Privacy Policy
Last updated: January 11, 2026
1. Introduction
Athena ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our workflow automation platform ("Service"). By using the Service, you consent to the data practices described in this policy.
2. Information We Collect
Information You Provide
- Account Information: Email address, name, and authentication credentials when you create an account
- Workflow Data: The workflows, triggers, and configurations you create within the Service
- Integration Credentials: API keys and OAuth tokens for third-party services you connect
- Payment Information: Billing details processed through our payment provider
- Communications: Messages you send to us for support or feedback
Information Collected Automatically
- Usage Data: Workflow execution logs, feature usage, and interaction patterns
- Device Information: Browser type, operating system, and device identifiers
- Log Data: IP addresses, access times, and pages viewed
Information from Third Parties
When you connect third-party services (such as Coinbase, Twitter, or market data providers), we may receive information from those services as necessary to provide our Service functionality.
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service
- Execute your workflows and process automation triggers
- Authenticate your identity and manage your account
- Process transactions and send related information
- Send technical notices, updates, security alerts, and support messages
- Respond to your comments, questions, and customer service requests
- Monitor and analyze trends, usage, and activities to improve user experience
- Detect, investigate, and prevent fraudulent transactions and other illegal activities
- Comply with legal obligations
4. Information Sharing
We do not sell your personal information. We may share your information in the following circumstances:
- Service Providers: With third-party vendors who perform services on our behalf (hosting, analytics, payment processing)
- Third-Party Integrations: With services you explicitly connect, such as Coinbase for trading or Twitter for social triggers
- Legal Requirements: When required by law, regulation, or legal process
- Protection of Rights: To protect the rights, property, and safety of Athena, our users, or others
- Business Transfers: In connection with a merger, acquisition, or sale of assets
5. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes encryption of data in transit and at rest, secure credential storage, and regular security assessments. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. Workflow execution logs are retained for 90 days by default. You may request deletion of your data at any time by contacting us.
7. Your Rights and Choices
Access and Portability
You may access, update, or export your personal information through your account settings or by contacting us.
Deletion
You may request deletion of your account and associated data. Some information may be retained as required by law or for legitimate business purposes.
GDPR Rights (EEA Users)
If you are located in the European Economic Area, you have additional rights including the right to access, rectify, erase, restrict processing, object to processing, and data portability. You may also lodge a complaint with your local supervisory authority.
CCPA Rights (California Users)
California residents have the right to know what personal information is collected, request deletion, and opt-out of the sale of personal information (though we do not sell personal information).
8. Cookies and Tracking
We use cookies and similar tracking technologies to collect and track information about your use of the Service. Cookies are small data files stored on your device. We use:
- Essential Cookies: Required for authentication and core functionality
- Analytics Cookies: To understand how users interact with the Service
- Preference Cookies: To remember your settings and preferences
You can instruct your browser to refuse all cookies or indicate when a cookie is being sent. However, some features of the Service may not function properly without cookies.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We take appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy.
10. Children's Privacy
The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete such information.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.
12. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at privacy@athena.app.