This Privacy Policy explains what personal information Atlas Operating Systems ("we," "us," "our") collects through the Atlas Systems website, waitlist, pre-order checkout, and application (collectively, the "Service"), how we use and share it, and the choices and rights available to you. This policy is incorporated by reference into our Terms of Service.
| Category | What / When |
|---|---|
| Contact information | Email address, provided when joining the waitlist, creating an account, or completing a pre-order |
| Payment information | Name, billing address, and card details, collected and stored directly by our payment processor, Stripe — we never see or store your full card number, only a payment reference and the last four digits |
| Transaction data | Purchase amount, plan tier, billing cycle, and subscription status, needed to fulfill and administer your order |
| Business data you enter | Inventory, sourcing, sales, and financial records you input while using the Service |
| Usage and log data | Pages visited, features used, timestamps, referring URLs, and general interaction with the site and application, collected automatically |
| Device and technical data | IP address, browser type and version, operating system, and device identifiers, collected automatically for security, fraud prevention, and analytics |
| Communications | Content of support requests, emails, or other communications you send us |
We use cookies and similar technologies (such as local storage) for the following purposes:
We do not currently use third-party advertising cookies or trackers, and we do not sell personal information as that term is defined under applicable law. If this changes, we will update this policy and, where required, obtain your consent first.
If you are located in the European Economic Area or the United Kingdom, we process your personal information on the following legal bases under the GDPR or UK GDPR, as applicable: (a) performance of a contract, where processing is necessary to provide the Service you've purchased or requested; (b) legitimate interests, where processing is necessary for our legitimate business interests (such as security, fraud prevention, and product improvement) and those interests are not overridden by your rights; (c) consent, where we rely on your consent, such as for non-essential analytics cookies or optional marketing communications, which you may withdraw at any time; and (d) legal obligation, where processing is necessary to comply with applicable law.
We do not sell your personal information. We share personal information only in the following circumstances:
We retain personal information and business data for as long as your account is active, plus a reasonable period afterward as necessary to comply with our legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. When information is no longer needed for these purposes, we take reasonable steps to delete or anonymize it. You may request earlier deletion as described in Section 10, subject to the retention exceptions described there.
We implement reasonable technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, or destruction, including encryption of data in transit and reliance on providers (Stripe, Cloudflare) with independently audited security practices. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.
We and our service providers may process and store your information in the United States and other countries that may not have data protection laws equivalent to those in your jurisdiction. Where we transfer personal information from the EEA, UK, or Switzerland to a country not deemed to provide an adequate level of protection, we rely on appropriate safeguards, such as our service providers' Standard Contractual Clauses or other lawful transfer mechanisms, to protect that information.
Regardless of your location, you may request access to, correction of, or deletion of your personal data, or object to certain processing, by emailing team@atlasossolutions.com. We will respond within the time required by applicable law. We may need to verify your identity before fulfilling a request, and we may retain certain information as required by law or for legitimate business purposes, such as completing a transaction, resolving a dispute, or complying with a legal obligation, even after a deletion request.
If you are a California resident, you have the right to: know what personal information we collect, use, and disclose about you; request deletion of your personal information, subject to certain exceptions; correct inaccurate personal information; opt out of the sale or sharing of personal information (we do not sell or share personal information as those terms are defined under the CCPA); and not be discriminated against for exercising these rights. You may exercise these rights by emailing team@atlasossolutions.com. You may also designate an authorized agent to submit a request on your behalf, subject to our ability to verify that authorization.
If you are located in the EEA or UK, you have the right to access, rectify, or erase your personal data; restrict or object to our processing of it; receive a copy of it in a portable format; and, where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of processing before withdrawal. You also have the right to lodge a complaint with your local data protection supervisory authority.
Some browsers offer a "Do Not Track" signal. Because there is no accepted industry standard for how to respond to such signals, we do not currently respond differently to browsers with Do Not Track enabled.
The Service is intended for business use by adults and is not directed at, marketed to, or intended for use by children. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from a child under 18 without appropriate consent, we will take steps to delete it. If you believe we may have collected information from a child, please contact us at team@atlasossolutions.com.
We do not use your personal information to make any decision that produces a legal effect concerning you or similarly significantly affects you based solely on automated processing, without human involvement.
In the event of a security incident affecting your personal information that requires notification under applicable law, we will notify affected users and any required regulators without undue delay and in accordance with applicable legal timelines and requirements.
We may update this policy as the product and business evolve. If we make a material change, we will provide notice to active subscribers by email or a prominent notice on the Service before the change takes effect, as required by applicable law.
Questions about this policy, or requests regarding your personal information, can be sent to team@atlasossolutions.com. Atlas Operating Systems is the data controller for personal information processed as described in this policy.