Privacy Policy

Atrovia Corporation ("Atrovia," "we," "us," or "our") operates the Atrovia platform, including the Marketing and CRM & Sales products and related services (collectively, the "Services"). This Privacy Policy explains what information we collect, how we use and share it, and the choices you have.

If you have questions, contact us at Support@atrovia.co or Atrovia Corporation, 937 N Amphlett Blvd, San Mateo, CA 94401.

1. Information We Collect

• Account information — name, email address, business name, and login credentials you provide when you create an account.
• Billing information — processed by our payment provider (Stripe); we do not store full card numbers.
• Customer data you enter — contacts, companies, deals, messages, notes, and other CRM records you or your team add to the Services.
• Connected-account data — when you connect a third-party account (Google Workspace, Microsoft 365), we access the data those services provide under the permissions you grant (see Section 3).
• Communications data — SMS and voice-calling metadata (numbers, timestamps, status) processed through our telephony provider (Telnyx) to deliver those features.
• Usage and device data — log data, IP address, browser type, and interactions with the Services, used to operate and secure the platform.

2. How We Use Information

We use information to: provide, maintain, and improve the Services; authenticate users; send transactional messages; provide support; process payments; ensure security and prevent abuse; and comply with legal obligations. We do not sell your personal information.

3. Google User Data

If you connect a Google Workspace account, Atrovia requests the following Google API scopes, and uses the associated data only to provide the features you enable:

• https://www.googleapis.com/auth/gmail.send — to send email messages on your behalf from within the Services (for example, sending a message to a CRM contact). We do not read your inbox with this scope.
• https://www.googleapis.com/auth/calendar — to read and manage calendar events so you can view and schedule appointments from within the Services.

We access Google user data only while your account is connected and only to perform the actions you initiate. We store OAuth tokens in encrypted form and never share Google user data with third parties except as required to provide the Services or by law.

Limited Use disclosure

Atrovia's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we do not use Google user data for advertising, do not allow humans to read it except with your explicit consent, for security/abuse purposes, or as required by law, and do not sell or transfer it.

You can disconnect your Google account at any time from Account Settings → Connectors, which revokes Atrovia's access; you may also revoke access at https://myaccount.google.com/permissions.

4. Microsoft 365 Data

If you connect Microsoft 365, we request Mail.Send, Mail.Read, and Calendars.ReadWrite permissions and use that data solely to send/read email and manage calendar events within the Services, under the same protections described above. You can disconnect at any time.

5. How We Share Information

We share information only with:

• Service providers (sub-processors) who help us operate the Services, under contract — including Stripe (payments), Telnyx (SMS/voice), Resend (transactional email), and our cloud/hosting providers.
• Legal and safety — when required by law or to protect rights, property, or safety.
• Business transfers — in connection with a merger, acquisition, or sale of assets, with notice to you.

We do not sell personal information or share it for cross-context behavioral advertising.

Mobile information. Your mobile information will not be sold or shared with third parties for promotional or marketing purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except with the messaging providers listed above strictly to deliver the messages you asked to receive.

6. Data Retention

We retain your account and customer data for as long as your account is active. After account closure, or upon a verified deletion request, we delete or de-identify your personal data and connected-account data within one (1) year, except where longer retention is required by law. You may request deletion at any time by contacting Support@atrovia.co.

7. Security

We protect data in transit with TLS/HTTPS and encrypt sensitive credentials (including OAuth tokens) at rest. No method of transmission or storage is completely secure, but we work to protect your information using commercially reasonable safeguards.

8. Your Rights

Depending on your location, you may have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. California residents have rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of sale/sharing (we do not sell or share for advertising). To exercise any right, contact Support@atrovia.co.

9. International Users

Atrovia operates in the United States. If you access the Services from outside the U.S., you consent to processing your information in the U.S.

10. Children

The Services are not directed to children under 16, and we do not knowingly collect their personal information.

11. Changes to This Policy

We may update this policy from time to time. We will post the updated version here with a new "Last updated" date and, where appropriate, notify you.

12. Contact Us