Last updated 19 October 2026

Privacy notice

In short: Atlas keeps very little about you: your licence key, the email from your purchase, and how many credits and AI requests you've used. It doesn't use advertising or tracking cookies. What you type into the search is sent to an AI service to read the request, so don't include personal details.

1. Who looks after your data

[Company name] ([company number], [registered address]) is the controller of personal data processed through Atlas. Contact us at [support email].

2. What we collect and why

• Your licence key and purchase email, from Gumroad when you buy or sign in. We use them to check your purchase, give you access and contact you about your account. Legal basis: performing our contract with you.
• Usage counts: credits and AI requests used each month, and your remaining balance. Used to run your plan and prevent misuse. Legal basis: contract and legitimate interests.
• A one-way code made from your IP address, only if you use the free tier, to apply the daily free AI limit. We can't turn it back into your IP address, and it is deleted after 2 days. Legal basis: legitimate interests (preventing abuse).
• What you type into Atlas, for example "rooftop bar for 25 to 34s in Leeds". It's sent to an AI provider to produce your report and isn't stored by Atlas, except that keyword and place lookups are cached for 30 days without any link to you. Please don't type personal information about anyone.
• Messages you send us, to answer them.

3. What stays in your browser

Atlas remembers your key and some settings, such as your shortlist, in your browser's local storage so you stay signed in. You can clear this by signing out or clearing your browser data. We don't use advertising or analytics cookies.

4. Who we share data with

We use these providers to run Atlas. They process data for us under their own terms and data protection commitments:

• Cloudflare: hosting and storage of keys and usage counts.
• Gumroad: payments and licence keys.
• AI providers (Anthropic, and OpenAI or Google if enabled): reading requests and writing summaries.
• DataForSEO: keyword search data for live reports. Only keywords and place names are sent.
• Google Maps: competitor lookups for live reports. Only the search term and location are sent.

Some providers are based outside the UK and EU, including in the United States. Where data is transferred, it is protected by the safeguards the law requires, such as standard contractual clauses or adequacy decisions. We never sell your data.

5. How long we keep it

• Account details and usage: while your key is active, then for up to [6 years] for tax and accounting records.
• Monthly usage counters: about 70 days.
• Free-tier IP codes: 2 days.
• Cached lookups: 30 days, with no link to you.

6. Your rights

Under UK and EU data protection law you can ask to see, correct or delete your data, object to or restrict how we use it, or move it to another service. Email [support email]. If you're unhappy with our answer, you can complain to the Information Commissioner's Office (ico.org.uk) or your local data protection authority.

7. Changes

We'll update this notice when how we use data changes, and show the date at the top.