← Athra

Privacy

Last updated 25 September 2026

Athra helps you discover, understand, and prioritise commercially relevant people and activity on X, from the business and target context you give it and from public data on X. This page describes exactly what we collect about you and why. It is short because we collect little.

What we collect

• Your email address, when you create an account with email, Google or Whop.
• Your public X profile and recent public posts, read from the X name you type during setup. That is your handle, display name, avatar, follower count, bio, website and join date, together with the text of your recent public posts. Athra reads these from X’s public data so it can work out what you sell and who buys it. No X sign-in is involved and we never receive your X password. You can skip this and type your context yourself instead.
• Your public profile from Google, if you choose to sign in with Google — your email address, name and profile picture. We never receive your password.
• The AI apps you connect — which apps you have approved (for example Claude or Cursor), when you connected them and when they last used Athra. Access keys are stored only as a one-way fingerprint (a SHA-256 hash), so we cannot read them back.
• What your AI app asks Athra — the search requests it sends and the leads Athra returns, saved to your account like any other search.
• Purchases — when you buy a credit pack, Whop tells us your email address, the pack you bought and the payment identifiers. We never see your card details.
• Failed sign-ins — if a sign-in fails, we record the time, which step failed and the reason the provider gave, so we can fix it. No passwords or tokens are recorded.
• What you tell us about your business — what you sell and who you are trying to reach. This is the context Athra matches people against.
• Basic visit data — the page requested, the referring page, your browser's user-agent string and screen width, collected through the analytics services below. Those services receive standard request metadata, which can include your IP address; we do not keep your IP address in our own database.

What we do with it

What you tell us about your business is used to find and rank people on X for you. It is not shown publicly. Your email address is never shown publicly and is used only to contact you about your account.

We do not sell your data, we do not run advertising, and we do not share anything with third parties for marketing.

Who processes it

• Supabase stores the database and handles sign-in.
• Vercel serves this website and runs the code behind it.
• GetXAPI reads public X data for us — the profiles and posts of the people you search for, and of the X name you gave us. It receives those names and the search terms Athra builds from what you told us.
• OpenRouter, and the model it routes each request to, does the reading and judging. It receives what you told us about your business, your X profile and post text, and the public profiles and posts of the people being judged, and returns the verdict and the reasons you see on screen. Groq is used the same way when the first model is unavailable.
• fxtwitter, a free public reader of X profiles, is used when you paste a list of X names rather than running a search. It receives those names.
• Resend sends the email that tells us somebody has signed up. That email contains the new account’s email address.
• AgentMail hosts our support inbox, athra@agentmail.to, and sends our sign-in emails. It receives your email address when we send you a sign-in link. If you email us, it receives your message, your email address and anything you attach, and forwards it to the person who answers support.
• Google Analytics measures site traffic.
• Whop — sign-in. If you choose “Continue with Whop”, we send you to Whop to log in and Whop tells us your Whop account id, username and email address. We use the email to create or find your Athra account, exactly as we do with X and Google. We never see your Whop password.
• Whop — measurement. Every page of this site loads a small Whop script that tells Whop the page you are on, the address you arrived from, and an identifier Whop stores in your browser. This happens on every page, whether or not you have an account with us. When you finish signing up we send Whop your email address once, so that Whop can tell us which visitors became customers. Whop’s script also reads certain boxes you type into on this site — ones asking for an email address, phone number or name — and sends what you typed as soon as you move on from the box, even if you never finish signing up or submit anything. It does not read password boxes. We do not send Whop anything you search for, any lead we find you, or anything else you type into the app.
• FingerprintJS — visitor recognition. Whop’s script loads code from a separate company, FingerprintJS, which measures characteristics of the device you are browsing on — your screen, graphics and audio hardware, processor and memory — and turns them into an identifier. That identifier lets us recognise a returning visitor even if cookies have been cleared. It does not tell us your name and it does not read anything you type. If you would rather not be recognised this way, email us and we will exclude you.
• Whop — payments. Whop processes credit-pack purchases, inside Athra or on Whop. Whop receives your payment details directly; we receive only your email address, the pack and the payment identifiers, so we can add the credits to your account.
• The AI app you connect (such as Claude, ChatGPT or Cursor) receives the results Athra returns to it. What that app does with them is covered by its own privacy policy.

These are processors acting on our instructions. We do not sell your data or share it with anyone else for marketing.

Signing in

You can sign in with Google, Whop or an emailed link. With Google and Whop we request read-only access to your basic profile. We never post as you, never read your private messages, and never take any action on your accounts. You can revoke access at any time from your Google or Whop settings, and doing so does not delete your Athra account.

Your choices

You can ask us to show you what we hold, correct it, or delete it entirely. Email athra@agentmail.to and we will action it.

Retention

We keep your profile while your account exists. If you delete it, we remove your personal data. Payment records are kept for as long as the law requires for accounting. Failed sign-in records are deleted after 90 days.

Cookies

We use a sign-in session stored in your browser so you stay logged in, and Google Analytics sets its own cookies or identifiers to measure traffic. We do not run advertising cookies.

Contact

Athra is operated by Dawood Abdullah. For anything on this page, email athra@agentmail.to.