Privacy Notice

This Privacy Notice explains how Athreix handles personal data for its website, accounts, support, security, billing integration, and prospect-intelligence Service.

Athreix generally acts as a controller for account, website, security, billing-reference, and support data. For prospect data that a workspace directs us to process, Athreix may act as a processor or service provider and the workspace customer remains responsible for its instructions, notices, lawful basis, and data-subject requests.

• account and profile information such as name, business email, authentication records, organization, roles, and preferences;
• customer instructions, search briefs, filters, saved lists, notes, outreach drafts, and export settings;
• business and professional prospect information from customer input and authorized sources, together with provenance, confidence, and freshness metadata;
• usage, credits, device, security, audit, error, cookie, and support information; and
• Paddle customer, subscription, transaction, price, and status references needed to provide paid plans. Complete payment-card details are handled by Paddle and are not stored by Athreix.

We receive data directly from users and workspace administrators; from use of the Service; from configured providers such as Apify and public business sources that a customer is authorized to use; from security and infrastructure providers; and from Paddle for billing and subscription administration. Source access and downstream use must comply with applicable law and source terms.

We process personal data to:

• create and administer accounts and provide requested features;
• run authorized research instructions, manage credits, and produce customer-directed results;
• authenticate users, prevent abuse, investigate incidents, and keep audit records;
• administer subscriptions, provide support, and communicate about the account;
• improve reliability, accessibility, and service quality; and
• comply with legal obligations and enforce our policies.

Depending on the context and your location, our legal ground may be contract performance, legitimate interests, consent, or legal obligation. Customers must independently establish an appropriate legal basis for prospect data and outreach activities they direct.

We disclose only the data reasonably needed to providers that help us host, secure, authenticate, operate, support, analyze, or bill for the Service. These may include Google Cloud and Firebase, Paddle, Apify, configured AI providers, email providers, and professional advisers. Providers process data under their own terms and applicable data protection obligations.

We may also disclose data to a workspace administrator; at your direction; during a corporate transaction subject to appropriate safeguards; or when reasonably necessary to comply with law, protect rights and safety, investigate abuse, or secure the Service.

Payment information submitted through Paddle Checkout is governed by the Paddle Privacy Notice.

We retain data only for as long as reasonably needed to provide the Service, fulfill customer instructions, maintain security and audit records, resolve disputes, enforce agreements, and meet legal or accounting obligations. Retention depends on the data category, workspace settings, source restrictions, account status, and legal requirements.

When data is no longer required, we delete, anonymize, or securely isolate it. Backup copies may remain for a limited period until overwritten. A workspace may request export or deletion subject to authentication, other users’ rights, fraud prevention, and mandatory retention duties.

Safeguards include encrypted network transport, encryption at rest provided by our cloud infrastructure, additional protection for designated sensitive fields, access controls, validation, rate limiting, audit logging, secure session controls, backups, and incident-response procedures. No system can guarantee absolute security.

Athreix and its providers may process data in countries other than yours. Where required, we use contractual or other recognized safeguards for international transfers, while recognizing that local laws may differ.

We use essential cookies and similar storage for authentication, account security, preferences, and core Service operation. Disabling essential cookies may prevent sign-in or other features from working. If optional analytics or marketing technologies are introduced, we will provide notices and choices required by applicable law.

Depending on your location, you may have rights to access, correct, delete, restrict, object, port, withdraw consent, or appeal certain decisions. You may also request suppression from future prospect workflows and opt out of marketing communications.

Send a request to tech@athreix.com or contact the relevant workspace owner. We may request proportionate information to verify the request and will not ask for unnecessary identity documents by ordinary email. You may also complain to your local data protection authority.

Athreix is not intended for children, and its prospecting tools must not be used to identify or target minors. Customers must not upload or infer sensitive personal data unless a narrowly authorized workflow and all necessary legal and security safeguards apply.

We may update this notice as the Service, providers, or law changes. Material updates will show a new effective date and will be communicated where required. Privacy questions may be sent to tech@athreix.com.