Privacy Policy

Last updated: 1 May 2026

If you have questions about this policy, contact us at contact@hiatlas.app.

Atlas ("Atlas", "we", "us") is operated by Oniros Software. This policy explains what data we collect when you use Atlas, how we use it, the legal basis for processing, who we share it with, and the rights you have under the General Data Protection Regulation (GDPR).

1. What we collect

• Account information: the email address you sign up with, plus any data your chosen authentication provider (Google, Discord) shares during sign-in.
• Conversation history: the messages you send to Atlas through your messaging app are processed in real time. Recent context is held briefly in memory to keep the conversation coherent and is discarded when no longer needed.
• Tasks, reminders, and follow-ups: when you ask Atlas to remember something or it commits to a follow-up, we store that record so it can act on it later.
• Long-term memory: Atlas summarises things you tell it (people, projects, plans) into vector embeddings stored alongside your account so future conversations can reference them.
• Messaging-app identifiers: when you link Telegram, WhatsApp, or Discord, we store the channel-specific identifier needed to route messages to your account.
• Billing data: if you subscribe to a paid plan, Stripe handles your payment details directly — we never see or store card numbers. We receive only a customer ID and subscription status.

2. Why we collect it

We process this data for one purpose: providing the Atlas service you signed up for. The legal basis under GDPR is contract fulfilment — we need this data to deliver the service you've contracted us for.

3. Where it's stored

Account data and stored memories live on EU-based infrastructure (Supabase EU region). All data is encrypted at rest and in transit. Vector embeddings are stored on EU-based infrastructure. Conversation messages in flight are processed but not persisted beyond the short-term context window described above.

4. How long we keep it

• Conversation context: ephemeral — held briefly in memory, then discarded.
• Tasks and reminders: kept until you archive or delete them, or until you delete your account.
• Long-term memory: kept until you delete your account.
• Account information: kept while your account is active and for a short period afterwards to handle any pending billing or compliance obligations.

5. Who we share it with

We share data only with service providers that are essential to running Atlas, and only the minimum required:

• Anthropic: message content is sent to Anthropic's Claude API to interpret your inputs and generate responses about your tasks, notes, contacts and reminders. Anthropic processes the data on our behalf under their data processing terms andand, as of the effective date of these Terms, does not use it to train models.
• Supabase: authentication and primary data storage (EU region).
• Cloudflare: content delivery, DNS, and web hosting infrastructure.
• Stripe: payment processing for paid subscriptions.
• Resend: transactional email delivery (login links, account notifications, subscription updates). Email address and message content are processed only to deliver these messages.
• Messaging platforms: currently Telegram, WhatsApp, and Discord. We update this list when we add support for new platforms. Each platform acts as an independent data controller for data they collect about you under their own privacy policies. We only process message content needed to deliver Atlas's features.

We do not sell your data, share it with advertisers, or use it for marketing.

6. Your rights

Under GDPR you have the right to:

• Access — request a copy of your data.
• Rectification — correct anything inaccurate.
• Erasure — delete your account and all associated data.
• Portability — get your data in a machine-readable format.
• Restriction — limit how we process specific data.
• Objection — object to specific kinds of processing.

The fastest way to exercise these rights is through the dashboard: the "Delete my account" button removes everything. For everything else, email contact@hiatlas.app and we'll respond within 30 days.

7. Cookies

This website does not use cookies. We use sessionStorage in your browser tab to keep you signed in for the duration of the session — this data never leaves your device.

8. Changes to this policy

If we make material changes, we'll update the "Last updated" date and notify you by email if you have an active account. Continued use of Atlas after a change constitutes acceptance of the updated policy.

9. Contact

For any privacy-related question, write to contact@hiatlas.app. You also have the right to lodge a complaint with your local data protection authority.