Privacy notice

Summary of key points

• What personal information do we process? We may process personal information depending on how you interact with Athena, the choices you make, and the features you use.
• Do we process sensitive personal information? No.
• Do we collect information from third parties? No.
• How do we process your information? To provide, improve, and administer the Services, communicate with you, and for security and fraud prevention.
• When do we share information? In specific situations with specific categories of third parties.
• How do we keep your information safe? Through organisational and technical safeguards, though no system is 100% secure.
• How do you exercise your rights? Email us at [email protected].

Table of contents

1. What information do we collect?
2. How do we process your information?
3. What legal bases do we rely on?
4. When and with whom do we share your information?
5. Do we use cookies and tracking technologies?
6. Do we offer AI-based products?
7. How long do we keep your information?
8. How do we keep your information safe?
9. Do we collect information from minors?
10. What are your privacy rights?
11. Controls for do-not-track features
12. Do other regions have specific privacy rights?
13. Do we make updates to this notice?
14. How can you contact us?
15. How can you review, update, or delete your data?

1. What information do we collect?

Personal information you disclose to us

We collect personal information that you voluntarily provide when you express an interest in Athena, participate in activities on the Services, or contact us. This may include your name and email address.

All personal information you provide must be true, complete, and accurate.

Information automatically collected

We automatically collect certain information when you visit or use Athena, including your IP address, browser and device characteristics, operating system, language preferences, referring URLs, and information about how and when you use the Services.

We also collect information through cookies and similar technologies — see Section 5 for details.

• Device data. Information about your computer, phone, tablet, or other device used to access Athena.
• Location data. Approximate location information based on your IP address or device settings.

Google API

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

2. How do we process your information?

We process your personal information to:

• Provide, maintain, and improve Athena
• Respond to user inquiries and offer support
• Enable user-to-user communications where applicable
• Prevent fraud and maintain security
• Comply with applicable laws

3. What legal bases do we rely on?

Under the GDPR and UK GDPR, we may rely on:

• Consent. You can withdraw your consent at any time.
• Performance of a contract. Processing necessary to fulfil our obligations to you.
• Legal obligations. Processing required to comply with law.
• Vital interests. Processing necessary to protect vital interests.

4. When and with whom do we share your information?

We may share your data with third-party vendors who perform services on our behalf and require access to such information. We have contracts in place to safeguard your personal information. Categories include data analytics services.

Business transfers. We may share or transfer your information in connection with a merger, sale of assets, financing, or acquisition.

5. Do we use cookies and tracking technologies?

We may use cookies and similar tracking technologies (web beacons, pixels) to gather information when you interact with Athena. These help us maintain security, fix bugs, save preferences, and support core functions.

Google Analytics. We may share your information with Google Analytics to track and analyse use of the Services. To opt out, visit tools.google.com/dlpage/gaoptout.

6. Do we offer AI-based products?

Yes. Athena is an AI-powered knowledge assistant. As part of our Services, we provide AI features designed to help teams find information from their connected knowledge bases. We may use third-party AI service providers including Google Cloud AI to power these features. Your input, queries, and related information may be processed by these providers as described in this notice.

7. How long do we keep your information?

We keep your personal information only as long as necessary for the purposes outlined in this notice, unless a longer retention period is required by law. When we have no ongoing legitimate need to process your information, we will delete or anonymise it.

8. How do we keep your information safe?

We have implemented appropriate technical and organisational security measures to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed 100% secure. Use Athena at your own risk.

9. Do we collect information from minors?

We do not knowingly collect data from or market to children under 18. If we learn that personal information from anyone under 18 has been collected, we will take reasonable measures to promptly delete it. Please contact us at [email protected] if you become aware of this.

10. What are your privacy rights?

Depending on applicable law, you may have the right to request access to, correction of, or erasure of your personal information, restrict or object to our processing, request data portability, and the right not to be subject to automated decision-making.

To exercise these rights, email us at [email protected].

Withdrawing consent. You may withdraw consent at any time by contacting us.

Opting out of marketing. You can unsubscribe at any time via the unsubscribe link in any email we send.

11. Controls for do-not-track features

Most browsers include a Do-Not-Track ("DNT") setting. Because no uniform standard for recognising DNT signals has been finalised, we do not currently respond to DNT browser signals.

12. Do other regions have specific privacy rights?

Republic of South Africa

You have the right to request access to or correction of your personal information. If unsatisfied with how we address a complaint, you can contact the Information Regulator (South Africa) at inforegulator.org.za.

• General enquiries: [email protected]
• POPIA/PAIA complaints: [email protected]

13. Do we make updates to this notice?

Yes. We may update this Privacy Notice from time to time to stay compliant with relevant laws. The updated version will be indicated by a revised date at the top of this page.

14. How can you contact us?

If you have questions or comments about this notice:

15. How can you review, update, or delete your data?

Based on applicable laws, you may have the right to request access to, correction of, or deletion of personal information we hold about you. Email us at [email protected] to submit a request.