Privacy Policy

Information we collect

When form collection is enabled and you join the waitlist, we may collect your phone number, email address, mobile operating system, general role or professional identity, primary growth goal, how you first heard about atula, and your communication preferences. If you open the waitlist from your career quiz result, we also receive four of your quiz answers (what you study or studied, your current job, your career goal, and how you use AI today) so atula can pick up from them in your first conversation; your other quiz answers and your result stay in your browser. When you contact support, we may collect your email address, mobile number, and the content of your message.

We may also receive limited technical and source information such as the page or button that opened a form, campaign parameters, browser or device information supplied by our service providers, and submission timestamps.

Live sessions and transcripts

When you use atula's live coaching sessions, we and our providers process the session in real time to generate a written transcript, along with related details such as session date, duration, and participants. We use this to deliver the session, maintain continuity across your coaching, and improve the quality and safety of the service. Live sessions take place over video conferencing, but atula does not record or store video, and does not keep audio recordings — session audio is processed only to power the live coaching and to produce the transcript, and the written transcript and session details are what we retain.

Live sessions may take place over third-party video conferencing services such as Zoom. atula uses Recall.ai to connect to the session and process the live audio stream, and AI and avatar providers to generate atula's responses. The session audio and written transcript may be processed by these providers on our behalf under their own terms.

We ask for your consent before we begin processing and transcribing your sessions, and that consent carries across your future sessions unless you withdraw it. Live sessions are intended for your individual use, and you agree not to share session links with, or admit, other people without our involvement. Participants are notified at the start of the session that atula is present and processing the session. If you invite or admit anyone else, you are responsible for ensuring they are aware of and agree to this. Because live processing and transcription are integral to how live sessions work, declining may mean we cannot provide the live-session experience. You may withdraw consent or request access to or deletion of your session transcripts by contacting us, subject to records we must retain for legal or safety reasons.

Message conversations

When you interact with atula through iMessage or other messaging channels, we collect and process the content of those conversations, along with related details such as timestamps and your mobile number. Message content may be processed by our AI providers to generate atula's responses. We use these conversations to deliver coaching, maintain continuity across your growth journey, and improve the quality and safety of the service.

Connecting your Zoom account

If you choose to connect your own Zoom account, we request only the permissions needed to create and manage the meetings for your scheduled sessions and to read your basic Zoom profile. The Zoom access and refresh tokens we receive are encrypted at rest before they are stored, and are transmitted only over secure (TLS) connections. If you remove or deauthorize atula from your Zoom account, we automatically delete the Zoom tokens we stored for you. For step-by-step instructions on adding, using, and removing the integration, see our Zoom integration guide.

Why we use it

• Manage the waitlist and evaluate early-access readiness.
• Prepare messaging access for invited users and understand demand across mobile platforms.
• Send application, access, service, and support communications.
• Respond to questions and feedback.
• Conduct aggregated or de-identified product research.
• Protect the website and prevent abuse.

For eligible iPhone applicants, we may automatically check whether an early-access place is available, use security signals to reduce automated abuse, and evaluate optional application text for obvious test or meaningless submissions. This check is intentionally conservative. If any check is unavailable or inconclusive, the application remains on the ordinary waitlist for review rather than being discarded.

We do not sell personal information. We do not use waitlist or support submissions to train public or general-purpose AI models.

Service providers and international processing

We use third-party providers including Google Cloud (Firestore, Cloud Run, and related storage) for processing and storage, PostHog US Cloud for limited website analytics, advertising platforms for ad measurement as described below, Cloudflare Turnstile for bot and abuse prevention, Zoom for video conferencing, Recall.ai to connect to live sessions and process the live audio stream, Deepgram for real-time speech-to-text transcription of live sessions, Google Gemini for atula's coaching responses and a narrow waitlist-quality check, an avatar rendering provider for the in-session avatar, and Langfuse for service monitoring. For the waitlist-quality check, we do not intentionally send the phone number or email address to Gemini; we send selected category answers and optional free text after automatically redacting common email addresses, phone numbers, and links. These providers act on our behalf under their own terms. Your information may be transferred to, processed, and stored in the United States or other countries where our service providers operate, which may have different data protection laws than your country of residence. Additional categories of providers may be identified as the service develops.

Cookies and embedded services

We use PostHog for limited website analytics such as page paths, referral domains, UTM campaign parameters, broad browser or device context, and whether visitors view homepage sections or open, advance through, successfully submit, encounter a submission error in, or close waitlist and support flows. Advertising click identifiers are discarded from PostHog. We do not send form fields, contact details, or free-text responses to PostHog, and we do not identify website visitors through PostHog.

We advertise atula on third-party advertising platforms, such as social media networks and AI chat assistants, and use their measurement tools (a website pixel and a server-to-server conversions connection) to measure whether those ads lead people to visit our website, take our career quiz at atula.ai/quiz, and join the waitlist. The pixel sets first-party advertising cookies (including a browser identifier and, after an ad click, an ad-click identifier) and sends the advertising platform the page you visited, your browser and device information, your IP address, and simple events: that you started or finished the quiz (not your answers or results) and, when you join the waitlist, a “Lead” event. For that Lead event, our server also sends the advertising platform your email address and phone number in hashed (SHA-256) form, together with the same cookies, your IP address, your browser’s user agent, and the ad campaign label, so the platform can match the sign-up to an ad. We do not send advertising platforms your quiz answers or results, your goals, role, free-text answers, or any message or session content. Advertising platforms process this information under their own terms and may use it to measure, deliver, and improve ads. We do not sell personal information for money, but this sharing with advertising platforms may count as “sharing” or “targeted advertising” under some U.S. state laws. You can opt out at any time on our Your Privacy Choices page, and we treat a Global Privacy Control or “Do Not Track” signal from your browser as an opt-out: the pixel does not load and no Lead event is sent to advertising platforms.

Automatic interaction capture, session replay, heatmaps, browser error and performance capture, GeoIP enrichment, and browser persistence are disabled. The PostHog SDK does not write cookies, local storage, or session storage and respects supported browser “Do Not Track” signals. Separately, our website uses session storage for campaign parameters, coarse visit attribution, and, if you click through from the quiz result, the four quiz answers described above until you submit or close the tab. Visit attribution records the first and most recent observed acquisition channel, search-engine category, a recognized public landing-page path, and a timestamp within a 30-minute inactivity window; it does not store search queries, full referrer URLs, or a visitor identifier. The coarse channel and landing-page fields may accompany our allowed analytics events and, with their timestamps, a submitted application so we can assess how people find and begin using atula. Visit-attribution collection is skipped when a supported Do Not Track signal is enabled. Session storage normally lasts only for the current browser tab; application records follow the retention practices described in this policy. Cloudflare Turnstile may process limited browser, network, and interaction signals needed to distinguish automated abuse, and other hosting and security providers may use essential technologies needed to deliver and protect the site.

Retention

Waitlist information is retained until it is no longer needed for launch and access management, and no longer than 24 months after our last relevant communication or product launch, whichever is later. Support submissions are normally retained for no longer than 24 months. Session transcripts and related session details are retained for as long as needed to provide and improve your coaching, and you may request deletion as described above. atula does not retain session audio or video recordings. We may retain limited records longer when required for security, legal compliance, or dispute resolution.

Your choices and rights

You may ask to access, correct, or delete your information, or withdraw from the waitlist, by emailing contact@atula.ai. You may opt out of SMS or text-message communications at any time by replying STOP to any message. You may opt out of the sharing of website activity with advertising platforms on our Your Privacy Choices page or by enabling Global Privacy Control in your browser. Rights vary by location, and we will respond in accordance with applicable law.

Age requirement

The website, waitlist, and support forms are intended for people aged 18 or older. We do not knowingly collect personal information from children.

Security and changes

We use reasonable safeguards designed to protect the information we collect, including encryption in transit (TLS) and encryption at rest for sensitive credentials such as connected-account tokens. No online service can guarantee absolute security. We may update this policy as atula develops. Material changes will be reflected by the updated date above.

Contact

Questions or privacy requests can be sent to Curioverse Inc. at contact@atula.ai or by mail to Curioverse Inc., 8 The Green, STE A, Dover, DE 19901, United States.