Privacy Policy

Atlas Digital Co. (“we,” “us,” or “our”) operates Atlas CRM (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using the Service, you consent to the practices described in this policy. If you do not agree, please do not use the Service.

Account Information: When you register, we collect your name, email address, password (hashed), and organization name.

Customer Data: Data you enter into the Service — contacts, deals, companies, notes, emails, calls, and any other content you create.

Usage Data: We automatically collect information about how you use the Service, including pages visited, features used, timestamps, and session data.

Device & Technical Data: IP address, browser type and version, operating system, device identifiers, and referring URLs.

Payment Information: If you purchase a subscription, payment details are collected and processed by our payment processor (Stripe). We do not store full card numbers.

Communication Data: If you contact us for support, we retain records of that correspondence.

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process transactions and send related information including purchase confirmations and invoices
• Send administrative information, such as updates, security alerts, and support messages
• Respond to your comments and questions and provide customer service
• Monitor and analyze trends, usage, and activity to improve the Service
• Detect, investigate, and prevent fraudulent transactions and other illegal activities
• Comply with legal obligations

We do not sell your personal information to third parties.

We may share your information in the following situations:

Service Providers: We share data with third-party vendors who perform services on our behalf, such as cloud hosting (Vercel, Supabase), email delivery (Resend), SMS (Twilio), error tracking (Sentry), and analytics (PostHog). These providers are contractually obligated to protect your data.

Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities.

Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.

With Your Consent: We may share your information for any other purpose with your explicit consent.

We retain your personal information for as long as your account is active or as needed to provide you the Service. If you delete your account, we will delete or anonymize your personal information within 30 days, unless we are required to retain it for legal purposes.

Customer Data you enter into the Service is retained until you delete it or close your account.

We implement industry-standard security measures to protect your information, including:

• AES-256 encryption for sensitive stored data (API keys, integration credentials)
• TLS/HTTPS encryption for all data in transit
• Bcrypt hashing for passwords
• HTTP-only, secure session cookies with SameSite protection
• Rate limiting on authentication endpoints
• Per-organization data isolation

No method of transmission over the Internet is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your data.

We use cookies and similar tracking technologies to operate the Service. See our Cookie Policy for details.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Portability: Request a machine-readable export of your data
• Objection: Object to processing of your data for certain purposes
• Withdrawal of Consent: Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at privacy@atlasdigitalco.com. We will respond within 30 days.

If you are located in the European Economic Area, our legal bases for processing your personal data include: performance of a contract (providing the Service), legitimate interests (security, fraud prevention, improving the Service), compliance with legal obligations, and your consent where applicable.

You have the right to lodge a complaint with your local data protection authority.

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete personal information, and the right to opt-out of the sale of personal information. We do not sell personal information.

To submit a CCPA request, email privacy@atlasdigitalco.com.

The Service is not directed to children under 18. We do not knowingly collect personal information from children under 18. If we learn we have collected such information, we will delete it promptly.

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a prominent notice within the Service. Your continued use after changes take effect constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy or wish to exercise your rights, contact us:

Atlas Digital Co. — Privacy Team
Email: privacy@atlasdigitalco.com
Website: https://atlasdigitalco.com