Privacy Policy
Effective July 27, 2026. This policy explains what we collect, why we collect it, who processes it, and the choices available to you.
1. Who We Are
ATIYO is operated by StoicForge LLC, operating as ATIYO ("ATIYO", "we", "us", or "our"). We provide the creative-strategy platform available at atiyo.io. Our privacy contact is hello@atiyo.io, and our mailing address is 556 Edenwylde Drive, Stittsville, Ontario K2S 2K5, Canada.
2. Data We Collect
Depending on how you interact with ATIYO, we collect:
- Account and contact information — your name, email address, mobile phone number, password hash, account status, and workspace memberships;
- Consent and subscription records — the policy and disclosure versions shown to you, your choices, timestamps, selected plan, price, currency, trial deadline, cancellation status, and related audit records;
- Workspace content — creative briefs, hook copy, notes, learnings, file references, and any other data you choose to enter into ATIYO;
- Usage and technical information — pages visited, features used, timestamps, IP-derived network information, and basic device/browser information used for security, reliability, analytics, and diagnosing errors;
- Billing information — Airwallex processes your card and payment data. ATIYO receives payment-method status, customer and subscription references, invoice state, and billing dates, but does not receive or store your full card number or card security code;
- Communications — support requests, demo-booking details, email engagement, and SMS messages or replies when those channels are used.
3. How We Use Your Data
We use the data we collect to:
- Provide, maintain, and improve the ATIYO platform;
- Authenticate your account and enforce workspace permissions;
- Qualify and deliver ATIYO's founder-assisted trial onboarding;
- Set up, process, administer, and enforce subscriptions and payments;
- Send service communications such as invite links, billing notices, booked-demo updates, and important account notices;
- Send onboarding, trial, product, or promotional SMS only when you have made the separate SMS opt-in choice, except where a message is otherwise permitted by law;
- Diagnose bugs and monitor service health;
- Measure acquisition and product usage;
- Comply with legal obligations.
We do not use your workspace content to train machine-learning models or improve AI products without your explicit consent.
4. Phone Numbers and SMS Choices
A mobile number is required for new owner-created trial accounts so ATIYO can provide founder-assisted onboarding and account/service communication. Providing a number does not by itself authorize promotional text messages. The SMS checkbox is separate, optional, and unchecked by default.
If you opt in, message frequency varies and message and data rates may apply. Reply STOP to withdraw SMS consent or HELP for help. You may also contact hello@atiyo.io. Withdrawing SMS consent does not cancel your ATIYO subscription or prevent you from using the service. See our SMS Terms.
5. We Do Not Sell Your Data
We will never sell, rent, or trade your personal data or workspace content to third parties for advertising or marketing purposes. Full stop.
6. Service Providers and Third Parties
To operate and market the service we work with the following categories of third parties:
- Hosting and infrastructure providers — used to store and serve the application, database, backups, and static assets;
- Airwallex — our hosted checkout and payment processor, which handles payment-card data under its own terms and privacy policy;
- Email and communications providers — used to deliver account, lifecycle, support, demo, and, when enabled, SMS communications;
- Advertising and analytics providers — when enabled, Meta and TikTok pixels measure visits and conversion events on our public marketing and signup pages.
- Product analytics provider — Microsoft Clarity helps us understand navigation, clicks, scrolling, and usability through analytics and session replay. Input fields are masked, and ATIYO marks the authenticated workspace for full content masking.
These providers may process information in Canada, the United States, or other jurisdictions where they or their subprocessors operate. Information in another country may be subject to that country's laws. Their processing is subject to the agreements and privacy terms applicable to those services.
7. Data Retention
We retain account data and workspace content while your account or workspace is active and afterward only for as long as reasonably needed to operate the service, honor deletion and suppression choices, resolve disputes, or meet legal obligations. Backup copies may remain until the relevant backup cycle expires. Billing records and legal acceptance records may be retained for up to seven years where reasonably required for tax, accounting, dispute, fraud-prevention, or legal purposes. SMS consent and suppression records are retained while we rely on them and for a reasonable compliance period afterward.
8. Your Choices and Privacy Rights
Depending on where you live, you may have the right to:
- Access a copy of the data we hold about you;
- Request correction of inaccurate data;
- Withdraw a consent choice, including SMS marketing consent;
- Request deletion of personal information, subject to legal exceptions;
- Export your workspace content in a machine-readable format where available;
- Complain to the appropriate privacy regulator.
To exercise a right or ask a privacy question, email hello@atiyo.io. We may need to verify your identity before acting on a request.
9. Security
We use reasonable safeguards including encrypted connections (TLS) and row-level security at the database layer. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security but we take reasonable precautions.
10. Cookies and Analytics
ATIYO uses a session cookie to keep you logged in and a CSRF token cookie for security. Google Analytics helps us understand visits, navigation, and product usage, while Google Ads, Meta, and TikTok tags may measure campaign and conversion activity. Microsoft Clarity may use cookies or similar technologies to connect page views and create session analytics. Clarity runs across the public site and product, but the authenticated workspace is explicitly content-masked. In the EEA, United Kingdom, and Switzerland, Google storage defaults to denied unless consent is granted. These tools help us measure campaigns and improve usability; we do not sell your workspace content.
11. Children
ATIYO is a business service for adults and is not directed to children. You must be at least 18 years old to create a paid trial account.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will post the updated version here and update the "Last updated" date. Where required by law, we will provide additional notice or obtain renewed consent.
13. Contact
Privacy questions can be sent to hello@atiyo.io or StoicForge LLC, 556 Edenwylde Drive, Stittsville, Ontario K2S 2K5, Canada.