Privacy & Data Use Policy

Last updated: February 1, 2026

This Policy explains what data Atlas Construction collects, how we use it, who we share it with, and the choices you have.

1. What We Collect

Account Information

• Email address, name, company, password (stored as a one-way hash, never in plaintext)
• Subscription tier and billing identifiers from Stripe (we do not store credit card numbers; Stripe handles them directly)

Project & Usage Data

• Project metadata (name, address, site location lat/lng)
• Documents you upload (blueprints, PDFs, photos)
• Materials, blueprints, bids, daily logs, pay-apps, and support messages you create
• AI prompts and responses generated on your behalf
• Application logs (which features you use, error reports) to improve the Service

Technical Data

• IP address, browser, device type (for security and analytics)
• Cookies and similar technologies (see Section 6)

2. How We Use It

• To operate the Service: render dashboards, run AI extractions, generate documents, process payments
• To send transactional and support emails (account verification, billing receipts, support replies, optional daily digest)
• To improve and secure the Service (debugging, fraud detection, abuse prevention)
• To comply with legal obligations (tax records, lawful requests from authorities)
• We do NOT sell your data. We do NOT train external AI models on your User Content.

3. AI Processing

When you use AI features (PDF extraction, code-compliance check, AI CAD generation, building-height estimation, etc.):

• Your uploads or prompts are sent to OpenAI's API and processed under OpenAI's enterprise data terms.
• OpenAI does not retain or train on data submitted via API calls (per OpenAI's stated policy as of the date of this document).
• AI outputs are stored in your project for your access.

4. Third Parties We Share With

We share data only with service providers strictly necessary to operate the Service:

We do not sell or rent personal data to third parties for advertising.

5. Data Retention

• Active accounts: data retained for the life of the account
• Deleted accounts: User Content deleted within 30 days; backup snapshots purged within 90 days
• Billing records retained 7 years for tax/legal compliance
• Application logs retained 90 days

6. Cookies

We use first-party cookies and localStorage to:

• Keep you signed in (JWT token)
• Remember UI preferences
• Measure feature usage (no third-party advertising trackers)

You may clear cookies at any time, but you will be signed out.

7. Your Rights

You have the right to:

• Access your data (export from Settings)
• Correct inaccurate data (edit in-app or contact support)
• Delete your account and associated data (Settings → Delete Account or via Support)
• Restrict or object to certain processing
• Portability: receive your data in a machine-readable format

To exercise any right, use the in-app Support chat or email gonzo.ai.labs@gmail.com. We will respond within 30 days.

If you are in the EU/EEA/UK, you may also lodge a complaint with your supervisory authority.

If you are in California (CCPA/CPRA), you may request the categories of personal information collected and to whom it was disclosed in the past 12 months.

8. Children's Privacy

The Service is not directed to children under 13 (or 16 in the EU). We do not knowingly collect data from children.

9. Security

We use industry-standard safeguards: TLS in transit, encryption at rest, password hashing, role-based access controls, and least-privilege internal access. No system is 100% secure; please use a strong unique password.

10. International Transfers

Atlas may process data in the United States. By using the Service you consent to such transfers. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.

11. Changes to This Policy

We may update this Policy. When we make material changes, we will bump the version and require you to re-accept on next login.

12. Contact

Questions or requests? Use the in-app Support chat or email gonzo.ai.labs@gmail.com.