1. Overview & Creator Data Rights
Welcome to Ate App. We are committed to absolute data transparency and creator sovereignty. We do not sell creator or buyer data to advertisers. This Privacy Policy details what information we collect, how it is secured, and your rights under GDPR and CCPA.
2. Information Collected
- Creator Profiles: Name, email address, password hash, and payout credentials (via Stripe Connect).
- Meta / Instagram API Data: With OAuth permission, we receive Instagram Business Account IDs, page access tokens, and comment events to trigger configured automated DMs.
- Buyer Data: Name and email address to fulfill digital download delivery. Payment cards are tokenized directly by Stripe/PayPal and never touch our servers.
3. Meta Platform Data Deletion & GDPR Right to be Forgotten
You may request immediate deletion of your account, Instagram authorization tokens, and CRM contact data at any time by emailing info@ateapp.me. Data deletion requests are processed within 24 hours.
4. Data Security
All traffic is protected with 256-bit TLS 1.3 encryption and HSTS headers. Incoming Meta Webhook events are verified using HMAC-SHA256 signatures with our App Secret.