the acquiring entity agrees to honor this Privacy Policy.
- With Your Consent: For any other purpose with your explicit prior consent.
8. Data Retention
- Account Data: Retained for the duration of your subscription and up to 3 years after account closure for legal and audit purposes.
- Conversation & Message Data: Retained during your subscription. Following termination, available for export for 30 days, then permanently deleted within 90 days.
- Payment Records: Retained for 7 years to comply with financial and tax regulations.
- Usage Logs: Retained for up to 12 months for security and performance analysis.
- Marketing Data: Retained until you withdraw consent or opt out.
9. Data Security
AtlaHub implements industry-standard security measures, including:
- Encryption in Transit: All data transmitted between your clients and our servers is encrypted using TLS 1.2 or higher.
- Encryption at Rest: Sensitive data stores are encrypted at rest using AES-256.
- Access Controls: Role-based access control (RBAC) limits internal access to authorized personnel only.
- Security Audits: Periodic vulnerability assessments and security reviews of our infrastructure.
- Incident Response: We maintain an incident response plan and will notify affected Customers of any personal data breaches within 72 hours (for GDPR-covered breaches).
While we employ robust security practices, no method of electronic storage or transmission is 100% secure. You are responsible for protecting your account credentials.
10. Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal data:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure: Request deletion of your personal data, subject to legal exceptions.
- Right to Restriction: Request that we restrict processing of your data in certain circumstances.
- Right to Data Portability: Receive your data in a structured, machine-readable format.
- Right to Object: Object to processing based on legitimate interests or for direct marketing.
- Rights under CCPA (California Residents): The right to know what personal information is collected; the right to opt out of the sale of personal information (AtlaHub does not sell personal information); and the right to non-discrimination.
To exercise any of these rights, contact us at app.support@atlahub.tech. We will respond within 30 days (or as required by applicable law).
11. International Data Transfers
Your data may be transferred to and processed in countries other than your country of residence. Where we transfer personal data from the EEA, UK, or Switzerland to countries outside these regions, we rely on:
- European Commission Standard Contractual Clauses (SCCs)
- Adequacy decisions made by the European Commission
- Other legally recognized transfer mechanisms
You may request a copy of the relevant transfer safeguards by contacting app.support@atlahub.tech.
12. Children's Privacy
The AtlaHub Service is designed for business use and is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such information, please contact us immediately at app.support@atlahub.tech and we will promptly delete it.
13. Do Not Track Signals
Some browsers include a Do Not Track ("DNT") feature. There is currently no uniform standard for DNT signals. However, we offer opt-out mechanisms for non-essential cookies through our Cookie Preference Center. Please see Section 5 for details.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page
- Send a notification email to registered account holders
- Display a prominent banner on the Service
Your continued use of the Service after the effective date constitutes your acceptance of the revised policy.
15. Contact Us
If you have any questions about this Privacy Policy or our privacy practices, please contact us:
- Email: app.support@atlahub.tech
- Company: Atla Hub Tech
- Website: atlahub.tech
If you are in the EEA or UK and believe your data protection rights have been violated, you have the right to lodge a complaint with your local supervisory authority (e.g., the ICO in the UK).
We aim to respond to all privacy-related inquiries within 30 days.