Atym Privacy Policy

Atym is committed to protecting and respecting your privacy. This Policy (together with any other documents referred to within) establishes the basis on which we may collect, use, disclose, or otherwise process personal data. Please read the following carefully to understand our views and practices regarding your personal data and how we handle it.

This Policy applies to personal data in our possession or under control across all Atym digital properties and services, including:

Atym.io - Our main website providing information about our products and services
Atym Hub - Our management system for deploying, managing, and monitoring Atym containers and connected devices
Atym Docs - Our documentation site providing technical information about our products

This Policy describes how Atym processes your personal data, but it may not address all possible data processing scenarios. Atym may inform you of product or service-specific data collection through supplementary policies or notices provided before collection.

Wherever this Policy mentions "Atym," "we," "us," or "our," it refers to Atym Inc. and its subsidiaries and affiliates which are responsible for processing your personal data in compliance with this Policy.

1. Definitions

1.1. "Personal Data" means any information that can identify you as an individual, whether directly or indirectly. For Atym services, this primarily includes basic information such as your name, email address, phone number, title, and account credentials. We may also collect optional information such as company name and country to better serve you. In some contexts, and with your consent, we may collect additional information to improve our services or fulfill specific requests. Personal data does not include information that has been anonymized or aggregated in a way that can no longer be used to identify you.

1.2. "Data" is synonymous with information in this Policy.

1.3. "Processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, holding, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

2. Cookies and Tracking Technologies

To ensure our websites work correctly, we may at times place a small piece of data known as a cookie on your computer or mobile device. A cookie is a text file stored by a web server on a computer or mobile device. The content of a cookie can be retrieved or read only by the server that creates the cookie. Cookies are unique to the browsers or mobile applications you use and enable websites to store data.

2.1. Cookies

Cookies enable us to provide essential website functionality, analyze site usage, and enhance your browsing experience. We use cookies to remember your preferences, maintain login sessions, understand how you interact with our website, and improve our services accordingly. We do not use cookies for any purpose other than those described in this Policy.

You can manage or delete cookies based on your preferences. You can clear all cookies saved on your computer or mobile device, and you have the right to accept or reject cookies. Most browsers accept cookies automatically, but you can usually modify your browser settings to reject cookies as you see fit. However, you may not be able to fully experience some of our site features if cookies are disabled.

At the time of writing, Atym.io uses approximately 21 cookies that fall into the following categories:

Necessary Cookies: The majority of our cookies (approximately 17) are necessary for the website to function properly.
Analytics Cookies: We use several cookies provided by third-party analytics services to understand how visitors use our website, which helps us improve our services and user experience.
Other Cookies: A few cookies are used for session tracking and site functionality that don't fall into the categories above. These cookies originate from various domains including our own domains and trusted third-party service providers such as analytics platforms, security services, and website hosting infrastructure.

Cookie durations range from session-based (deleted when you close your browser) to persistent cookies that depending on their purpose may remain for up to 1 year unless you delete them from your device.

2.2. Additional Data Tracking Technologies

In addition to cookies, our websites may use other tracking technologies such as web beacons, local storage, and session storage that help us deliver a better user experience.

We use these technologies to:

Ensure site security and detect bots
Maintain user sessions
Remember your preferences
Analyze site performance
Provide a consistent browsing experience

When you first visit one of our websites, you will be presented with a cookie notice that gives you the option to accept or decline non-essential cookies. You can change your cookie preferences at any time through your browser settings.

3. Collection, Processing and Management of Personal Data

3.1. Type and Purpose of Collection

The personal data we collect includes name, email addresses, login credentials, and device information, depending on how you interact with Atym. We also collect personal data from the information provided to us and the content of messages sent to us, such as the query information, or the questions or information to our customer service support. We collect information for the same purposes as stated in "Use and Procession of Personal Data" below.

3.2. Collection

You directly provide us with personal data when you use our websites, products, or services, or interact with us. We may also obtain personal data by recording how you interact with our websites, products, or services.

Examples of how we might collect personal data are as follows:

Via the Atym Website, including but not limited to:

Contact form: https://www.atym.io/contact
Demo requests: https://www.atym.io/request-demo
Newsletter signup (footer banner)

Via the Atym Hub and documentation site, including but not limited to:

Account signup page
Account login and authentication
Device registration and management
Container deployment and management activities
Usage metrics and analytics

Other data collection means

Email correspondence
Phone communications
Business meetings and industry events
Social media
Business contracts

3.3. Storage

We may retain your personal data for no longer than is necessary for the purposes stated in this Policy, unless otherwise extending the retention period is required or permitted by law. The data storage period may vary with scenario, product, and service. The standards Atym uses to determine the retention period are as follows: the time required to retain personal data to fulfill business purposes, including providing products and services; maintaining corresponding transaction and business records; controlling and improving the performance and quality of products and services; ensuring the security of systems, products, and services; handling possible user queries or complaints and locating problems; whether the user agrees to a longer retention period; and whether the laws, contracts, and other equivalencies have special requirements for data retention.

We may maintain your account registration information for as long as you maintain an account with us or for as long as it is necessary for us to provide services to you.

We will cease to retain your personal data, or remove the means by which the data can be associated with you, as soon as it is reasonable to assume that such retention no longer serves the purpose for which the personal data was collected, and is no longer necessary for legal or business purposes.

3.4. Use and Processing of Personal Data

We may collect and process your personal data for any of the following purposes:

Personalize your experience with Atym products and services
Enhance our products and/or services
Perform market analysis
Comply with any applicable laws, regulations, codes of practice, guidelines, or rules, or to assist in law enforcement and investigations
Any incidental business purposes related to or in connection with any of the foregoing

Specifically, we will use your personal data for:

Delivering, activating, or verifying products or services
Fulfilling your requests for changes or providing you with requested information
Providing technical support
Better understanding the usage of our products and services
Contacting you with your consent
Sending you information about products and services that may interest you
Sending you important notices, such as updates to the Atym platform
Ensuring the security of our products, services and customers or users
Any other purpose or legitimate interests described in this Policy or as permitted under applicable law

3.5. Use of Third-Party Service Providers

Atym leverages various technology platforms and services to deliver our products and services efficiently and securely. These include:

Cloud infrastructure providers (such as Microsoft Azure) for hosting our services and storing data
Analytics platforms (such as HubSpot) for developing customer relationships, understanding usage patterns and improving our products and services
Security and monitoring tools to protect your data and ensure system reliability
Communication tools for customer support and engagement

While we carefully select these service providers and maintain control over your personal data, some processing may occur on their platforms under strict contractual agreements that protect your privacy. All such third-party technology providers are required to maintain appropriate security measures and are only permitted to process your data for specified purposes according to our instructions.

Before engaging any third-party provider that will have access to personal data, we evaluate their security practices, data protection policies, and compliance with applicable privacy laws.

For more details about our data sharing practices with these service providers, please refer to Section 5 of this Policy.

3.6. Deletion of Personal Data

You may request that the content that you posted to the Service be removed or anonymized such that your personal information will not be publicly identifiable on the Service by contacting us. We may decline to process your request as consistent with law. Please note that even if we process your request, it does not ensure complete or comprehensive removal of the content or information posted on the Service.

To exercise your right to deletion, please contact us directly using the information provided in Section 10.

3.7. Access and Correction

If you wish to (a) request access to a copy of your personal data that we are retaining or information about the ways in which we use or disclose your personal data; or (b) request a correction or update any of your personal data that we are retaining, you may submit your request via the email address in Section 10 of this Policy.

We will respond to your request as soon as reasonably possible. Should we not be able to respond to your request within thirty (30) days after receiving your request, we will inform you in writing within thirty (30) days of the time by which we will be able to respond to your request. If we are unable to provide you with any personal data or to make a correction requested by you, we will typically inform you of the reasons why we are unable to do so (except where we are not required to do so under applicable law).

4. How We Protect Your Personal Data

The security of your personal data is important to us. In order to protect your personal data, we will take reasonable and necessary administrative and technical measures to protect your personal data and other measures to reduce the risk of loss, misuse, unauthorized access, disclosure and change, including but not limited to SSL encrypted transmission, encrypted storage, physical access control and information access authorization control.

We use cryptographic technologies for data confidentiality, protection mechanisms to prevent attacks, and access control mechanisms to permit only authorized access to your personal data. We also provide Atym employees with training on security and privacy protection to raise their awareness of personal data protection.

However, you should be aware that no method of transmission over the Internet or method of electronic storage is completely secure. While security cannot be guaranteed, we strive to protect the security of your personal data and are constantly reviewing and enhancing our information security measures.

5. Data Sharing and 3rd Parties

We will not sell your personal data to third parties. When applicable, we may share your personal data with the following categories of third parties:

5.1. Service Providers

We may share your personal data with service providers that help us operate our business, such as cloud hosting providers, analytics providers, and payment processors. These service providers are bound by contractual obligations to keep personal data confidential and use it only for the purposes for which we disclose it to them.

5.2. Business Partners

When necessary, we may share your personal data with business partners to provide you with a product or service you have requested. In such cases, your personal data will only be shared with your consent and to the extent necessary to fulfill your request.

5.3. Legal Authorities

We may disclose your personal data when required by law, such as in response to a subpoena, court order, or other legal process, or to establish or exercise our legal rights or defend against legal claims.

6. User Rights and Control

You have certain rights regarding your personal data. To exercise any of these rights, please contact us using the information provided in Section 10 of this Policy. We will respond to your request within 30 days. We may need to verify your identity before fulfilling your request.

6.1. Right to Access

You have the right to request access to the personal data we hold about you.

6.2. Right to Rectification

You have the right to request correction of any inaccurate personal data we hold about you.

6.3. Right to Erasure

You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.

6.4. Right to Restrict Processing

You have the right to request restriction of processing of your personal data in certain circumstances.

6.5. Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format.

6.6. Right to Object

You have the right to object to processing of your personal data in certain circumstances.

7. Consent

Consent to collect personal data shall be voluntarily and explicitly given by the individual on a fully informed basis.

We will generally seek your consent before collecting your personal data in accordance with this Policy and any corresponding supplementary agreement, if any (except where permitted or authorized by applicable law). The consent that you provide for the collection, use and disclosure of your personal data will remain valid until such time it is withdrawn by you in writing.

You may withdraw your consent and request us to stop collecting, using and/or disclosing your personal data for any or all the purposes listed above by submitting your request in writing using the contact information provided in Section 10 of this Policy.

Upon receipt of your written request to withdraw your consent, we will process your request according to the procedures and timeframes outlined in Sections 3.5 and 3.6 of this Policy.

Please note that withdrawing consent does not affect our right to continue to collect, use and disclose personal data where such collection, use and disclosure without consent is permitted or required under applicable laws.

8. Policy Updates

Atym reserves the right to update or change this Policy at any time. Our latest Privacy Policy will always be available on this page, and we may notify you via email if there are any major changes.

9. Additional Rights for EU and California Residents

9.1. EU Residents (GDPR)

If you are a resident of the European Union, you have additional rights under the General Data Protection Regulation (GDPR), including:

The right to lodge a complaint with a supervisory authority
The right not to be subject to automated decision-making, including profiling, which has legal or similarly significant effects on you

We process personal data on the following legal bases:

Consent
Contractual necessity
Legal obligation

For data transfers outside the EU, we implement appropriate safeguards in accordance with GDPR requirements.

9.2. California Residents (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

The right to know what personal information we collect about you
The right to know whether your personal information is sold or disclosed and to whom
The right to opt out of the sale of your personal information
The right to request deletion of your personal information
The right to non-discrimination for exercising your CCPA rights

To exercise your CCPA rights, you may contact us using the information provided in Section 10. You may authorize an agent to make a request on your behalf by providing the agent with written permission and verifying your identity with us.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, you may email us at privacy@atym.io.

Last updated June 26, 2025