Privacy Policy

1. Overview

Atlas Digital Group, LLC (“Protaja,” “we,” “us”) operates the Protaja platform, including our mobile app and website at protaja.com. This Privacy Policy explains how we collect, use, and protect your information and the information of your clients.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, phone number, business name, and billing information.

Client Data

You may upload client contact information (names, phone numbers, last visit dates) to Protaja. This data is processed solely to provide the Service.

Voice & Message Style Data

You provide example messages and tone preferences (text descriptions of your communication style) to configure your assistant. No audio recordings are collected. This content is used only to personalise the AI messages generated for your account.

Usage Data

We collect information about how you use the Service (pages visited, features used, errors encountered) to improve the platform.

3. How We Use Your Information

• To provide and improve the Protaja Service
• To generate personalised SMS messages on your behalf
• To process your subscription and billing
• To send you service-related communications (account updates, receipts, support)
• To comply with legal obligations

We do not sell your information or your clients' information to any third party. We do not use your data for advertising purposes.

4. Your Clients' Data

You are the data controller for your clients' information. Protaja processes this data as a data processor on your behalf. You are responsible for ensuring you have the appropriate consent to upload and message your clients.

We will never contact your clients directly for any purpose other than delivering messages you have approved through the Service.

5. Data Sharing

We share data only with:

• Supabase — our database and authentication provider
• Twilio — SMS delivery infrastructure
• SendGrid — transactional email delivery (account notifications, receipts)
• Anthropic — AI language model provider (message generation only; no client PII is sent to Anthropic)
• Stripe — payment processing
• Railway — cloud infrastructure

All sub-processors are bound by data processing agreements and privacy standards.

6. Data Security

All data is encrypted in transit (TLS 1.2+) and at rest (AES-256). We use Supabase Row-Level Security to ensure you can only access your own data. Access to production systems is restricted and logged.

7. Data Retention

We retain your account and client data for as long as your subscription is active plus 30 days following cancellation. You may request deletion of your data at any time by emailing privacy@protaja.com. Message logs are retained for 12 months for compliance purposes.

8. Your Rights

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your account and data
• Export your data in a portable format
• Opt out of non-essential communications

To exercise these rights, email us at privacy@protaja.com.

California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect about you, request deletion of your personal information, and opt out of any sale of your personal information. We do not sell personal information. To exercise your California privacy rights, email privacy@protaja.com. We will respond within 45 days as required by law.

8a. SMS Messaging & Your Clients

Client phone numbers you upload to Protaja are used solely to deliver SMS messages that you have reviewed and approved. Protaja does not use your clients' phone numbers for our own marketing, and we do not share client contact information with any third party for marketing purposes. You, as the business owner, are responsible for ensuring your clients have consented to receive SMS messages from your business.

9. Cookies

Our website uses essential cookies for authentication and session management. We do not use advertising or tracking cookies. Analytics are privacy-preserving and do not include personally identifiable information.

10. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you via email of material changes. The “last updated” date at the top of this page reflects the most recent revision.

12. Contact

Questions about this Privacy Policy? Email privacy@protaja.com.