Privacy Policy
REPLACE_WITH_… placeholder with your real details and have it reviewed by a qualified lawyer for your jurisdiction (e.g. GDPR, UK GDPR, CCPA/CPRA) before you publish.This Privacy Policy explains how REPLACE_WITH_LEGAL_ENTITY (“Atlas”, “we”, “us”) handles information in connection with the Atlas command-line software (the “CLI”), this website (the “Site”), and paid plans (together, the “Services”).
1. The short version
- The CLI runs entirely on your computer. It does not send your prompts, artwork, projects, or provider API tokens to us. There is no telemetry in the CLI.
- Your provider tokens stay local. Tokens (e.g. your Replicate token) are read from environment variables and are never written to Atlas databases, logs, or servers, and never transmitted to us.
- The Site collects very little, and only essential cookies run before you consent. Analytics are optional and off by default.
- Payments are handled by a third-party processor, not by us directly.
2. Who is the data controller
REPLACE_WITH_LEGAL_ENTITY, REPLACE_WITH_ADDRESS, is the controller of personal data described here. Contact: REPLACE_WITH_PRIVACY_EMAIL.
3. Information we process
| Context | What | Why / legal basis |
|---|---|---|
| CLI usage | Nothing is collected by us. All data stays in your local .atlas project. | N/A — no processing by us. |
| Site — essential | A cookie storing your cookie choice; security/anti-abuse signals. | Legitimate interest / strictly necessary. |
| Site — analytics (optional) | Aggregate, privacy-respecting usage stats — only if you opt in. | Consent. |
| Account & billing (Pro/Team) | Name, email, license key, and billing records held by our payment processor. | Contract performance. |
| Support & sales | Email address and the content of your message. | Legitimate interest / consent. |
| Cloud waitlist (optional) | Email address you submit. | Consent. |
4. Payments
Paid plans are processed by REPLACE_WITH_PAYMENT_PROCESSOR (e.g. Lemon Squeezy, Polar, Paddle, or Stripe), acting as a merchant of record or processor. We do not receive or store your full card details. Their handling of your data is governed by their own privacy policy: REPLACE_WITH_PROCESSOR_PRIVACY_URL.
5. Analytics
If we use analytics, we use a privacy-respecting provider (e.g. Plausible or Cloudflare Web Analytics) and load it only after you opt in via our cookie banner. See our Cookie Policy for details and how to change your choice.
6. Sharing
We do not sell personal data. We share it only with the processors needed to run the Services — our payment processor, hosting/CDN provider (e.g. Cloudflare), and email provider — each bound to process data only on our instructions.
7. Retention
We keep account and billing records for as long as required for tax and accounting law, and support correspondence for as long as needed to help you. Analytics data is retained in aggregate only. Your cookie-choice cookie lasts up to 180 days.
8. International transfers
Our providers may process data outside your country. Where required, transfers rely on appropriate safeguards such as Standard Contractual Clauses. REPLACE_WITH_DETAILS_IF_APPLICABLE.
9. Your rights
Depending on where you live, you may have the right to access, correct, delete, port, or restrict processing of your personal data, and to object to processing or withdraw consent. To exercise any right, email REPLACE_WITH_PRIVACY_EMAIL. You may also complain to your local data-protection authority.
10. Children
The Services are not directed to children under 16, and we do not knowingly collect their data.
11. Changes
We will post any changes here and update the “Last updated” date. Material changes to consent-based processing will re-prompt you.
12. Contact
REPLACE_WITH_LEGAL_ENTITY · REPLACE_WITH_PRIVACY_EMAIL · REPLACE_WITH_ADDRESS