Legal
Privacy Policy
Effective date: March 14, 2026 · Iroko Labs LLC
Atona is a product of Iroko Labs LLC ("we", "us", or "our"). This Privacy Policy explains how we collect, use, and protect your personal information when you use Atona ("the Service").
By using Atona, you agree to the practices described in this policy.
1. Information we collect
We collect information you provide directly and information generated through your use of the Service:
- Account information: name, email address, phone number
- Google account data: email messages, calendar events, and contacts — only when you explicitly grant access
- Communications: SMS and WhatsApp messages sent and received through the Service
- Voice data: call transcripts and summaries when you use voice features
- Usage data: interactions with the Service, feature usage, and preferences
2. How we use Google user data
Atona's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
When you connect your Google account, Atona may access:
- Gmail (read, send, modify) — to triage your inbox, draft responses, and surface important emails in your daily briefing
- Google Calendar — to schedule, reschedule, and prepare you for meetings
- Google Contacts — to personalize communication and recognize senders
We use this data solely to provide the Atona service to you. Specifically:
- We do not sell your Google data to any third party
- We do not use your Google data for advertising purposes
- We do not allow humans to read your email content except when required for security investigation, to comply with applicable law, or with your explicit permission
- We do not use your Google data to train AI or machine learning models
- We only transfer your Google data to others as necessary to provide the Service, subject to confidentiality obligations
3. How we use your information
We use the information we collect to:
- Provide, operate, and improve the Atona service
- Generate your daily briefings and handle tasks on your behalf
- Send you service-related notifications and updates
- Respond to your requests and support inquiries
- Ensure the security and integrity of the Service
4. Data retention
We retain your data for as long as your account is active. Email content and message logs are retained for 30 days. Interaction history is retained for 90 days. You may request deletion of your data at any time by contacting us at privacy@atona.ai.
When you disconnect your Google account, we delete all cached Google data within 30 days.
5. Data sharing
We do not sell your personal information. We may share data with:
- Service providers: infrastructure and AI providers who process data on our behalf under strict confidentiality agreements (e.g. AWS, Anthropic)
- Legal requirements: when required by law, court order, or to protect the rights and safety of our users
6. Security
We implement industry-standard security measures including encryption at rest and in transit, access controls, and regular security reviews. However, no system is completely secure. If you believe your account has been compromised, contact us immediately at security@atona.ai.
7. Your rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Revoke Google account access at any time via your Google Account settings
- Export your data in a portable format
To exercise these rights, contact us at privacy@atona.ai.
8. Children's privacy
Atona is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from minors.
9. Changes to this policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. Your continued use of Atona after changes take effect constitutes acceptance of the updated policy.
10. Contact
If you have questions about this Privacy Policy, contact us at:
Iroko Labs LLC
Atona Privacy Team
privacy@atona.ai