Privacy Policy

This Privacy Policy explains how Attoset (“Attoset,” “we,” “us,” or “our”) collects, uses, discloses, and safeguards information when you visit attoset.com or use the Attoset Work Platform, including Atto and any AI agents built on the platform (together, the “Service”). By using the Service, you agree to the collection and use of information as described here.

We collect a few categories of information:

• Account information — name, work email, company, and password when you sign up or join the waitlist.
• Workspace content — the databases, records, forms, workflows, and automations you or your organization create and store in Attoset.
• Usage data — pages visited, features used, and general interaction data collected through cookies and analytics tools.
• AI interactions — prompts and instructions you send to Atto or to custom AI agents, used to generate and execute the requested workflow or response.
• Device information — IP address, browser type, and operating system for security and diagnostics.

• Provide, operate, and maintain the Service.
• Power Atto and AI agent features, including generating suggestions, automations, and executed actions you request.
• Authenticate accounts and enforce workspace permissions.
• Monitor, secure, and improve platform performance and reliability.
• Communicate product updates, security notices, and support responses.
• Comply with legal obligations.

Atto and custom AI agents process the workspace content and instructions needed to complete the tasks you assign them. This processing happens within your organization's permission boundaries — an agent only acts on data your workspace already grants it access to. We do not use customer workspace content to train foundation models shared across other customers.

We do not sell your personal information. We may share data with:

• Infrastructure and sub-processors (hosting, email delivery, analytics) bound by confidentiality and data-processing agreements.
• Other members of your workspace, per the roles and permissions your organization configures.
• Authorities, where required by law or to protect Attoset's rights and users.
• A successor entity in the event of a merger, acquisition, or asset sale.

We apply enterprise-grade safeguards — encryption in transit and at rest, role-based access control, strict permission scoping, and audit trails — to protect data across the platform. No method of transmission or storage is completely secure, so we continually review and improve these controls.

We retain account and workspace data for as long as your account is active or as needed to provide the Service. If you close your account, we delete or anonymize your data within a reasonable period, except where retention is required for legal, security, or legitimate business purposes.

Depending on your location, you may have the right to access, correct, export, or delete your personal information, or to object to or restrict certain processing. To exercise any of these rights, contact us at privacy@attoset.com.

We use essential and analytics cookies to operate the Service and understand how it's used. You can control cookies through your browser settings; disabling them may limit some functionality.

The Service is intended for business use and is not directed at children. We do not knowingly collect personal information from children under 16.

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated “Last updated” date above, and where appropriate, by additional notice.

Questions about this policy or your data? Reach us at privacy@attoset.com or through our contact page.