Privacy Policy
Last updated: March 1, 2026
Information We Collect
We collect information you provide directly, such as your name, email address, company details, and payment information when you create an account. We also collect usage data, device information, and log data automatically when you use our services.
How We Use Your Information
We use your information to provide and improve our services, process transactions, send communications, ensure security, and comply with legal obligations. We never sell your personal data to third parties.
Mobile Application
The Atrapa mobile app processes the same account and conversation data as the web application. In addition, it stores your session securely on your device using the system keychain or keystore, and registers a device notification token so we can deliver push notifications. Biometric unlock, where you enable it, is handled entirely by your device: your fingerprint or face data is never transmitted to us and never leaves your phone.
Device Permissions
The app requests the microphone only when you choose to record a voice note, and access to your photo library only when you choose to attach an image to a conversation. Both are optional: declining them does not prevent you from using the app, and the app does not access your camera. Notification permission is requested so we can alert you to new customer messages.
Messages and Attachments
Conversations you send and receive through connected channels, including text, images, files, and voice notes, are stored on our servers so they remain available across your devices and to your team. Attachments are retained alongside the conversation they belong to and are removed when the conversation or account is deleted.
Push Notifications
When you sign in on a mobile device, we store a notification token that identifies that device so new-message alerts can be delivered. Notifications are routed through Expo and, on Android, Firebase Cloud Messaging. The token identifies the device, not you personally, and is deleted when you sign out or when the device is no longer reachable. You can turn notifications off at any time in your device settings.
Data Sharing
We share data only with service providers who help us operate our platform, when required by law, or with your explicit consent. All third-party providers are bound by strict data processing agreements.
Data Security
We implement industry-standard security measures including encryption in transit and at rest, regular security audits, access controls, and monitoring. Your data is stored in SOC 2 certified data centers.
Your Rights
You have the right to access, correct, delete, or export your personal data at any time. You can also object to or restrict processing. To exercise these rights, contact our privacy team.
Cookies
We use essential cookies to operate our platform, analytics cookies to understand usage patterns, and functional cookies to remember your preferences. You can manage cookie settings in your browser.
Contact Us
For privacy-related inquiries, please contact our Data Protection Officer at privacy@atrapa.io.