Privacy Policy

Account data: when you sign up, we collect your name, email address, and company information to create and operate your account and organization.

Business data: everything you enter into ATLAS — employees, schedules, timesheets, invoices, customers, and financial records. This data belongs to your organization, not to us.

Contact messages: if you use our contact form, we store your name, email, company, and message so we can review and respond.

Usage and security data: sign-in events, device session information, and audit logs of administrative actions, kept to operate and secure the service.

To operate the service: run your organization, process your subscription billing, and provide support.

To secure the service: detect abuse, enforce rate limits, and maintain audit logs.

We do not sell your data. We do not use your business data for advertising. We do not train AI models on your data.

Your organization's data is isolated by design and scoped to your organization on every request. Access is role-based, with permissions scoped to assigned locations.

Sensitive stored fields — such as HR data and stored integration credentials — are encrypted. Sessions expire after 10 minutes of inactivity, and signing in on a new device signs out all other devices.

See our security page for the full, honest picture of implemented practices.

ATLAS uses cookies for sign-in sessions, theme preference, and a cookie-consent banner. We do not use third-party advertising or tracking cookies.

We do not send marketing email. Transactional emails (such as quote or invoice delivery from within ATLAS) depend on email configuration on your ATLAS host and may be silently skipped if it is not configured — we do not promise email delivery as a feature.

Your business data is retained while your subscription is active and remains exportable at any time, free of charge. After cancellation, your data stays intact and exportable.

Contact-form messages are retained until reviewed and handled, then deleted on a reasonable schedule.

You may request a copy of the personal data we hold about you, correction of inaccurate data, or deletion of your contact-form submission, by using the contact form on this site. We will respond to verified requests within a reasonable time.

We may update this policy. Material changes will be communicated to customers before they take effect.

ATLAS is a business product and is not directed at children under 13. We do not knowingly collect data from children.

We do not claim SOC 2, HIPAA, PCI-DSS, or ISO 27001 certification. Do not store regulated health, payment-card, or other highly sensitive data in ATLAS unless you have verified with us that the necessary controls are in place.