Legal

Privacy Policy

This Privacy Policy explains how Atai collects, uses, stores, protects, and shares information when you use our platform to build and grow your business.

Last Updated: September 21, 2026

Privacy at a Glance

We collect the information needed to power your account, build your applications, process payments, keep you secure, and improve the platform. Here is the short version:

  • We collect information you provide and some information automatically as you use the platform.
  • We use your data to provide the service — not to sell it.
  • We do not sell your personal information. Ever.
  • Your projects, ideas, and business content belong to you.
  • Third-party providers may process some information to deliver platform features.
  • You can access, correct, and delete your data at any time.
  • Read this Policy alongside the Terms of Service for the complete picture.
Table of Contents

1. About This Privacy Policy

This Privacy Policy describes how Atai handles your information when you visit the website, create an account, use the platform, create and build projects, submit prompts or website references, use AI features, purchase a plan or credits, participate in referrals, or contact support.

The information we process depends on how you interact with the platform. Separate notices may apply to specific features where required by law.

By using Atai, you acknowledge that you have read and understood this Privacy Policy. We encourage you to review this Policy together with the Terms of Service regularly.

2. Who We Are

Atai is a product created and operated by ATAI — Advanced Technologies and AI Enterprises. We build AI-powered technology that transforms complex technical workflows into accessible, automated experiences — making it possible for anyone with a great idea to launch and grow a real business.

Our platform is available at atai.ink.

For any privacy-related questions, contact us at support@atai.ink.

3. Information We Collect

Atai processes different categories of information depending on how you use the platform:

Account Information

  • Email address
  • Name
  • Authentication method (password or Google)
  • Google ID (if using Google sign-in)
  • Profile image URL (if using Google)
  • Email verification status
  • Account status and role
  • Referral code

Project Information

  • Project name and description
  • Project mode (website or idea)
  • Source URLs submitted
  • Ideas, prompts, and requirements
  • Project preferences and settings
  • Generated specifications
  • Generated application code
  • Build history

AI & Processing Data

  • Prompts and instructions
  • Website analysis results
  • Generated application plans
  • Conversation history with AI
  • Build summaries and outputs

Billing & Transaction Information

  • Credit balance and history
  • Plan subscription details
  • Payment references and transaction IDs
  • Transaction status and amounts
  • Package or plan selections

Website Analysis Data

  • Submitted URLs
  • Crawled page content (publicly accessible)
  • Page structure and navigation
  • Screenshots
  • Visual patterns and layout information

Technical Information

  • IP address
  • Browser type and version
  • Device type and operating system
  • Session identifiers
  • Access timestamps
  • Error logs

4. Information You Provide

You voluntarily provide information when you:

  • Create an account (email, name, password)
  • Complete your profile
  • Submit prompts, ideas, or business requirements
  • Provide website URLs for analysis and reference
  • Create and configure projects
  • Upload files or assets
  • Submit support requests or feedback
  • Participate in the referral program
  • Purchase a plan or credits

Please do not submit sensitive personal information about third parties into prompts, projects, or uploads unless it is necessary for your project and you are authorized to provide it.

5. Project, Prompt & AI Processing

When you submit ideas, prompts, business requirements, project information, website references, or other development content to Atai, we process that information to:

  • Understand the application or business you want to build
  • Create structured project context and planning
  • Generate project plans and specifications
  • Generate application code, UI, and infrastructure configuration
  • Provide development previews and deployment
  • Support AI-assisted iteration after launch
  • Maintain your project state and history

Your prompts and project inputs may be transmitted to third-party AI infrastructure providers when necessary to provide the requested functionality. The specific providers and processing arrangements may change as the platform evolves.

AI Training

Atai relies on third-party AI providers to process information and power platform features. Whether those providers retain or use submitted data for their own model improvement depends on their terms and configuration. Atai does not independently use your data to train AI models.

6. Website Analysis Data

When you submit a website URL for analysis, Atai uses a third-party website analysis service to crawl and analyze publicly accessible content from that URL. The system extracts page structure, layout, navigation, content patterns, and visual information to create structured development context.

This data is used to:

  • Understand the reference product you want to build from
  • Generate an application plan and specification
  • Inform the build process

Website analysis is performed on publicly accessible content only. You are responsible for ensuring you have the appropriate rights to submit any URL for analysis.

7. Payment & Billing Information

Atai processes payments through Dodo Payments and mobile money providers (MTN and Airtel). Atai does not directly collect or store credit card numbers.

Atai receives the following transaction confirmation data from payment providers:

  • Transaction ID and reference
  • Amount and currency
  • Payment status
  • Timestamps
  • Plan or package selected

This information is used to verify payments, credit your account, resolve disputes, and maintain financial records. Payment provider data is governed by the applicable provider's privacy policy.

8. Referral Information

If you participate in the Atai referral program, we collect and process referral information including your referral code, the accounts registered using your code, and the referral reward credits earned.

We use this information to track referral eligibility, apply earned credits to your account, and prevent fraudulent referral activity.

9. Automatically Collected Information

When you use Atai, we automatically collect certain technical information, including:

  • IP address
  • Browser type and version
  • Device type and operating system
  • Pages visited and actions taken on the platform
  • Session identifiers and access timestamps
  • Error and performance data

This information is used to operate the platform securely, diagnose technical issues, prevent abuse, and improve performance and user experience.

10. Cookies

Atai uses cookies and similar technologies to operate the platform effectively:

Session Cookie

Used for authentication and session management. This cookie is httpOnly, secure, and expires after 30 days. It is essential for keeping you logged in to your account.

Analytics

Atai uses analytics tools (including Vercel Analytics and PostHog) in production to understand how the platform is used. Analytics data helps us improve the experience for every user. This data is collected at an aggregate level and is not used to identify individual users.

Preferences

We store user preferences such as theme selection in localStorage to maintain a consistent experience across sessions.

11. How We Use Your Information

We use the information we collect to:

  • Create and manage your account
  • Provide, operate, and improve the Atai platform
  • Process your project and application build requests
  • Power AI planning, generation, and analysis features
  • Process payments and manage your plan or credits
  • Deliver email notifications and platform communications
  • Provide customer support and respond to enquiries
  • Maintain platform security and prevent fraud and abuse
  • Comply with applicable legal obligations
  • Improve platform performance, reliability, and user experience
  • Analyze usage patterns to guide product development

We do not use your information for advertising to third parties or sell it to data brokers.

12. AI Processing

Atai uses advanced AI systems — including third-party AI providers via OpenRouter — to power application planning, generation, and iteration. When you submit a prompt, idea, or project input, that information is transmitted to the AI processing infrastructure necessary to generate your application.

We select AI providers based on performance, security, and reliability. The specific providers used may change as the platform evolves.

Important note on AI training

Atai does not independently use your project data to train AI models. Third-party AI providers may have their own data retention and usage policies — their practices are governed by their terms, not solely by ours.

13. How Information Is Shared

We share information only in the following circumstances:

  • Service providers. We share necessary information with third-party providers who help us operate the platform (see Section 14).
  • Legal compliance. We may disclose information if required to do so by law, court order, or governmental authority.
  • Safety and security. We may share information to protect the rights, property, or safety of Atai, our users, or the public.
  • Terms enforcement. We may share information to investigate and enforce violations of our Terms of Service.
  • Business transfers. In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of that transaction, subject to applicable privacy protections.

We do not sell your data.

Atai does not sell personal information to third parties for advertising or any other purpose. Your data is used to power your experience on the platform — full stop.

14. Third-Party Service Providers

Atai works with carefully selected third-party providers to deliver a high-quality platform. These providers may process certain information on our behalf:

Hosting & Infrastructure

Vercel (platform hosting and deployment)

Database

MongoDB Atlas (application database)

AI Processing

OpenRouter (AI model routing and generation)

Application Build

Totalum (application generation and infrastructure)

Website Analysis

Firecrawl (website crawling and analysis)

Payment Processing

Dodo Payments, MTN, Airtel (payments)

Email

Resend (transactional email delivery)

Analytics

Vercel Analytics, PostHog (usage analytics)

Authentication

Atai platform auth (session management)

Storage

Cloudflare R2 / S3-compatible (file storage)

These providers are selected for reliability, security, and data protection standards. They are authorized to process information only as necessary to deliver the service. The specific providers used may change over time.

15. Data Security

Atai implements technical and organizational security measures to protect your information, including:

  • Password hashing using industry-standard algorithms
  • Secure, httpOnly session tokens with expiry
  • Rate limiting and abuse prevention controls
  • HTTPS encryption for all data in transit
  • Access controls limiting internal data access to authorized personnel
  • Infrastructure security through our hosting and database providers

No method of data transmission or storage is 100% secure. While we implement strong measures, we cannot guarantee absolute security. If you suspect unauthorized access to your account, contact us immediately at support@atai.ink.

16. Data Retention

Atai retains information for as long as reasonably necessary to:

  • Provide and improve the service
  • Maintain your account and project history
  • Maintain legitimate financial and business records
  • Comply with applicable legal requirements
  • Resolve disputes and prevent abuse
  • Enforce these agreements
  • Session tokens expire after 30 days
  • Account and project data is retained while your account is active
  • On account deletion, personally identifiable information is stripped from your account record
  • Some information (e.g. financial transaction records) may be retained longer where required by law

17. Account & Data Deletion

You can request account deletion at any time through your account settings or by contacting support@atai.ink.

Account deletion:

  • Removes your ability to log in to the platform
  • Strips personally identifiable information from your account record
  • Removes access to your projects and generated applications

Some information may be retained after deletion where required by law, for fraud prevention, security, dispute resolution, or legitimate financial record-keeping obligations. We will always be transparent with you about what we retain and why.

18. Your Privacy Rights

Depending on your location and applicable law, you may have rights including:

  • Access. Request a copy of the personal information we hold about you.
  • Correction. Request correction of inaccurate or incomplete information.
  • Deletion. Request deletion of your personal information, subject to legal retention requirements.
  • Portability. Request a portable copy of your data where technically feasible.
  • Restriction. Request restriction of processing in certain circumstances.
  • Objection. Object to certain processing activities.

To exercise any of these rights, contact us at support@atai.ink. We will respond to all requests in a timely manner in accordance with applicable law. We will never make it difficult for you to exercise your rights.

19. Children's Privacy

Atai is designed for adults and is not directed at children under the age of 16 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children.

If you believe a child has created an account or submitted personal information, please contact us at support@atai.ink and we will take prompt action to remove that information.

20. International Data Processing

Atai operates globally and serves users around the world. Your information may be processed in countries outside your country of residence, including countries that may have different data protection laws.

We take steps to ensure that your information is protected regardless of where it is processed. When we work with third-party providers located in other countries, we rely on appropriate safeguards to protect your data.

By using Atai, you acknowledge that your information may be transferred to and processed in other countries as described in this Privacy Policy.

21. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

  • Update the "Last Updated" date at the top of this page
  • Notify you via email or a platform notification for significant changes

Your continued use of Atai after the updated Policy becomes effective constitutes your acceptance of the changes. We encourage you to review this Policy regularly.

22. Contact Us

If you have any questions about this Privacy Policy, want to exercise your privacy rights, or have a privacy-related concern, we are here to help:

We aim to respond to all privacy enquiries within 5 business days.

Privacy FAQ

What information does Atai collect?
Atai collects account information (name, email, authentication details), project information (ideas, prompts, generated applications), billing information (transaction records via payment providers), technical information (IP address, browser type, device info), and usage data necessary to operate the service.
Does Atai sell my personal information?
No. Atai does not sell personal information to third parties under any circumstances. Information is shared only with service providers necessary to operate the platform.
Who owns my projects and business data?
You do. You retain ownership of the content you submit and the applications you create. Atai processes your project information to provide the service but does not claim ownership of your ideas or project content.
Does Atai store my projects?
Yes. Atai stores project information including your ideas, prompts, website references, generated specifications, application code, and project metadata. This is stored to provide the service and maintain your project history.
Does Atai send my project data to AI providers?
Yes. Atai transmits project inputs (prompts, ideas, website analysis data, and project context) to third-party AI infrastructure providers when necessary to generate applications and provide platform functionality.
Is my data used to train AI models?
Atai relies on third-party AI providers to process information. Whether those providers retain or use submitted data for model improvement depends on their own terms. Atai does not independently use your data to train AI models.
Does Atai collect payment card information?
No. Atai does not directly collect or store card numbers. Payments are processed via secure providers (Dodo Payments, MTN, and Airtel). Atai receives transaction confirmation data (transaction ID, amount, status) but not raw card details.
Can I delete my account and data?
Yes. You can request account deletion through your account settings or by contacting support@atai.ink. Deletion removes your ability to log in and strips personally identifiable information. Some data may be retained where required by law.
Does Atai use cookies?
Yes. Atai uses essential cookies for authentication (session cookies) and security. The session cookie is httpOnly, secure, and expires after 30 days. We also use analytics to understand how the platform is used.
Is my information shared with third parties?
Atai shares information only with service providers necessary to operate the platform, including hosting, database, AI processing, website analysis, email, payment, and analytics providers. We do not sell your data.
How long does Atai keep my information?
Atai retains information for as long as reasonably necessary to provide the service, maintain legitimate business records, comply with legal requirements, and prevent abuse. Session tokens expire after 30 days.
How do I contact Atai about privacy?
Email support@atai.ink, call or WhatsApp +256761819885, or visit our YouTube channel at https://www.youtube.com/@mirrorsiteai.