Privacy Policy

1. Information we handle

Account information. When you register with email and password, we store your email address, user ID, account name, account timestamps and a salted password hash. We do not store a readable copy of your password. Authentication also creates session records, including session tokens, expiration times and technical information used to protect access.

Google sign-in. If you use Google, we receive the identity information it supplies for authentication, which can include your Google account identifier, name, email address, verification status and profile image. Authentication identifiers and any provider tokens supplied for the sign-in flow may be processed or stored to operate your account. We do not receive your Google password or request access to your Gmail messages, contacts or Drive files for this feature.

Your workspace. Cloud saves include layout names, symbols, chart settings, indicators, drawings, notes, comparisons and other content included in the saved layout. An imported annotation image or information you type into a note can also become part of a save. Do not include broker passwords, account numbers or unnecessary sensitive details.

Waitlist and support. We store the email you submit, signup timestamp, consent version and launch-offer eligibility information. If you contact us, we process your message and any information or attachments you provide.

Technical information. Our servers and infrastructure providers may process request times, IP addresses, browser or device information, requested pages, errors and security events. Authentication rate limits and logs help detect abuse and troubleshoot problems. The current app does not request bank details or payment-card information.

2. Why we use information

We use account and session information to sign you in, secure your account and distinguish your saved charts from another user's. We process workspace content to save, retrieve, synchronize and display the layouts you request. We use waitlist information to manage invitations and the advertised launch offer, and support information to respond to you.

We also use necessary technical information to maintain the Service, investigate failures, limit misuse and meet legal obligations. We do not use account details or saved chart content for targeted advertising, and we do not sell personal information. We do not currently add advertising pixels or a separate behavioral-analytics tracker to the app or waitlist.

Where data-protection law requires a lawful basis, processing may be necessary to provide the Service you request, pursue legitimate interests in security and reliable operation, comply with law, or act on consent such as your waitlist email opt-in. Where processing relies on consent, you can withdraw it without affecting processing already carried out lawfully.

3. Cookies and browser storage

Authentication uses cookies to keep a session connected to your account. Atlas session cookies are HttpOnly, so ordinary page scripts cannot read them. With “Remember me” checked, the login cookie can persist for up to seven days and may be renewed during use. Unchecked, the cookie is intended for the browser session; browser session-restoration settings can affect how long it remains. Signing out ends that session.

The app also uses browser storage for preferences, locally saved layouts and cached market information. Signed-in cloud layout saves are associated with your account in the database; signing out does not erase existing browser layouts or files you exported. Clearing browser storage does not delete cloud records.

The Google sign-in component may load on the login page to offer that option and may set or read its own cookies. Google processes information under its own policy. Blocking authentication cookies can prevent login and cloud saving. You can manage cookies in your browser, but some features will stop working.

4. Service providers and other disclosures

Cloudflare hosts the public waitlist, authentication backend and D1 databases and provides network and security services. Google supplies optional sign-in and, on pages that load Google Fonts, font delivery. Loading these third-party resources can disclose technical information such as your IP address and browser details to those providers.

Market-data suppliers receive symbol, expiration and other data requests needed to provide the charts or options you request. The current market-data integration does not send them your Atlas account email, password or complete saved layout. Their handling of requests is subject to their own practices.

Authorized operators and service providers can access information where needed to run, support or secure the Service. We may disclose information where reasonably necessary to comply with applicable legal requirements, protect people or systems, or establish or defend legal rights. Cloud-saved layouts and the waitlist are not published for other users to browse. Downloading or sharing an export yourself can disclose its contents to its recipient.

For provider information, see Cloudflare's privacy policy and Google's privacy policy.

5. Storage, security and international processing

Public Cloudflare endpoints and requests from the local backend to Cloudflare use HTTPS. D1 provides encryption at rest and encryption for its network transport. Passwords are hashed, and cloud-layout access is checked against the signed-in user. These safeguards reduce risk but cannot guarantee absolute security.

The current local development app uses an HTTP connection to a server bound to your own computer's loopback interface. Its session cookie is translated for local use; cloud connections remain HTTPS. Cloud layouts are not end-to-end encrypted, and authorized administrators can access database records.

Providers may process or store information in countries outside your own. Where applicable law requires safeguards for international transfers, appropriate arrangements must apply. This policy does not promise storage exclusively in a particular country or imply a security or compliance certification.

6. How long information is kept

We retain account and cloud-workspace records while needed to provide your account and saved layouts, subject to valid deletion requests and any necessary legal or security retention. Waitlist records are kept to manage invitations and offer eligibility unless you request removal or they are no longer needed for that purpose. Support and technical records may be retained as necessary for their operational, security or legal purposes.

Session validity is limited, but an expired session does not itself delete an account or its charts. Backups and provider recovery systems can retain copies for their applicable retention periods. Information on your own device remains until you remove it or clear browser storage. We have not implemented a universal automatic deletion schedule or a self-service account-deletion screen.

7. Your choices and privacy requests

You can choose whether to use Google sign-in, enable “Remember me”, save to the cloud or export a layout. You can ask us to remove a waitlist signup or stop invitation emails by contacting info@atlastrader.ai. Account-verification and password-reset emails are not enabled in the current release.

Depending on your location and applicable law, you may have rights to access or obtain a copy of personal information, correct it, request deletion, restrict or object to processing, withdraw consent, or complain to a relevant supervisory authority. These rights can have legal exceptions. Contact us to make a request; we may need to verify your identity before acting. Never send your password or Google credentials in a privacy request. We will handle requests under the requirements that apply to us and will not discriminate where the law prohibits doing so.

8. Children and changes to this policy

Atlas Trader is intended for adults who can lawfully use the Service, not children. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

We may update this policy when the product or its data practices change. The date above identifies the current version. We will provide additional notice and obtain consent where applicable law requires it.

9. Contact

Send privacy questions and requests to info@atlastrader.ai. Please identify the Atlas account or waitlist email involved and describe the request without including passwords or unnecessary sensitive information.