Privacy Notice

Last updated: 21 June 2026

1. Who we are

ATHENA X is operated by pal iosif ("we", "us", the "Seller"). pal iosif is the data controller for personal data processed in connection with the ATHENA X service (the "Service") and is responsible for complying with applicable data protection law.

2. Categories of personal data we collect

• Account data: name, email address, login credentials, language preference.
• Workspace and content data: documents, prompts, projects and other content you submit to the Service.
• Support data: messages, attachments and metadata you send when contacting support.
• Usage and telemetry: pages viewed, features used, error logs, approximate location derived from IP.
• Device data: IP address, browser, operating system, device identifiers.
• Billing data: order history and subscription status (payment card details are handled by Paddle, not by us).

3. Purposes and legal bases

• Provide and operate the Service, create and manage your account — performance of a contract.
• Customer support and service communications — performance of a contract.
• Security, fraud prevention, abuse detection, service integrity — legitimate interests.
• Product improvement, analytics, debugging — legitimate interests.
• Marketing communications where required — consent (you can withdraw it at any time).
• Compliance with legal, tax and accounting obligations — legal obligation.

4. Data sharing

We share personal data only with the following categories of recipients:

• Paddle.com Market Ltd. — our Merchant of Record. Paddle handles checkout, payments, billing, tax compliance, invoicing, subscription management and refunds, and processes related personal and payment data.
• Hosting, database, email and infrastructure subprocessors strictly necessary to run the Service.
• Analytics and error-monitoring providers used to keep the Service stable and usable.
• Professional advisers (legal, accounting) under duties of confidentiality.
• Public authorities where we are legally required to disclose.

We do not sell personal data.

5. International transfers

Where personal data is transferred outside the UK/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. Retention

We keep personal data only for as long as needed for the purposes above. Account and workspace data is retained for the life of your account and deleted or anonymised within a reasonable period after account closure, subject to legal retention obligations (e.g. tax records kept by Paddle as Merchant of Record).

7. Your rights

Subject to applicable law, you have the right to access, rectify, erase, restrict or object to processing of your personal data, to data portability, and to withdraw consent at any time. You also have the right to lodge a complaint with your local supervisory authority. To exercise these rights, contact us at hello@athena-x.app. We aim to respond within one month.

8. Security

We implement appropriate technical and organisational measures — including encryption in transit, access controls, role-based permissions and workspace isolation — to protect personal data against unauthorised access, alteration, disclosure or destruction.

9. Cookies

We use strictly necessary cookies to operate the Service (authentication, language) and limited analytics cookies to understand usage. You can manage cookies through your browser settings.

10. Contact

pal iosif — hello@athena-x.app.