Privacy Policy

Our privacy policy and how we use your data

Last updated: June 1, 2026

This policy explains how Atrio processes personal data for the website and SaaS product.

Controller

The company operating Atrio is the controller for account, tenant, CRM, budget, lead, support, and website data. Contact us through the address published on the website or in your service agreement.

Data we process

We process account data, authentication data, tenant and role data, CRM leads and deals, form submissions, budgets, files you upload, billing data where enabled, support communications, device/browser data, and product analytics events.

Purposes

We use data to provide the service, secure accounts, manage tenants and permissions, process forms and budgets, support customers, improve the product, debug errors, comply with legal obligations, and communicate service updates.

PostHog analytics

We use PostHog Cloud EU as a processor for product analytics and frontend error tracking. Before analytics consent, PostHog is configured in cookieless mode. We only call PostHog identify after a user logs in and analytics consent is granted. Identified properties may include user ID, email, name, tenant, role, and selected product events. Public form submitter analytics use a hashed email when an email is provided.

Legal bases

We process service data to perform our contract, security and product improvement data under legitimate interests where allowed, analytics cookies with consent, and legal/accounting data to comply with legal obligations.

Processors

We use service providers for hosting, authentication, database, email, billing, file storage, monitoring, and analytics. PostHog Cloud EU is used for analytics. We do not sell personal data.

Retention

We keep data while needed to provide the service, comply with legal obligations, resolve disputes, and maintain security records. Analytics data is retained according to the PostHog project retention settings.

Your rights

Depending on your location, you may request access, correction, deletion, restriction, portability, objection, and withdrawal of consent. You can also complain to your local data protection authority.