Effective date: [To be set on publication]
Athako is a business tool for sellers. It is not a consumer product, and it is not directed at children. Athako is intended for users aged 18 and over. When we say “you” we mean the seller (or the seller’s team member) using Athako, acting for their business.
This policy explains what we collect, why we collect it, who we share it with, and what control you have. It applies to the Athako website, the waitlist, and the Athako workspace app. It does not cover the platforms you connect (Amazon, Etsy, Shopify, and others) — their own policies govern your accounts there.
The data controller for your information is [legal entity name] — see section 13 for contact details.
By purchasing or using Athako, you agree to this policy as part of your purchase agreement. If you do not agree, do not use Athako. Accepting this policy is acceptance of these terms. It is not, by itself, GDPR consent: where the law requires your consent (for example, for optional marketing emails or non-essential cookies), we ask for it separately, and you may withdraw it at any time.
Account information. When you sign up or buy, we collect your name, email address, and billing details needed to run your account. Card payments are processed by our payment provider; we do not store your full card number.
Your store data. When you connect a store, you authorize us to read that store’s business data through the platform’s official API: orders, revenue, fees, payouts, inventory, listings, messages, and performance figures. This is your business data, and it is the core of what Athako shows you. Athako reads this data; it does not change your listings, prices, stock, or payouts, except for a message reply you explicitly approve and send.
Files and vendor data you provide. If you upload a file (for example a report export or a spreadsheet), we process that file to show it in your workspace. Data from a vendor export is shown only to you, in your own workspace. It is never pooled into shared statistics.
Bank and accounting data, only if you connect them. If you connect a bank account or an accounting tool, we read balances, deposits, bills, and invoices through that connection, only to show them in your workspace. These connections are made only at your direction, and nothing acts on your accounts without your approval.
Waitlist. If you join the waitlist, we collect only your email address, to tell you when Athako is available.
Usage information. When you use Athako, we automatically collect technical information needed to run and secure the service: device and browser type, IP address, pages visited, features used, and the time of use. We use this to keep the service working, to detect abuse, and to improve it. IP addresses and device identifiers count as personal information where they can identify you, and we treat them that way.
Market data from vendors. We buy keyword and market data from data vendors. That data describes the market in general (for example, estimated search volumes). It is not your personal information, and it is not collected from you.
We use your data to:
We do not use your data to advertise to you on other websites, and we do not sell your personal information to anyone.
Legal basis for each purpose (for users in the EEA, the UK, and Switzerland). Running your workspace, including consolidating your own data, and billing you: necessary to perform our contract with you. Producing anonymized benchmarks and improving Athako: our legitimate interests, which we have balanced against your rights — and benchmarks are anonymous, so they are not personal information at all. Operating and securing the service: legitimate interests and, where applicable, legal obligation. Marketing emails about Athako beyond service notices: only with your consent, which you may withdraw at any time.
Benchmarks are the one place where data from many sellers comes together, so this is the part we are most careful about:
We share your data only in these situations:
We keep the provider list above up to date. If we add or replace a provider that handles your personal information, we will update this policy before the change takes effect.
We do not share your personal information with advertisers, data brokers, or anyone else for their own marketing.
Your store data may include information about your buyers (for example, a buyer’s name on an order). We process that information only as part of your store data, only to show it to you in your own workspace, and only for the purposes in section 3. We never contact your buyers, never use their information for our own marketing, and never share it with other sellers. By connecting a store, you confirm you have the right to let us process that data in this way.
If you are in the EEA, the UK, or Switzerland, we will enter into a data processing agreement with you on request, covering our processing of your buyers’ information on your instructions.
We protect your data with encryption in transit and at rest, access controls limited to what our team needs, and encrypted storage of your platform connection credentials. No system is perfectly secure, and we cannot promise absolute security — but we treat a breach of seller data as a serious incident and will notify affected sellers and, where required, the relevant data protection authority without undue delay.
Whatever the law where you live, you may ask us to:
To exercise any of these, contact us at support@athako.com. We may ask you to verify your identity first, so we do not hand your data to someone else.
If you are in the EEA, the UK, or Switzerland, we will respond to your request without undue delay and within one month, as the law requires (longer only if your request is complex or you make several, in which case we will tell you).
For residents of the European Economic Area, Switzerland, and the United Kingdom. We process your data on the legal bases set out in section 3. You may complain to your local data protection authority if you believe we have handled your data wrongly.
For California residents. You have the rights described above under the California Consumer Privacy Act, including the right to know what we collect and the right to delete it. Because we do not sell personal information, there is no sale for you to opt out of. We will confirm a request within 10 business days and respond within 45 days, as the law requires.
Athako is hosted in the United States. If you use Athako from outside the United States, your data is transferred to and processed in the United States as part of providing the service. For users in the EEA, the UK, and Switzerland, transfers are protected by Standard Contractual Clauses in our agreements with the service providers that host and process data for us.
Athako uses cookies and similar tools only as needed to run the service: keeping you signed in, remembering your preferences, and understanding aggregate usage. We do not use third-party advertising cookies. Non-essential cookies and analytics, if we add them, will only run with your consent, which you can change at any time.
We may update this policy as Athako grows. For material changes, we will tell you by email or in the app before the change takes effect. Continued use after a change means you accept the updated policy.
[Legal entity name]
[Postal address]
Email: support@athako.com