Atoly

Privacy Policy

Atoly Privacy Policy

Your privacy is important to us. It is Atoly's policy to respect your privacy and comply with any applicable law and regulation regarding any personal information we may collect about you, including across our website, https://atoly.co, and other sites we own and operate.

Personal information is any information about you which can be used to identify you. This includes information about you as a person (such as name, address, and date of birth), your devices, payment details, and even information about how you use a website or online service.

In the event our site contains links to third-party sites and services, please be aware that those sites and services have their own privacy policies. After following a link to any third-party content, you should read their posted privacy policy for information about how they collect and use personal information. This Privacy Policy does not apply to any of your activities after you leave our site.

This policy is effective as of August 12, 2025
Last updated: August 12, 2025

Information We Collect

Information we collect falls into one of two categories: voluntarily provided information and automatically collected information.

  • Voluntarily provided: Any information you knowingly and actively provide us when using or participating in any of our services and promotions.
  • Automatically collected: Any information automatically sent by your devices in the course of accessing our products and services.

Personal Information

We may ask for personal information — for example, when you subscribe to our newsletter or when you contact us — which may include one or more of the following:

  • Name
  • Email

User-Generated Content

We consider “user-generated content” to be materials (text, image, and/or video content) voluntarily supplied to us by our users for the purpose of publication, processing, or usage on our platform. All user-generated content is associated with the account or email address used to submit the materials.

Please be aware that any content you submit for the purpose of publication will be public after posting (and any subsequent review or vetting process). Once published, it may be accessible to third parties not covered under this Privacy Policy.

Transaction Data

Transaction data refers to data that accumulates over the normal course of operation on our platform. This may include transaction records, stored files, user profiles, analytics data, and other metrics, as well as other types of information created or generated as users interact with our services.

Legitimate Reasons for Processing Your Personal Information

We only collect and use your personal information when we have a legitimate reason for doing so. In such cases, we only collect personal information that is reasonably necessary to provide our services to you.

Collection and Use of Information

We may collect personal information from you when you do any of the following on our website:

  • Register for an account
  • Purchase a subscription
  • Sign up to receive updates from us via email or social media channels
  • Use a mobile device or web browser to access our content
  • Contact us via email, social media, or other similar technologies
  • Mention us on social media

We may collect, hold, use, and disclose information for the following purposes, and personal information will not be further processed in a manner incompatible with these purposes:

  • To provide you with our platform's core features and services
  • To contact and communicate with you
  • To enable you to access and use our website, associated applications, and associated social media platforms
  • For internal record-keeping and administrative purposes
  • To comply with our legal obligations and resolve any disputes
  • To attribute any content (e.g., posts and comments) you submit that we publish on our website

We may combine voluntarily provided and automatically collected personal information with general information or research data we receive from other trusted sources.

Access to Google User Data

If you choose to connect your Google account to Atoly, we may request certain permissions (scopes) via Google’s OAuth 2.0 / OpenID Connect.

Google Sign-In (Authentication)

Scopes requested: openid, email, profile
Data received: Google user ID (sub), email address, display name, and (optionally) profile picture URL.

Purpose: To authenticate you, create or link your Atoly account, and show your basic profile in the app (e.g., name, avatar).
Storage: We store your Google user ID and email to identify your account; we may store your display name and profile picture URL for UI purposes if there was no avatar provided prior to linking your Google account.
No other use: We do not use this information for advertising or sell it to third parties.

Google Calendar (Optional Integration)

Scopes requested (only when you connect Calendar):

  • https://www.googleapis.com/auth/calendar.readonly — to read your list of calendars so you can choose wich calendar to connect to Atoly.
  • https://www.googleapis.com/auth/calendar.events — to create, read, and update booking events in the calendar(s) you select.

Purpose: To list your calendars and keep your bookings in sync with your Google Calendar.
Storage: We may store limited metadata (e.g., calendar IDs, event IDs and timestamps) needed to maintain synchronization. We do not store the full contents of your calendars beyond what is necessary for these features.
No other use: We do not use your calendar data for advertising or sell it to third parties.

Revoking Access

You can revoke Atoly’s access to your Google account at any time from your Google Account permissions page.

Deleting Your Data

You may request deletion of Google-derived data stored by Atoly by contacting support@atoly.co. Upon request, we will permanently remove associated data within a reasonable time frame, subject to any legal obligations to retain certain records.

Security of Your Personal Information

When we collect and process personal information, and while we retain this information, we will protect it using commercially acceptable means to prevent loss, theft, unauthorised access, disclosure, copying, use, or modification.

Although we do our best to protect the personal information you provide to us, please note that no method of electronic transmission or storage is 100% secure.

How Long We Keep Your Personal Information

We keep your personal information only for as long as we need to. This time period may depend on what we are using your information for, in accordance with this Privacy Policy. If your personal information is no longer required for this purpose, we will delete it or make it anonymous.

However, we may retain your personal information if necessary for legal, accounting, reporting, archiving, or research purposes.

Children’s Privacy

We do not aim any of our products or services directly at children under the age of 13 and we do not knowingly collect personal information about children under 13.

Disclosure of Personal Information to Third Parties

We may disclose personal information to:

  • A parent, subsidiary, or affiliate of our company
  • Third-party service providers (e.g., IT services, hosting, payment processing, analytics)
  • Our employees, contractors, and/or related entities
  • Our existing or potential agents or business partners
  • Courts, tribunals, regulatory authorities, and law enforcement officers, as required by law
  • Third parties to collect and process data on our behalf
  • An entity that buys or acquires all or substantially all of our assets and business

Third parties we currently use include:

  • Stripe

International Transfers of Personal Information

The personal information we collect may be stored and/or processed in France or in other countries where we or our partners, affiliates, and third-party providers maintain facilities. We will ensure that any transfer is performed in accordance with applicable data protection laws.

Your Rights and Controlling Your Personal Information

You have the right to:

  • Access, update, or delete the information we hold about you
  • Object to processing of your personal information
  • Request data portability
  • Withdraw consent at any time

To exercise these rights, contact us at support@atoly.co.

Use of Cookies

We use "cookies" to collect information about you and your activity across our site. Please refer to our Cookie Policy for more information.

Business Transfers

If we or our assets are acquired, your personal information may be transferred to the acquiring party. Such transfers will be handled in accordance with this Privacy Policy.

Limits of Our Policy

Our website may link to external sites not operated by us. We are not responsible for the content or privacy practices of those sites.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted here with an updated revision date. Significant changes will be communicated to you directly if required by law.

Contact Us

For any questions or concerns regarding your privacy, you may contact us at:

Philippe from Atoly
Email: support@atoly.co