Privacy Policy

1. Who we are

Attribio is a revenue-optimization platform operated by Attribio Tech(“Attribio,” “we,” “us,” or “our”). We help businesses connect their revenue and marketing spend to an executive dashboard and an AI advisor that answers questions with figures it can trace back to your data.

This Privacy Policy explains what information we collect, how we use and share it, and the choices you have. It applies to attribio.com and the Attribio application (together, the “Service”). By using the Service you agree to this Policy.

2. Information we collect

Account information

When you create an account we collect your name, email address, password credentials, and, if you provide them, your company name and role. Authentication is handled through our infrastructure provider (Supabase); we do not store your password in plaintext.

Business data you upload (“Customer Data”)

The core of the Service is the financial and marketing data you import or enter: sales transactions, marketing spend, budgets, expenses, product and channel information, and similar records. You control what you upload. This data is stored under your organization and is only accessible to your organization’s members.

Usage and device data

We automatically collect basic technical information when you use the Service, such as log data, IP address, browser and device type, pages viewed, and timestamps. We use this to operate, secure, and improve the Service.

Communications

If you contact us (for example at hello@attribio.com), we keep your messages and contact details so we can respond and maintain a record of support.

3. How we use your information

We use the information we collect to:

• Provide, maintain, and secure the Service and your account;
• Compute metrics, dashboards, forecasts, and recommendations from your Customer Data;
• Respond to your questions through the AI advisor and answer support requests;
• Diagnose problems, monitor performance, and improve features and reliability;
• Detect, prevent, and address fraud, abuse, and security incidents; and
• Comply with legal obligations and enforce our agreements.

4. AI and your data

Numbers in Attribio are computed by a deterministic metrics engine running in our own database: the AI does not invent figures. When you ask the advisor a question, the relevant results and context are sent to a large-language-model provider (Anthropic) to generate a written answer.

We do not use your Customer Data to train AI or machine-learning models, and our AI provider is contractually prohibited from using data submitted through the Service to train its models. Data sent to the model is used only to generate the response you requested.

5. How we share information

We do not sell your personal information. We share information only in these circumstances:

• Service providers (sub-processors) who process data on our behalf under contract, including our cloud database and hosting provider (Supabase) and our AI provider (Anthropic);
• Within your organization: other members of your Attribio organization can access shared Customer Data and workspaces;
• Legal and safety reasons, when required by law or to protect the rights, safety, and security of Attribio, our users, or the public; and
• Business transfers, such as a merger, acquisition, or sale of assets, in which case we will notify you of any change in how your information is handled.

6. Cookies

We use a small number of cookies that are necessary to run the Service: for example, to keep you signed in and to remember your workspace and preferences. We do not use cookies to sell your data or to build advertising profiles. You can control cookies through your browser settings, though disabling essential cookies may prevent parts of the Service from working.

7. Data retention

We retain your account information and Customer Data for as long as your account is active. After you delete data or close your account, we remove or de-identify it within a reasonable period, except where we must retain certain records to comply with legal obligations, resolve disputes, or enforce our agreements. Backups are cycled out on a rolling basis.

8. Security

We protect your data with encryption in transit, access controls, and database-level row security that isolates each organization’s data. No system is perfectly secure, so we cannot guarantee absolute security, but we work to protect your information and will notify you of a breach affecting your data as required by law.

9. Your rights and choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. You can access and update most of your data directly in the app, or contact us to exercise these rights.

If you are in the European Economic Area or the United Kingdom, our lawful bases for processing are the performance of our contract with you, our legitimate interests in operating and improving the Service, and your consent where applicable. If you are a California resident, we do not sell or “share” your personal information as those terms are defined under California law. We will not discriminate against you for exercising your rights.

10. International data transfers

We are based in the United States, and our providers may process data in the United States and other countries. Where we transfer personal information across borders, we rely on appropriate safeguards, such as standard contractual clauses, as required by applicable law.

11. Children's privacy

Attribio is a business tool and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, please contact us and we will delete it.

12. Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you through the Service or by email. Your continued use of the Service after an update means you accept the revised Policy.

13. Contact us

Questions about this Policy or your data? Email us at hello@attribio.com, or write to Attribio Tech, [mailing address], United States.