Privacy Policy

1) Scope

This Privacy Policy applies to:

• AtlasAI websites and marketing pages (the “Sites”)
• Sales, marketing, and support communications
• The AtlasAI platform and related offerings provided to business customers

If you are using AtlasAI through your employer or another organization, that organization may control how your data is handled inside the platform. In that case, the organization’s policies may also apply.

2) Roles: Customer Data vs. AtlasAI Data

Customer Content / Customer Data. Business customers may upload, store, or connect data sources (such as documents, email, DMS content, Microsoft 365 content, or other enterprise repositories) to use within the AtlasAI platform (“Customer Content”). For Customer Content, the customer typically acts as the controller (or business) and AtlasAI acts as a processor (or service provider), as set out in the applicable contract and/or data processing addendum (“DPA”).

AtlasAI Business Data. AtlasAI collects certain information for our own business purposes, such as contact details for sales and support, billing information, and website analytics.

3) Information We Collect

A. Information you provide directly

We may collect:

• Name, business email, phone number, job title, company name
• Messages you send via forms, email, chat, or support channels
• Contracting and billing information (e.g., invoicing contacts and payment status)

B. Information collected automatically on our Sites

We may collect:

• IP address, browser type, device identifiers, pages viewed, referral URLs
• Cookies and similar technologies (see “Cookies” below)

C. Information processed in the AtlasAI platform (enterprise deployments)

Depending on your deployment and configuration, the platform may process:

• User identity and access information (e.g., SSO identifiers, role/group membership)
• Usage and audit logs (e.g., login events, feature usage, query metadata)
• Customer Content connected or provided by the customer

4) How We Use Information

We use information to:

• Provide, operate, maintain, and secure the Services
• Authenticate users and enforce access controls
• Provide customer support and respond to requests
• Improve performance, reliability, and product features
• Send service-related communications (e.g., maintenance notices)
• Conduct sales and marketing (where permitted by law)
• Comply with legal obligations and enforce our agreements

5) AI and Model Processing

AtlasAI is designed to support enterprise AI workflows. How content is processed depends on the customer’s deployment architecture and configuration.

• Customer Content inputs and outputs are processed to deliver requested functionality (e.g., search, summarization, drafting, analysis).
• Training: AtlasAI does not use Customer Content to train generalized models for other customers unless explicitly agreed to in writing.
• Customer controls: Customers control what data sources are connected, who can access them, and what retention rules apply, subject to the customer’s configuration and contract.

6) Cookies and Analytics

Our Sites may use cookies and similar technologies for:

• Essential website operation
• Analytics (understanding how visitors use the Sites)
• Marketing and advertising (where enabled)

You can control cookies through your browser settings. Some features may not function properly if cookies are disabled.

7) How We Share Information

We may share information:

• With service providers who help us operate our business (e.g., website hosting, CRM, email delivery, support tools), subject to contractual confidentiality and security obligations
• With customers and their administrators when users access the platform under an organization account
• For legal reasons if required by law, regulation, legal process, or to protect rights, safety, and security
• Business transfers in connection with a merger, acquisition, financing, or sale of assets (subject to appropriate protections)

We do not sell personal information in the traditional sense. If applicable law defines “sale” or “sharing” broadly (for example, some targeted advertising scenarios), we provide mechanisms to limit such sharing where required.

8) Data Security

We use administrative, technical, and organizational measures designed to protect information, such as:

• Access controls and least-privilege principles
• Encryption in transit and (where applicable) at rest
• Logging and monitoring to detect suspicious activity
• Vendor risk management and contractual security obligations (as applicable)

No method of transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of any credentials and for following your organization’s security policies.

9) Data Retention

We retain information only as long as necessary for the purposes described above, unless a longer retention period is required or permitted by law.

For Customer Content in the platform, retention is governed by the customer’s configuration and the applicable agreement. Customers may request deletion or export as described in the contract and/or DPA.

10) International Transfers

If you access the Sites or Services from outside the United States, your information may be transferred to and processed in the United States or other jurisdictions where we or our service providers operate. Where required, we use appropriate safeguards for cross-border transfers.

11) Your Rights and Choices

Depending on your location, you may have rights to:

• Access, correct, or delete certain personal information
• Object to or restrict certain processing
• Opt out of marketing communications (unsubscribe links or by contacting us)

If you use AtlasAI through an organization, requests regarding Customer Content should generally be directed to your organization’s administrator, since they control the environment and data.

12) Children’s Privacy

The Services are not directed to children, and we do not knowingly collect personal information from children under 13 (or other age as required by local law).

13) Third-Party Links

Our Sites may link to third-party websites. Their privacy practices are governed by their own policies, and we are not responsible for those practices.

14) Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will update the “Last Updated” date and, where required, provide additional notice.

15) Contact Us

For questions or requests related to this Privacy Policy, contact:
AtlasAI
Attn: Privacy / Security
Email: privacy@atlas-ai.io