Privacy policy

Who we are

Atlas is operated by Gadoci Consulting LLC (“we”). For privacy questions, contact bg@gadociconsulting.com.

What we collect

• Account details. Your name, email address, and profile picture as provided by the sign-in method you choose (email link, Google, or Microsoft). We use them to identify you inside the workspaces you belong to.
• Workspace map content. The people, teams, workflows, decisions, systems, data sources, meetings, documents, relationships, observations, and saved views that members of a workspace create, on the canvas or through a connected AI assistant. This content belongs to the company that owns the workspace. It can include the names and job titles of that company’s staff.
• Activity records. An audit log of who added, changed, verified, or removed map items and who changed memberships and settings, with timestamps and whether the change came from the canvas or a connector. Workspace administrators can see it. It exists so a shared map stays accountable.
• Connector tokens. When you connect Claude or ChatGPT, we store an access token bound to you and to one workspace so the assistant can act with your permissions. You can disconnect at any time from the workspace’s Connect page.
• Technical data. Standard server logs (IP address, browser, request time) kept by our hosting provider for security and troubleshooting.

We do not use advertising trackers or sell personal information.

How we use it

• To sign you in and show you the workspaces you belong to.
• To store and display the map, apply each member’s permissions, and keep the change history.
• To let an AI assistant you connect read and write the map on your behalf, within your permissions. Atlas does not send map content to any AI model itself. The assistant you use processes what you and it exchange under that provider’s own terms.
• To send transactional email: sign-in links, invitations, and digests about items that need review. We do not send marketing email from Atlas.

Where it lives and who processes it

Atlas runs on Vercel (application hosting), MongoDB Atlas (database), and SendGrid (email delivery). Each acts as a processor on our instructions. Data is stored in the United States. No AI provider receives data from Atlas’s servers.

Sign-in with Google or Microsoft

If you sign in with Google or Microsoft we request only your basic profile: name, email address, and picture. We use it solely to create and identify your account. We do not request access to your files, mail, or calendar. Atlas’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Retention and deletion

Map content and audit records are kept for as long as the workspace exists. A workspace can export its whole map at any time. When a company ends its use of Atlas, we delete its workspace within 30 days of the request. To remove your own account, ask your workspace administrator or email us. We delete account details within 30 days, while audit entries keep a record that an action happened without your personal details.

Security

Access is restricted to invited members of a workspace. Every request is scoped to a single workspace, connector tokens are bound to one workspace and expire, and data is encrypted in transit and at rest by our providers. No system is perfectly secure. If you believe you have found a vulnerability, please email us.

Your rights

You can ask us to show, correct, or delete the personal information we hold about you. Email bg@gadociconsulting.com and we will respond within 30 days.

Changes

If we change this policy in a way that matters, we will note the new date at the top and, for significant changes, tell workspace administrators by email.