Privacy Policy

Last updated 11 June 2026

This Privacy Policy explains how Athlone Studios (“Athlone”, “we”, “us”) collects, uses, and protects personal information when you use Athlone, the AI campaign operating system. We handle personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth), and, where it applies, the EU/UK GDPR.

Information we collect

  • Account & organisation data — your name, email, organisation, role, and members you invite.
  • Content you create — campaigns, briefs, research, copy, images, brand kits, and other material you upload or generate.
  • Usage data — log, device, and interaction data used to operate, secure, and improve the service.
  • Cookies — essential cookies for authentication and session management.

How we use it

  • to provide, maintain, secure, and improve the service;
  • to generate AI outputs you request;
  • to communicate with you about your account and the service; and
  • to meet legal and security obligations.

AI processing and sub-processors

To deliver features, your content may be transmitted to and processed by trusted sub-processors, including AI providers (e.g. OpenAI), cloud hosting and database providers (e.g. Vercel, Supabase), and email delivery (e.g. Resend). Content you submit to AI features is sent to the AI provider to generate the requested output. We do not sell your personal information, and we do not use your content to train our own models.

Where your data is stored

Our primary database and file storage are hosted in Australia (Sydney region). Some sub-processors may process limited data outside Australia; where they do, we take reasonable steps to ensure appropriate protection.

Retention

We keep personal information for as long as your account is active or as needed to provide the service, then delete or de-identify it within a reasonable period, unless a longer period is required by law.

Security

We use technical and organisational measures to protect your information — see our Security page. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your rights

You may request access to, correction of, or deletion of your personal information, and (where the GDPR applies) object to or restrict certain processing or request portability. To exercise these rights, email privacy@athlone.app. You may also complain to the Office of the Australian Information Commissioner (OAIC) if you are unhappy with how we handle a privacy matter.

Children

The service is not intended for anyone under 18, and we do not knowingly collect their personal information.

Changes

We may update this policy and will post the revised version here with a new effective date.

Contact

Privacy questions or requests: privacy@athlone.app, or see our Contact page.