Privacy Policy

Atom-MD ("we", "our", "the service") is a WhatsApp automation bot engine. By connecting your WhatsApp account to Atom-MD, you agree to the practices described in this Privacy Policy.

We are committed to protecting your privacy and handling your information transparently and responsibly.

When you use Atom-MD, the following information may be handled:

• WhatsApp Session Token: A cryptographic token generated when you link your account. This is saved in our database only in a highly secure, encrypted form. We utilize encryption protocols such that even our team/administrators cannot read or decrypt your active session tokens.
• Phone Number: Your WhatsApp phone number is stored in an encrypted format in our database, used solely to identify your bot session and secure your dashboard login.
• Dashboard Settings: Except for simple binary on/off preferences (which are stored as plain toggle flags), all customizable text and numeric configuration fields—such as your custom auto-reply messages, automated responses, and specific phone numbers—are securely encrypted within our database.
• Bot Configuration & API Keys: If you provide a custom Google Gemini API key, it is immediately fully encrypted within our database and used strictly to securely proxy AI assistant queries on your behalf.

We do not permanently collect or store the content of your WhatsApp messages. Message data is processed transiently in the system's memory to run enabled automation triggers. Highly sensitive View-Once (One-Time) media or text messages are processed on-the-fly and are never cached or written to our server disks under any circumstances. However, if and only if you actively enable the Anti-Delete security feature, incoming message files are temporarily saved in a strongly encrypted layout on our secure server disks for up to 6 hours solely to serve retraction backups, after which they are automatically and permanently purged.

The information collected is used exclusively to:

• Authenticate and maintain your bot session
• Execute bot features you have enabled (auto replies, status view, etc.)
• Power AI features using your provided API key
• Send you your dashboard password via WhatsApp
• Maintain bot performance and uptime

We do not sell, rent, or share your personal information with third parties for marketing purposes.

Atom-MD may interact with the following third-party services based on features you enable:

• Google Gemini AI: If AI Mode is enabled, messages prefixed with .ai are sent to Google's Gemini API using your API key. Google's privacy policy applies to this data.
• Google reCAPTCHA: Used on the connect page to prevent abuse. Google's reCAPTCHA privacy policy applies.
• Media Download Sources: When using download commands, requests are made to YouTube, TikTok, etc. as normal HTTP requests.

We take security seriously. Measures in place include:

• All API communications use HTTPS/TLS encryption
• Session tokens are hashed and time-limited
• Dashboard passwords are salted and hashed — we cannot read them
• No plaintext passwords are ever stored
• Server access is restricted and monitored

Despite these precautions, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

You have full control over your data:

• Instant Session Revocation & Auto-Deletion: You can disconnect your bot anytime by removing Atom-MD from WhatsApp Settings → Linked Devices. This immediately revokes your active token. Within 6 hours, all of your associated settings, configurations, and temporary cache data are automatically and permanently purged from our database and server disks during our automated cyclical system resets.
• Automated 6-Hour Expired Session Purge: Our bot servers undergo a scheduled reset cycle every 6 hours. During this automated cleanup, all inactive configurations, disconnected devices, or expired/stale sessions are completely and permanently wiped from our database and disk storage.
• Data Access & Management: Except for your active session token (which you revoke via WhatsApp), you have absolute visual visibility and edit/delete control over all your settings, auto-reply messages, customized text fields, and configurations directly through your personal web dashboard in real-time.

To initiate the automatic deletion of all configurations and session metadata, simply disconnect your bot by logging out of the session under WhatsApp Settings → Linked Devices on your phone.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of Atom-MD after changes constitutes acceptance of the updated policy.

We recommend checking this page periodically to stay informed.