Privacy Policy

Account Information. When you create an account, we collect your name, email address, and authentication credentials (managed via Clerk).

Content You Upload. Documents, files, and data you upload for processing. This may include text, code, images, and metadata.

Usage Data. We automatically collect information about how you use the Service, including: pages viewed, features used, ingestion activity, MCP endpoint access patterns, API calls, timestamps, and IP addresses.

Payment Information. Payment details are processed by Stripe. We do not store full credit card numbers on our servers.

API Keys (BYOK). If you provide third-party API keys, we store them encrypted at rest and use them solely to make API calls on your behalf.

• To provide, maintain, and improve the Service.
• To process your documents through AI models and generate wiki content.
• To manage your account, billing, and support requests.
• To monitor usage for billing, rate limiting, and abuse prevention.
• To send transactional communications (account, billing, security alerts).
• To analyze aggregated, anonymized usage patterns to improve the Service.

Your uploaded content is sent to third-party AI model providers (currently Anthropic) to generate wiki pages. These providers process your data according to their own privacy policies and data handling agreements. We use API access (not consumer products), which typically means your data is not used to train their models. We recommend reviewing Anthropic’s privacy policy for details.

We do not sell your personal information. We share data only:

• With service providers who help operate the Service (hosting, payment processing, AI model providers), under appropriate data processing agreements.
• With your workspace members who have access to shared wikis.
• Via MCP endpoints you configure — anyone with your MCP URL can read wiki content.
• As required by law — in response to valid legal process or to protect rights, safety, or property.
• In a business transfer — in connection with a merger, acquisition, or sale of assets, with notice to you.

Your data is stored on infrastructure hosted by Railway (backed by Google Cloud Platform). We use encryption in transit (TLS), access controls, and other reasonable security measures. However, no method of transmission or storage is 100% secure.

We retain your data for as long as your account is active. Upon account deletion, we delete Your Content within 30 days, except where retention is required by law or necessary for legitimate business purposes (e.g., billing records).

Anonymized, aggregated analytics data may be retained indefinitely.

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate personal information.
• Delete your personal information and account.
• Export your data in a portable format.
• Object to or restrict certain processing.

To exercise these rights, contact us at privacy@atlas4.ai.

We use essential cookies for authentication and session management. We may use analytics tools to understand usage patterns. We do not use third-party advertising trackers.

Your data may be processed in countries other than your own, including the United States (where our infrastructure providers operate). We rely on appropriate safeguards for international data transfers.

The Service is not directed to individuals under 18. We do not knowingly collect personal information from children.

We may update this Privacy Policy periodically. Material changes will be communicated via email or in-app notice. The “Last updated” date at the top indicates the most recent revision.

Questions or concerns? Contact us at privacy@atlas4.ai.