Draft

Privacy in Atlas

Atlas is a small invite-only beta. This page says plainly what Atlas keeps, where it lives, who can see it, and how to take it with you or delete it.

Updated 2026-11-02. A working draft in plain language, not legal advice. It will change before Atlas opens to more people.

Who runs Atlas

Atlas Intelligent Workspace is run by Ishan Srivastava, an individual. Atlas is not a company yet. On this page, “we” and “Atlas” mean him. If that changes, this page will say so.

Privacy questions and requests: privacy@atlasiw.com. Security problems: security@atlasiw.com.

What Atlas keeps

What	Why	How long
Your account: your name and email address (from Google, or from the email you sign in with), your time zone, your home area (a town and a position rounded to about 1 km) and your settings	To sign you in, show times in your zone and show local weather	Until you delete your account
What you make: tasks, reminders, documents, notebook pages, sheets, boards, the agents you build, and the facts Atlas remembers about you	That is what Atlas is for	Until you delete them or your account. Deleted items stay in Trash for 30 days, then are removed for good, together with what belongs to them: sub-items, files, saved versions, comments, links and share invites. The item’s history lines (who changed it and when, with the item’s title, up to 200 characters) and a short line in Activity saying it was deleted stay until you delete your account
Your chats with Atlas, and the files you attach to them	So a chat can carry on and you can scroll back	Chats until you delete them. Attached files for 30 days
Apps you connect (Google, Slack, Microsoft Outlook, Notion, GitHub, a Canvas calendar link, and others you add)	To act for you in them	The key each app gives Atlas is stored encrypted. When you disconnect, the key is deleted and Atlas asks the app to cancel it where the app allows that
From your email, if you connect Gmail: for mail worth your attention, the sender’s address, the subject and a one-line summary. For events found in mail: a short title, time, place, one link, the organizer, the sender and the subject	For the “For you” list and to suggest or add events	Summaries: 30 days if you never open one, 180 if you do. Events: 30 days after the event, except a “Not for me” note, which stays as your preference. The email itself is not stored
Files Atlas makes for you, such as PDFs	So you can open and share them	Until you delete them or your account
Usage records: for each AI request, the time, which job it was, the model, how many tokens it used, what it cost Atlas and whether it worked. Never the words. Also the same kind of record for each web search	To keep everyone inside a fair monthly allowance and to show you your own usage	Each record 120 days, then monthly totals until you delete your account
Agent run detail and signed receipts (what an agent did for you, with private details hidden)	So you can look back, check and Undo	30 days
Per-chat timing records (how long each step took)	To find slow or broken steps	30 days
Notifications and their files, and this device’s notification address	To send you notifications	Files 30 days. The address until you turn notifications off or delete your account
Feedback you send from inside the app: your note, the screen you were on, and a screenshot if you add one	To fix what is wrong	Notes 180 days. A screenshot goes with its note
On the beta list: your email, and what you choose to add: your role (founder or small business, professional, freelancer or creator, developer, team lead, other), up to 3 things you would use Atlas for, how you could help (use it most days, give feedback, a 15-minute call, report bugs) and a short note of up to 280 characters	To pick testers, plan invites, send you an invite and ask how it is going. Nothing else	Until you ask us to remove it. Kept with your email in Atlas’s own database, never shown to an AI. Write to us and we delete it
A short log line for each request to Atlas: the time, the kind of page (never the real address), the result and how long it took. No user ID and no content	To find errors and slow routes	A sample is kept 14 days. The server’s own system logs are kept 30 days

Please do not put passwords, card numbers, bank numbers or government ID numbers into Atlas. Atlas never asks for them, its memory and task tools refuse to save them, and Atlas Shield hides them before text reaches the AI. If you type one into a document yourself, it is stored like anything else you write.

If Atlas quotes your email or calendar in a chat answer, that answer is saved in the chat like any other message. Atlas does not keep a full copy of your mailbox or calendar.

Where it lives

The database: Supabase, in the United States (North Virginia). It also holds your sign-in records and, if you send feedback with a screenshot, that screenshot in a private folder that only you can open; the person who runs Atlas can open it only through a logged look.
The server that runs Atlas: Oracle Cloud, in the United States (Ashburn, Virginia).
The way to Atlas: Cloudflare carries the traffic. The website, atlasiw.com, is served by Cloudflare Pages. The app, app.atlasiw.com, reaches the server through a Cloudflare Tunnel. Your requests pass through Cloudflare on the way.
Backups: a copy of the database is taken each night and kept 7 days in a folder only the backup account can read. A copy of the sign-in records is locked with a key that is not on the server and kept 7 days. Each Sunday, encrypted copies of both are also stored in a private Google Drive folder that belongs to the person who runs Atlas, and about the newest 4 weeks are kept. Older ones go to Drive’s trash, which empties after 30 days.

Who can see it

You. Every record carries your account, and the database itself only hands your records to you, even if the app asks for more by mistake.
People you share with. If you share a page, sheet, board or folder with someone, they see it with the access you gave, and you can take it back.
The person who runs Atlas. He has administrator access to the database and the server, because running them needs it. A small admin console shows usage, requests and feedback with email addresses partly hidden, and each look is written to a log. He does not read your content, except when you ask for help, when it is needed to keep Atlas secure or stop abuse, or when the law requires it.
The services in “Services Atlas uses” below, for the part of the job each one does.
Nobody else.

Google data

If you connect your Google account, Atlas asks Google for permission to use specific parts of it. You choose what to connect, and you can connect nothing and still sign in.

Sign in: your name and email address.
Calendar (see, add and change events): to show and plan your day, and to add events that only you are in.
Gmail (search and read mail; write drafts): to find and summarise mail, spot events, and draft replies. Atlas sends email only after you approve it, or under a standing yes you set.
Drive (only files you pick or Atlas made): to open files you choose and to save files Atlas makes. Atlas cannot see the rest of your Drive.

Atlas’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In plain words:

Google data is used only to give you the features you asked for in Atlas.
When a request needs it, the part it needs is sent to OpenAI so the AI can answer. That is the only place Google data goes, apart from the hosts listed on this page that store it for Atlas. OpenAI does not train on it (see “The AI models”).
Atlas does not sell Google data, does not use it for ads, and does not use it to train AI models.
People at Atlas do not read your Google data, except where you ask for help with a problem, where it is needed for security or to stop abuse, or where the law requires it.
By default, if you connect Gmail, Atlas reads new mail and the last 60 days for events, and adds the ones it is sure about to your calendar as events just for you, with Undo. Switch this off, or turn off just the automatic adding, in Settings.
Atlas keeps your Google access key encrypted, and keeps only the small records listed above, not a copy of your mailbox, calendar or Drive.
To stop: disconnect Google in Settings, which deletes the key and asks Google to cancel it. You can also remove Atlas in your Google Account’s security settings. Deleting your Atlas account does both.

The AI models

Atlas uses AI models from OpenAI: a fast, low-cost model for everyday work and a stronger one for deep thinking. OpenAI also does the voice features (turning speech into text and reading answers aloud), the picture maker, and the search behind Atlas’s memory.

What is sent. Your message, the recent messages in that chat, your name, the instructions Atlas gives itself, the memories that look relevant, and whatever a request needs from a tool: a calendar event, the text of a document, an email you asked about, a web page. Only what the request needs.

Atlas Shield hides private details first. At the Standard level it swaps card and bank numbers, SSNs, passwords, keys and one-time codes for stand-ins. At higher levels it also hides email addresses, phone numbers, street addresses and names. The AI works with the stand-ins and you see the real values. Shield cannot look inside pictures, and an unusual format can slip past it. A voice recording is turned into text before Shield reads it. Shield is on at the Standard level for every account. You can keep pictures from the AI in Settings.
Atlas asks OpenAI not to store its replies (store: false).
OpenAI’s own rule, as we read it on 2026-11-01: data sent to its API is not used to train its models unless the customer opts in, and Atlas has not opted in. OpenAI may keep abuse-monitoring logs for up to 30 days, or longer if the law requires. Read it yourself: OpenAI’s page on data and the API.
Atlas does not train AI models, and does not use anything you do in Atlas to train one.

Services Atlas uses

Only what a request needs is sent, and only when you use that feature.

Service	What it gets	Their rule
OpenAI	Answers, memory search, voice, pictures: your message and what Atlas needs to answer it, after Shield	See “The AI models” above
Google	Sign-in; and, only if you connect them, what you ask Atlas to do in Calendar, Gmail or Drive	Google’s privacy policy, and the Google section above
Apps you connect (Slack, Microsoft Outlook, Notion, GitHub, other apps and AI agents you add)	What you ask Atlas to read or do in them, and what they send back	Each app’s own terms and privacy policy
Tavily (web search)	Search words, and web addresses Atlas is asked to read. Atlas refuses to send searches that contain email addresses or phone or card numbers	Tavily’s privacy policy
MET Norway (weather)	Your home area, rounded to about 1 km	Public weather service
OpenStreetMap (town name)	Your home area, rounded to about 1 km, when you set or move your home. Never your name or account	OpenStreetMap Foundation’s Nominatim policy
Supabase	The database, your sign-in records, feedback screenshots, and the sign-in emails that carry your one-time code	Supabase’s privacy policy. Sign-in codes are sent through Supabase’s email service; we will update this page when Atlas’s own sender replaces it
Oracle Cloud	The server that runs Atlas, and the files it makes for you	Oracle’s privacy policy
Cloudflare	Serves the website (Cloudflare Pages), carries your traffic to the app (a Cloudflare Tunnel), the domain name, and a bot check when you sign up	Cloudflare’s privacy policy
Zoho Mail	Mail you send to Atlas’s addresses (hello@, privacy@, security@, support@)	Zoho’s privacy policy
Apple, Google or Mozilla push service	An encrypted notification for your device	They pass it on; they cannot read it

What we never do

Show you ads, or put ad or tracking code in the app. The website’s one measuring tool, Google Analytics, stays off until you click Accept (see “Website analytics”).
Sell, rent or trade your data, or give it to data brokers.
Train AI models on your data, or let the AI providers Atlas uses do it.
Read your Google data, your mail or your files for any reason other than the ones in this page.
Send anything to other people without your yes, given now or ahead of time.

Your choices and rights

Wherever you live, you can ask to see, fix, take or delete what Atlas has about you. Most of it you can do yourself in the app:

See and fix: everything you make is in the app, and you can edit it. Settings, What Atlas remembers, lists the facts Atlas keeps about you: keep, edit or forget any of them.
Take it with you: Settings, Privacy and data, Export my data.
Delete it: Settings, Privacy and data, Delete account. To wipe only what Atlas has learned about you, use Forget everything in About me, which appears together with Atlas Shield; you can bring it back for 30 days.
Say no: disconnect any app, turn off event-spotting, turn off notifications and, where Atlas Shield is shown, choose its level or keep pictures from the AI.

For anything the app does not cover, or if you have no account (for example the beta list), write to privacy@atlasiw.com. We will answer within 30 days.

If you live in California or another US state whose law gives you more rights over your personal information, those rights are yours too. Atlas does not sell or share personal information for advertising. We do not make promises about certifications we do not have.

Take your data with you

Settings, Privacy and data, Export my data. You get one file with everything stored for your account, in a format any program can read.

Left out on purpose: the encrypted keys of your connected apps (the apps are listed by name), one-time security codes, internal numbers, search indexes, and the bytes of pictures and files (their names and sizes are there). The file itself lists what was left out.

Delete your account

Settings, Privacy and data, Delete account.

At once: Atlas stops working for your account, deletes the keys of your connected apps and asks each app to cancel its key where the app allows that.
Within minutes: your account and every record it owns are deleted from the database.
Within a few hours: files Atlas made for you (like PDFs) are deleted from the server.
Backups made before that roll off: nightly copies in 7 days, weekly copies in about 4 weeks, and up to 30 days more in Drive’s trash. They are encrypted and not used for anything else.

You can also ask us to delete your data, or your place on the beta list, by writing to privacy@atlasiw.com.

Pause

An account can be paused during the beta, for example if something goes wrong. A paused account keeps its data; it just cannot be used until it is turned back on.

Security

Traffic to Atlas uses HTTPS, and the server talks to the database over an encrypted connection.
The keys your connected apps give Atlas are stored encrypted (AES-256-GCM), each tied to your account.
Every table in the database is locked by row-level security, so your records go only to you.
Anything that reaches other people needs a signed yes. The server checks the signature; the AI cannot sign for you.
The server runs Atlas without full administrator rights, takes sign-in only by key, and keeps the browser Atlas uses for you inside its own sandbox.
Sign-up has a bot check and rate limits. Admin actions need a second step and are logged.
Backups are encrypted before they leave the server, with a key that is not on it.

No system is perfectly safe. We keep a written plan for security incidents. If we find that your data was exposed, we will tell you promptly: as soon as we know what happened and who is affected, and within 72 hours of confirming it wherever a law sets that limit. We will say what happened, what was exposed and what you can do. To report a problem, write to security@atlasiw.com.

Other countries

For now the beta is open only to people in the United States. Atlas is run from the United States, and your data is stored and processed there. The services above may process it in other places under their own terms. Before Atlas opens to people in other countries, this page will say how their data is handled.

Children

Atlas is not for children. You must be at least 16 to use it. We do not knowingly keep data about anyone younger. If you think a child has an account, write to privacy@atlasiw.com and we will delete it.

Storage on your device and this website

The Atlas app sets no cookies, shows no cookie banner and has no analytics or trackers. The app keeps a few things on your device so it works:

Your sign-in, so you stay signed in.
Your preferences: light or dark, calendar view, sidebar width and folds, open tabs, list layouts and similar. Signing out clears the ones tied to your account.
Drafts and hand-offs for the length of a tab: an agent you have not saved, a pending invite, the step between Atlas and Google while you sign in.
An offline copy of the app itself and, if you turn them on, the address that lets Atlas send notifications.

The sign-up bot check loads from Cloudflare, which has its own rules. The website sets cookies only if you accept analytics (see “Website analytics” below). Apart from that tool, everything on it, including the font, loads from this site only. It remembers on your device, in local storage, your analytics choice, and, only if you pause the little helpers, that you did.

Website analytics

The marketing website, atlasiw.com, uses Google Analytics 4 to count visits. The app never does: there is no analytics in the app.

What it measures: which pages are visited, how people found the site, the country they are in and what kind of device they use.
Your choice first. A bar asks you to Accept or Decline. We use Google’s Consent Mode v2: analytics storage is denied until you click Accept, and ad storage, ad data and ad personalization are always denied. Nothing loads from Google and nothing is set on your device before you accept. If you decline, Google’s tag never loads.
Cookies, only after you click Accept: _ga and _ga_<ID>, kept up to 2 years. They tell visits apart by a random number, not by your name or your Atlas account.
What is not kept: your IP address (Google Analytics 4 does not log or store IP addresses). Google signals, ads features and ad personalization are switched off, and Atlas does not link a visit to an account.
Change your mind any time: choose “Cookie settings” in the footer of any page of the website. Declining after accepting removes the two cookies. Your choice itself is kept on your device (local storage).
Google is the processor of this data. See Google’s privacy policy and how Google uses information from sites that use its services.

Every cookie and stored item on the website:

Name	What it is for	Kind	How long
`_ga`	Google Analytics: tells visits apart by a random number. Only after you click Accept.	Cookie	2 years
`_ga_<ID>`	Google Analytics: keeps track of the current visit. Only after you click Accept.	Cookie	2 years
`atlas-consent`	Remembers whether you chose Accept or Decline.	Local storage	Until you clear it
`atlas-helpers-paused`	Remembers that you paused the little helpers. Only if you do.	Local storage	Until you clear it

Changes to this page

If this page changes in a way that matters, we will tell you in the app or by email before it takes effect. The date at the top says when it last changed.

Questions

Write to privacy@atlasiw.com. You can ask what Atlas keeps about you, ask for a fix, or ask for everything to be deleted. To report a security problem, write to security@atlasiw.com.

Atlas has no postal address. Contact is by email: privacy@atlasiw.com for privacy, hello@atlasiw.com for anything else.