Privacy Policy

Athana (“Athana,” “we,” “us,” or “our”) operates an AI marketing platform that provides an AI chief marketing officer (“Mira”) and AI influencers used to plan, generate, and publish short-form marketing content for social platforms such as TikTok, Instagram Reels, YouTube Shorts, and X. This Privacy Policy applies to our website at www.athana.ai, the Athana web application, and any other digital properties that link to this Policy (collectively, the “Service”).

By using the Service, you acknowledge that your personal information will be handled as described in this Policy. If you do not agree, do not use the Service. Athana is a United States–based business and the Service is operated from the United States.

1.1 Information you provide

• Account & contact data. Your name, email address, profile image, and authentication identifiers when you sign in (we support Google sign-in via our authentication provider; we do not receive or store your Google password).
• Brand & business data. Information you add to your brand knowledge base, including business profile, products, market and competitor research, brand guidelines, tone of voice, and social media strategy, plus any documents, links, or assets you upload.
• Creative inputs (“Inputs”). Prompts, scripts, instructions, reference photos, product images, logos, voices, and other materials you submit to generate content.
• Generated outputs (“Outputs”). The images, videos, slideshows, reactions, ads, memes, captions, and other media generated for you, along with related settings and metadata.
• Payment data. Billing details and transaction history. Card details are collected and processed directly by our payment processor (Stripe); we do not store full card numbers.
• Communications & feedback. Messages you send to support, survey and feedback responses, and your chats with Mira.

1.2 Information collected automatically

• Device & log data, such as IP address, browser and device type, operating system, identifiers, access times, referring pages, and pages or features viewed.
• Usage data, including features used, generations requested, credit consumption, jobs created, and interactions with the Service and our emails.
• Cookies & similar technologies used to keep you signed in, remember preferences, secure the Service, and understand usage. You can control cookies through your browser settings.

1.3 Information from third parties

• Authentication & connected accounts. When you sign in with Google or connect a social account for publishing, we receive basic profile and account information permitted by your settings on that service (see Section 6).
• Publicly available data. To power trend analysis, competitor insights, and brand research, the Service may collect publicly available content and metrics from social platforms (for example, public TikTok posts and engagement data) via third-party data providers.

We use personal information to:

• Provide, operate, and maintain the Service, including generating the content you request and publishing it to your connected accounts;
• Create and manage your account, brands, influencers, credits, and subscriptions;
• Personalize your experience and Mira’s recommendations, daily briefs, and trend insights;
• Process payments, prevent fraud, and enforce usage limits and credit quotas;
• Communicate with you about the Service, including service announcements, security alerts, and support;
• Analyze and improve the Service, develop new features, and ensure security and reliability;
• Send marketing communications (you may opt out at any time); and
• Comply with law, respond to legal requests, and protect the rights, safety, and property of Athana, our users, and the public.

Athana relies on third-party artificial intelligence and media providers to deliver the Service. When you submit Inputs and request generations, your Inputs and the resulting Outputs are transmitted to and processed by these providers to return your results.

3.1 How we use Inputs and Outputs

• To run the Service. We process your Inputs and Outputs to generate, store, display, and publish your content and to provide related features.
• To improve the Service.We may use your Inputs, Outputs, and usage data to maintain, debug, secure, evaluate, and improve Athana’s features, prompts, and workflows, including in de-identified or aggregated form.
• Third-party model providers.Inputs and Outputs you generate are subject to the terms and privacy practices of the underlying model and media providers. Their use of data (including whether they use submitted content to train their own models) is governed by their policies. We select providers and configurations intended to deliver the Service, but we do not control third-party providers’ independent practices.

3.2 AI-generated content

Outputs are produced by generative AI and may be imperfect, inaccurate, or similar to content generated for other users. You are responsible for reviewing Outputs and for your use, publication, and distribution of them, including compliance with platform rules, advertising and disclosure laws, and third-party rights. See our Terms of Service for details on ownership and responsibility for content.

We may share personal information with:

• Service providers that process data on our behalf to operate the Service (see Section 5);
• Social platforms you connect, when you choose to publish or schedule content to them;
• Payment processors to complete transactions;
• Professional advisors (such as lawyers, accountants, and auditors) where necessary;
• Authorities and others when we believe in good faith that disclosure is necessary to comply with law, enforce our terms, or protect rights, safety, and property; and
• Business transferees in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets.

We may also create and share aggregated or de-identified data that cannot reasonably be used to identify you.

We work with trusted third-party vendors that process personal information on our behalf to operate the Service. These include categories such as:

• Cloud hosting and infrastructure providers (application hosting, databases, and authentication);
• Artificial intelligence and media generation providers (including text, image, video, and voice model providers and media storage/CDN);
• Social data and publishing providers (for public social data and for posting or scheduling content to your connected accounts);
• Analytics, communications, and support providers; and
• Payment processing providers, such as Stripe.

Our service providers are authorized to use personal information only as necessary to provide services to us, and the specific providers we use may change over time. If you are a business customer that requires a current list of our sub-processors (for example, under a data processing agreement), contact us at the address in Section 15.

The Service lets you connect third-party accounts (such as TikTok, Instagram, YouTube, and X) so you can publish or schedule content. When you connect an account, we receive authentication tokens and the account information needed to publish on your behalf, subject to the permissions you grant.

You can disconnect a connected account at any time from your settings or by revoking access in the relevant platform. Disconnecting stops future access through the Service but does not delete content already published to that platform. Your use of each connected platform remains governed by that platform’s own terms and privacy policy.

We retain personal information for as long as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. Retention periods vary based on the type of data and the purpose for which it was collected.

You can delete certain content from your account at any time. When you close your account, we will delete or de-identify your personal information within a reasonable period, except where retention is required for legal, security, fraud-prevention, backup, or accounting purposes. De-identified or aggregated data may be retained indefinitely.

• Access & update. You can review and update account and brand information by signing in to the Service.
• Marketing opt-out. You can unsubscribe from marketing emails using the link in those emails; we may still send service-related messages.
• Cookies. Most browsers let you block or delete cookies; some features may not work if you do.
• Delete account. You can request deletion of your account by contacting us at the address in Section 15.

Depending on your state of residence (for example, California, Colorado, Connecticut, Virginia, Utah, Texas, and other states with comprehensive privacy laws), you may have rights to:

• Know, access, and obtain a copy of the personal information we hold about you;
• Correct inaccurate personal information;
• Delete personal information;
• Opt out of “sales” or “sharing” of personal information and certain targeted advertising; and
• Be free from discrimination for exercising your rights.

We do not sell your personal information for money. Depending on how analytics and advertising technologies are configured, some uses of cookies and similar technologies (for example, analytics or advertising pixels) may be considered a “sale” or “sharing” for cross-context behavioral advertising under some state laws. Where that is the case, we will provide a method to opt out and will honor applicable opt-out preference signals (such as Global Privacy Control). To exercise your rights, contact us at the address in Section 15. We will verify your request and may ask for information to confirm your identity. You may use an authorized agent where permitted by law, and you may appeal a decision by replying to our response.

If you are located in the European Economic Area, the United Kingdom, or Switzerland, Athana acts as a controller of your personal information for purposes of operating the Service. Our legal bases for processing include performance of a contract, our legitimate interests (such as securing and improving the Service), compliance with legal obligations, and your consent where required.

Subject to applicable law, you may have rights to access, correct, delete, restrict, or object to processing, and to data portability, and you may withdraw consent or lodge a complaint with your local data protection authority. To exercise these rights, contact us at the address in Section 15.

We use technical and organizational measures designed to protect personal information, including encryption in transit, access controls, and monitoring. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your login credentials confidential.

We are based in the United States and use service providers located in the United States and other countries. If you access the Service from outside the United States, your information will be transferred to and processed in the United States and other locations where privacy laws may differ from those in your jurisdiction. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses for international transfers.

The Service is intended for users who are at least 18 years old and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us personal information, contact us and we will take appropriate steps to delete it.

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date above and, where appropriate, provide additional notice. Your continued use of the Service after the changes take effect means you accept the updated Policy.

If you have questions or requests regarding this Privacy Policy or your personal information, contact us at: