Privacy Policy

Last updated: 1 May 2026

If you have questions about this policy, contact us at contact@atlasassistantai.com.

Atlas Assistant ("Atlas", "we", "us") is operated by Oniros Software. This policy explains what data we collect when you use Atlas, how we use it, the legal basis for processing, who we share it with, and the rights you have under the General Data Protection Regulation (GDPR).

1. What we collect

2. Why we collect it

We process this data for one purpose: providing the Atlas Assistant service you signed up for. The legal basis under GDPR is contract fulfilment — we need this data to deliver the service you've contracted us for.

3. Where it's stored

Account data and stored memories live on EU-based infrastructure (Supabase EU region). All data is encrypted at rest and in transit. Vector embeddings are stored on EU-based infrastructure. Conversation messages in flight are processed but not persisted beyond the short-term context window described above.

4. How long we keep it

5. Who we share it with

We share data only with service providers that are essential to running Atlas, and only the minimum required:

We do not sell your data, share it with advertisers, or use it for marketing.

6. Your rights

Under GDPR you have the right to:

The fastest way to exercise these rights is through the dashboard: the "Delete my account" button removes everything. For everything else, email contact@atlasassistantai.com and we'll respond within 30 days.

7. Cookies

This website does not use cookies. We use sessionStorage in your browser tab to keep you signed in for the duration of the session — this data never leaves your device.

8. Changes to this policy

If we make material changes, we'll update the "Last updated" date and notify you by email if you have an active account. Continued use of Atlas after a change constitutes acceptance of the updated policy.

9. Contact

For any privacy-related question, write to contact@atlasassistantai.com. You also have the right to lodge a complaint with your local data protection authority.