Privacy policy

Last updated: 7 October 2026

Ataleye is a conversation management and lead tracking tool for sales teams. This policy explains what data we process, for what purpose, and what rights you have.

What data we process

• From platform users (our customers and their teams): name, email address, encrypted password, role, and access logs (date, IP address and device) for security purposes.
• From people who write to connected accounts: Instagram username and public name, the content of the messages they send to our customer's account, and any data they voluntarily provide in that conversation (for example an email address or a phone number). We do not access any further profile information or their contacts.
• From people who receive our product news emails: whether you open the email. It is detected with an invisible one pixel image and looked at in aggregate, never person by person, on the basis of our legitimate interest in measuring what works (art. 6.1.f GDPR). Service emails (sign in and account notices) carry no measurement at all.
• From the files you manage in «Files»: the files you upload from Ataleye and their names. They are stored in a Google Drive folder: Ataleye's (with a space limit per customer) or your own, if you choose to connect your Google account. If you connect it, we store the access permission Google gives us in encrypted form and we only operate inside the folder you choose: we show the names, sizes and dates of its files, and we upload, move, rename, download or send them to the trash when you ask us to.

What we use it for

• Showing conversations to the brand and letting them reply from the platform.
• Generating drafts and AI-assisted replies, always under the brand's instructions and judgement.
• Producing aggregate metrics of the sales process (volume, states, conversion).
• Storing the files in your Google Drive folder and showing them to you in «Files».
• Keeping the service secure and preventing abusive use of accounts.

We do not sell personal data, we do not share it for advertising purposes, and we do not use it to train third-party models.

Ataleye's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use your Drive files for advertising or to train artificial intelligence models, and we do not sell or share them.

Automation and artificial intelligence

Some replies are generated with the assistance of artificial intelligence. These replies are sent on behalf of the brand and always within a conversation that the person themselves started. The brand can disable automated assistance at any time and reply manually. No automated decisions with legal effects are made about individuals.

By default, the assistant introduces itself as an automated assistant and acknowledges it if asked, as required by Article 50 of Regulation (EU) 2024/1689 on artificial intelligence (AI Act) and California's B.O.T. Act (SB 1001). The brand can turn that disclosure off in its settings and, if it does, informing people that they are talking to an artificial intelligence becomes its responsibility.

Who we share data with

• Meta Platforms, as the provider of the Instagram messaging channel.
• Google (Google Drive), where the files of «Files» are stored: in Ataleye's account or, if you connect it, in yours.
• Infrastructure providers (hosting and database) and language model providers, who act as sub-processors and only process the data in order to provide the service to us.
• Resend, which sends our emails: sign in, account notices and product news.

Some providers may be located outside the European Economic Area; in that case transfers are covered by the safeguards provided for in applicable law, such as standard contractual clauses.

How long we keep it

We keep conversations and associated data for as long as the brand maintains an active account and needs them for its commercial relationship. When a brand cancels its account, its data is deleted or anonymised within a maximum of 90 days, unless we are legally required to retain it. Access logs are kept for a limited period for security reasons.

What an email of ours measures

Service emails measure nothing at all. They come from two places: from mail.ataleye.com, the transactional mailbox (sign ups, invitations, passwords), and from avisos.ataleye.com, which carries the alert we send when a conversation needs a person. There is no measurement in either.

Product news emails, when there are any, measure one single thing: whether you open them. The open is detected with an invisible one pixel image and looked at in aggregate, to know whether the subject line works. Links are neither measured nor rewritten: they go straight to their destination, without passing through any redirector of ours or of anyone else, so the address you see when you hover over them is the real one. If you would rather the open was not measured either, your email client can block images and nothing gets recorded.

Your rights

You may request access to, rectification of, erasure of, restriction of, objection to and portability of your data, as well as withdraw your consent where processing is based on it. If your data is processed by a brand that uses Ataleye, you may contact that brand or us and we will pass your request on. Write to team@ataleye.com. You may also lodge a complaint with the competent supervisory authority (in Spain, the Agencia Española de Protección de Datos).

How to delete your data

See the data deletion instructions.

If you connected your Google in «Files», press Stop using my Google: we delete our copy of the permission and tell Google to stop honouring it. Your files are not touched and stay in your Drive. You can also remove the access yourself at myaccount.google.com/permissions.

Contact

For any question relating to this policy: team@ataleye.com.