How Atona keeps your data private.
Sensitive mail in your inbox is kept away from AI. What it remembers ages out. And you can see every action it takes, and delete your account at any time.
In this guide: how sensitive mail is recognised and kept away from AI, how memory ages out, what you control, and what Atona will never do.
What it does
Privacy isn't a feature — it's the foundation. Atona recognizes sensitive information before any AI sees it, ages routine memory out on a schedule, isolates every user's data, and gives you full visibility and control over the rest.
How Atona protects you
Sensitive mail stays out of AI
In your connected inbox, mail from banks, tax offices, insurers, healthcare providers and law firms, or with subjects like statements, tax forms and one-time codes, is recognised by its sender and subject and skipped before the AI that reads and drafts sees it. When a body looks like it holds personal identifiers, a short excerpt is checked by a classification model first. Mail people send to your employee’s own address, and a business inbox a specialist runs, are read for the work.
Memory ages out on a schedule
Raw interaction notes age out on a schedule. What stays is the relationship context you’d expect an assistant to keep. What it remembers from conversations is deleted after 90 days, and standing preferences last until you change them.
Your data is yours alone
Every user has their own private, encrypted space. Atona never mixes data between users. Ask for a copy at [email protected], or delete your account from the iOS app.
Nothing is used to train AI
Your messages, calendar, contacts, and memory are never used to train an AI model — yours, ours, or anyone else's.
You're always in control
Replies from your own inbox wait for your approval by default. Switch outreach to approval too, cancel any plan, or turn off sending from your inbox, whenever you like.
Honest about what's happening
Every action Atona takes shows up in your morning brief and your activity log. Nothing happens silently.
What you control
Sending from your inbox
Drafts for your approval by default; let routine replies go on their own, or turn sending off.
Quiet hours
Set windows where Atona won’t reach you. It waits until you’re back.
Outreach approval
Have outreach from its own address wait for you, for every plan or just one.
Disconnect anything
Unlink an account and Atona stops reading it. Reconnect whenever you want.
Get a copy
Ask [email protected] for a copy of what Atona holds for you.
Delete your data
Close your account and everything goes with it. No questions asked.
What Atona will never do
- Read mail in your inbox from banks, insurers, healthcare providers or law firms with AI.
- Share any data between users. Ever.
- Use your data to train an AI model.
- Pay for anything without your approval at checkout.
- Act on a sensitive message without your explicit instruction.
- Hide what it's doing. Every action is logged and visible.
Common questions
Who at Atona can read my data?
Your mail, calls and memory are processed automatically to do the work you ask for. Your data is encrypted, scoped to your account, and never shared with other users. If you apply for access, the Atona team reads the answers you give in your application.
What if Atona sends something wrong?
Every action is in your record with the reason it made that call, and you’re copied on the outreach it sends from its own address. Ask it to follow up with a correction. If you’d rather see every message first, switch outreach to approval.
Does the recipient know they're talking to an AI?
When it writes from its own address, its emails are signed as your AI assistant. On calls it says it’s an AI and never denies it. Replies you approve from your own inbox go out as you.
Are voice calls recorded?
Calls Atona places or answers are transcribed and summarized so you have a record of what was said. Transcripts live in your private space, age out on the same schedule as the rest of your memory, and are deletable anytime. When the law requires disclosure, Atona discloses that the call is being recorded.
Can someone impersonate me through Atona?
No. Atona only takes instructions from you — verified through your account and the channels you've connected. It will never act on instructions buried in an inbound email, text, or call telling it to send money, share a password, or contact someone on your behalf. Social engineering against the assistant is rejected by design.
What about people I email — do they need to consent to AI?
Every message Atona sends carries a clear signature identifying your assistant. Recipients can opt out at any time: replying "stop", asking to talk to you directly, or telling Atona to leave them alone all pause it for that contact and escalate to you. Opt-outs are honored permanently.
What if law enforcement asks for my data?
We require valid legal process — a subpoena, court order, or warrant — for any data request. We'll notify you of the request unless we're legally prohibited from doing so. And the most sensitive categories (banking, medical, legal, identity) are never stored in the first place, by design — meaning there's nothing for us to produce.
What counts as sensitive?
Banking, tax, medical, legal, government, and personal identifiers — social security numbers, account numbers, dates of birth, health information, credentials. The full list is intentionally broad.
How is sensitive content actually recognized?
Rules on our own servers check each message’s sender and subject against banks, tax and government offices, insurers, healthcare providers, credit bureaus and law firms, and words like statements, tax forms, password resets and one-time codes. If the body looks like it holds personal identifiers, a short excerpt is checked by a classification model. A message that trips either check is skipped before the AI that reads and drafts sees it. This covers your connected inbox; mail sent to your employee’s own address and a specialist’s business inbox are read for the work.
Does Atona ever store the original sensitive message?
The message stays in your inbox, untouched. Atona notes that a sensitive message exists so you know about it — but never stores the contents.
Where is my data hosted?
In a private, encrypted space tied to your account. Not shared with other users. Not pooled into any shared dataset.
Can I see what Atona has remembered about me?
Yes. Ask Atona directly what it knows about anyone, correct it if it’s wrong, and request a full copy at any time. Nothing is hidden from you.
Is my data used to train AI?
No. Never. Not by us, not by anyone we work with.
What happens if I delete my account?
Everything goes: memory, history, preferences, your employee’s own address and number if it has them, and transcripts.
Related guides
Ready to try Atona?
Atona is invite-only while we onboard in small batches. Request access with an invitation code, or tell us what you need and we’ll review it.
Already have access? Sign in · Android in beta.