Privacy Policy

Information We Collect

We process account details, workspace membership, conversations, tasks, documents, generated outputs, project data, integration configuration and billing records needed to provide Atlas. Support and data-rights requests include the information you submit and the operator's response. Keep passwords, API keys and payment-card details out of support messages.

How We Use Your Data

We use this information to operate your workspace, execute authorized tasks, manage subscriptions, provide support, investigate errors and meet applicable legal obligations. Customer content is not added to Atlas's platform-wide training or shared knowledge by default. Any future customer-training use requires a separate consent and retention process.

Service Providers and Integrations

Atlas sends relevant content to configured model, hosting, execution, storage and payment providers to fulfill your requests. Connected services receive information needed for the actions you authorize. Their processing and retention terms also apply. We do not sell personal data. We may disclose information when required by law or in connection with a business transfer.

Access and Security

Access is controlled through verified accounts, workspace membership and database access policies. Supported integration credentials are encrypted by the server using configured encryption keys. Task credentials have limited scope and can be revoked in Settings → Data & Privacy.

No online service can guarantee complete security. Report a suspected problem through our support contact. Specific certification, audit, penetration-testing or recovery guarantees apply only where documented in an agreement; this policy does not claim such certifications or guarantees.

Exports and Data Requests

Verified members can request personal-record exports or deletion in Settings → Data & Privacy. Workspace-wide operations require the workspace owner. Exports include actual accessible records and a manifest explaining their scope. Secret/credential stores are excluded and credential fields are redacted; file bytes can be downloaded separately. External provider records, internal operator evidence and larger exports can be reviewed through support.

Deletion and Retention

A deletion request is saved for operator review with a 30-day processing deadline. Filing the request does not itself delete data. The operator verifies the requested scope, shared-workspace ownership, account access, files, integrations, billing and any required retention, then records completion and a customer response.

Active-account records remain available until deleted through a supported action or the reviewed deletion process. Atlas does not promise automatic deletion after a fixed period of inactivity. Billing, security, legal and request-completion records may need to be retained; the operator must explain the applicable purpose and retention decision. Backup/log treatment must follow the actual provider configuration and be recorded during fulfillment; there is no universal 90-day log or 30-day backup guarantee.

Privacy Preferences

Essential browser storage supports sign-in and security. Optional analytics stores a browser identifier and acquisition/referral information only after you allow analytics. Rejecting or withdrawing analytics clears those identifiers and stops future funnel/attribution collection in this browser. Change your choice through Privacy preferences in Settings. Analytics sent before withdrawal is handled through a data-rights request rather than silently removed from historical records.

AI Processing

Model providers process the content needed to generate responses or perform your requested work. Review provider-specific terms and your workspace configuration before submitting sensitive information. Atlas excludes customer conversations from platform-wide training by default; this does not substitute for the configured model provider's own processing terms. Review generated outputs and revoke delegated agent access when needed.

Children and International Processing

Atlas is intended for adults using business accounts. Providers may process information in the countries where their infrastructure operates. Region, subprocessor and transfer requirements should be reviewed with the operator for your workspace; we do not claim a specific transfer agreement is in place unless it has actually been arranged.

Changes and Contact

Material changes will be published with an updated policy date. For access, correction, deletion, portability, restriction or other privacy requests, use Settings → Data & Privacy or contact support@coreforgeatlas.com. If a request requires additional identity or scope checks, the operator will explain them.

Last updated: October 13, 2026