Privacy Policy

Last updated: 2026-06-19

This Policy explains how Atlas processes personal data when you use the Service. We act as data controller for account data and as processor for the data your agency manages in its cabinet.

1. Data we process

Account data (name, email, role, security settings), usage and audit logs, and the business data your agency stores (e.g. leads, saved filters, branding). Market data is aggregated and not personal data.

2. Why we process it

To provide and secure the Service, authenticate users, send transactional email (invites, password resets, digests you enable), enforce plan limits and meet legal obligations. Legal bases: contract performance, legitimate interest and consent where applicable.

3. Sharing & sub-processors

We use sub-processors strictly to run the Service — e.g. cloud hosting, transactional email and (if you enable AI) the configured AI provider. Data sent for AI features is limited to the numeric metrics needed and is not used to train models. We do not sell personal data.

4. International transfers

Where data is processed outside the EEA, appropriate safeguards (e.g. Standard Contractual Clauses) are applied.

5. Retention

We keep data for as long as your account is active and per configured retention windows (raw events, sessions, notifications, audit logs), then delete or anonymise it. Backups are rotated on a defined schedule.

6. Your rights (GDPR)

You can access, rectify, export and erase personal data, and object to or restrict processing. Agency admins can export their tenant's full data as a ZIP and request deletion directly from the cabinet (Agency Admin → Data & privacy). For individual requests, contact sturox.company@gmail.com.

7. Security

We apply per-tenant isolation, encryption of sensitive secrets, optional MFA, rate limiting and access controls. No method is perfectly secure, but we work to protect your data.

8. Cookies & analytics

We use strictly necessary cookies for authentication (session) and CSRF protection. Any analytics used are privacy-friendly and cookieless.

9. Contact

Privacy questions or requests: sturox.company@gmail.com.