Atyra Privacy Policy

Effective November 3, 2026 · Version 2026-11-03

Atyra (atyra.co) is operated by Beauty Street LLC d/b/a Atyra ("Atyra," "we," "us"). This policy explains what we collect, why, who we share it with, how long we keep it, and your choices. It covers two groups of people:

• Creators: people who sign up for Atyra and connect their Facebook Page or Instagram professional account.
• Followers: people who comment on, message, or reply to a creator's content. Followers don't use Atyra directly; we process their data on behalf of the creator who connected the account.

1. The short version

• We use your data to run the automations and inbox you set up, and for nothing else.
• We don't sell personal data, and we don't use it for advertising.
• We don't train AI models on creator or follower content.
• Data that comes from Meta is used only for the account it came from.
• Disconnected accounts are deleted after 30 days; you can delete your account and data anytime.

2. Information we collect from creators

• Account details: name, email address, password (stored hashed) or Google sign-in identifier, and your acceptance of our Terms and this policy (versions and time).
• Connected Meta account data, which you authorize through Facebook Login: your Facebook user ID (app-scoped), the Pages and Instagram professional accounts you connect, access tokens (encrypted), and the permissions you grant.
• Your content and settings: your posts, Reels, Stories and Lives (captions, media, and for Stories, images and audio), automations, keywords, messages and message variations, Drafts, links you save in Links (including affiliate links), notes you paste, and the replies you send from Atyra, and your conversations with the Atyra Assistant (what you type or say to it, and its replies).
• Usage and technical data: which features you use, automation volume, delivery results and errors, device and browser type, IP address, and log data. Logs never contain message or comment text.
• Billing data (when paid plans start): handled by Stripe. We receive your plan, payment status and the last four digits of your card, never the full card number.

3. Information we process about followers

When a follower interacts with a connected creator's account, Meta sends us:

• a. Interaction data: the follower's Instagram or Facebook app-scoped ID, username or display name, profile picture link where Meta provides it, and the comment, message or Story reply they sent, with time stamps.
• b. Conversation data: the messages in the conversation between the follower and the creator, including automated messages and the creator's replies. We use this to send the DMs the creator set up, to show the creator who is waiting on a reply and sort messages by type (for example, asking for a link or asking a question), and to react with a ❤️ where the creator has that turned on.

Followers: if you want your data removed, ask the creator, or contact us (section 10) with your Instagram or Facebook username and the creator's account, and we'll delete what we hold about you for that creator.

4. How we use information

• Run Atyra: send the automated replies and DMs the creator turned on, switch Drafts on with new content, show and sort the inbox, import past automations, and report results.
• Keep it reliable and secure: detect delivery failures, prevent duplicate messages, alert creators when Meta delivery breaks, investigate abuse.
• Improve Atyra using our own usage data (feature use, automation volume, delivery rates, errors), de-identified. We never re-identify it, sell it, or use it to build insights across creators from Meta data.
• Communicate with creators about their account, security, billing and product changes.
• Meet legal obligations and enforce our Terms.

We do not: sell personal data; use it for ads or ad targeting; train AI models on creator or follower content; combine one creator's Meta data with another's. If we ever offer AI training, it will be a separate opt-in limited to content creators give us directly.

5. AI features

Some features use AI: the Atyra Assistant, turning notes and links a creator pastes into keywords and saved links, naming links, reading a creator's Stories (images and spoken audio) to match the right product link, matching a follower's Story reply to a product, and creating content plans and plan preview images. Sorting messages in the inbox and ❤️ reactions are rule-based and don't use AI.

The Atyra Assistant. Creators can talk to Atyra by typing or by voice to set up and check their automations and to answer their DMs. To answer, we send the AI what the creator says to it, recent messages from that conversation, and the account details it needs, such as post captions, keywords, links and DM text, and counts (for example, how many people are waiting on a reply). When the creator asks Atyra to help answer waiting messages, we send the text of the follower's message so it can suggest a reply, with the follower's name, username, handle and ID removed; the creator reviews the suggestion and sends it themselves. When it looks up followers, the AI gets counts and internal reference numbers only; the app adds names on your screen. If you type a follower's name yourself, it is sent as you typed it. With the microphone or voice mode, your speech is turned into text by our AI provider and, in voice mode, Atyra's replies are turned into speech. We keep the text of your conversation in your account so you can pick up where you left off; it is included in your data export and deleted with your account. The assistant never switches an automation on, changes one, or messages a follower until you tap to confirm or send.

These requests go through the Lovable AI Gateway to model providers OpenAI and Google. We send only what the feature needs. We never send follower names, usernames, handles or profile pictures from our records; where a feature sends the text of a follower's message, we remove or replace any names and @mentions in it. Where the provider supports it, we tell it not to store the request. Providers may keep requests for a limited period for abuse monitoring or legal reasons under their own terms; we don't control that period. Neither Lovable nor the providers may use Atyra's data to train their models under the settings we use.

Nothing AI-written is sent to a follower unless the creator set it up or approved it. AI output can be wrong; creators should review what they turn on or send.

6. Who we share information with

We share data only with service providers who process it for us under contract, and as required by law:

We may disclose information if required by law or to protect rights and safety, and to a buyer or successor if Atyra is sold or merged (they must honor this policy). We never sell personal data.

7. How long we keep it

8. Your choices

• Access and export: download your data from Settings.
• Delete: delete your account in Settings, or remove Atyra in your Facebook settings and request deletion; we follow Meta's data deletion callback and give you a confirmation code to check status.
• Disconnect: disconnect a Page anytime; it's deleted after 30 days.
• Correct: edit your account details in the app or ask us.
• Emails: unsubscribe from product emails with the link in any email. We'll answer privacy requests within 30 days and won't treat you differently for making one.

9. Security, children, and where data is stored

We encrypt access tokens, verify Meta's signatures on callbacks, limit staff access, and keep message text out of logs. No system is perfectly secure; we'll notify affected users of a breach as the law requires. Atyra is for people 18 and older and isn't directed at children under 13; we don't knowingly collect their data. Data is stored and processed in the United States.

10. Contact and changes

Questions or requests: support@atyra.co · Beauty Street LLC d/b/a Atyra, c/o KLN Beauty, PO Box 7136, Fishers, IN 46038, USA. We'll post changes here with a new effective date. When we change this policy, we'll ask creators to accept the new version when they next sign in.