RED Atlas Inc., a Puerto Rico corporation with offices at Forward Center, PR-18 & PR-21, San Juan, Puerto Rico 00927, and its affiliates (together, "RED Atlas," "we," "us") respect your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit atlas.red, use our web and mobile applications, the RED Atlas Platform, the RED Atlas API, or our AI Connectors, subscribe to our plans, or otherwise interact with us (together, the "Service"). For purposes of the laws of the European Economic Area ("EEA"), the United Kingdom, and similar laws, RED Atlas Inc. is the controller of the personal information described in this Policy.
What this Policy does not cover. Information about individuals who appear in our property database — such as property owners, parties to recorded transactions, and professional contacts — is not covered by this Policy; for questions about that information, write to privacy@atlas.red. Information about job applicants is described in the Privacy Policy — Recruiting. Where RED Atlas processes personal data on behalf of an Enterprise customer under a Data Protection Addendum, that addendum governs that processing.
1. Personal Information We Collect
Information you provide. Account and registration details (name, email address, password, organization, role); billing details (processed by our payment processors — RED Atlas does not store full card numbers); communications with us (support requests, feedback, survey responses); and any content you submit to the Service.
Information collected automatically. Usage and technical data, including IP address, device and browser type, operating system, language, pages viewed, features used, searches and queries run, reports generated, Credits consumed, log-in history, and approximate location derived from IP address. We collect some of this through cookies and similar technologies, described in our Cookie Notice.
Information from other sources. If you access the Service through an AI Connector or other integration, we receive the queries routed to us and account or token identifiers needed to authenticate you. We may also receive information from your organization (for example, the admin who assigned your Seat), from our payment processors (payment status), and from service providers that help us prevent fraud and abuse.
2. How We Use Personal Information
We use personal information to: provide, operate, and secure the Service and meter Credits (performance of our contract with you); process payments and manage subscriptions, renewals, and cancellations (performance of contract; legal obligation); communicate with you about the Service, including transactional and legal notices (performance of contract; legitimate interests); provide support and respond to requests (performance of contract); analyze, maintain, improve, and develop the Service, including debugging and usage analytics (legitimate interests); send marketing about RED Atlas products, with opt-out at any time and consent where required by law (legitimate interests; consent); enforce our Terms of Service and other agreements, including detecting and preventing scraping, credential sharing, and other misuse, and pursuing legal claims (legitimate interests; legal claims); comply with law, legal process, and lawful requests, subject to our Law Enforcement Data Request Statement (legal obligation); and protect the rights, property, safety, and security of RED Atlas, our users, and others (legitimate interests). Where we rely on consent, you may withdraw it at any time without affecting prior processing.
To opt out of marketing communications, use the unsubscribe link in any marketing email or contact privacy@atlas.red. You will continue to receive transactional and account communications.
3. AI Connectors
When you query the Service from within a third-party AI platform (for example, Claude, ChatGPT, Gemini, or Grok) using an authorized AI Connector, your prompt and the surrounding conversation are processed by that AI platform under its own terms and privacy policy — not this one. RED Atlas receives the query submitted to our systems, authentication identifiers, and technical metadata, and returns results to the platform. We do not control, and are not responsible for, how the AI platform processes, retains, or uses your conversations. Review the privacy policy of any AI platform you connect.
4. How We Disclose Personal Information
We disclose personal information to: our affiliates; service providers and subprocessors that host, support, secure, and operate the Service (cloud hosting, payments, analytics, communications, support tooling) under contracts limiting their use of the information; the organization that owns or administers your account (your account activity, Seat usage, and Credits consumption may be visible to your organization's administrator); professional advisors (lawyers, auditors, insurers) as needed; law enforcement, regulators, and other parties where required by law or legal process, handled per our Law Enforcement Data Request Statement; parties to a corporate transaction (merger, acquisition, financing, or sale of assets), subject to this Policy; and others with your direction or consent.
We do not sell personal information about our users, and we do not share it for cross-context behavioral advertising. Information about individuals in our property database is licensed to customers; those individuals may ask about the rights and choices available to them by writing to privacy@atlas.red.
5. Cookies and Similar Technologies
We use cookies and similar technologies as described in our Cookie Notice, which also explains the choices and consent mechanisms available to you (including for visitors from the EEA and UK) and how we respond to Global Privacy Control signals.
6. Retention
We retain personal information for as long as needed for the purposes described above, and then delete or de-identify it. Retention periods depend on: the duration of your account and any subscription; our legal, tax, and accounting obligations; the needs of security, fraud prevention, and abuse detection; and the establishment, exercise, or defense of legal claims (including preservation obligations in litigation). Usage records evidencing acceptance of terms and use of the Service may be retained for the duration of applicable limitations periods.
7. Security
We maintain administrative, technical, and physical safeguards designed to protect personal information against loss, theft, and unauthorized access, use, disclosure, and modification, appropriate to the nature of the information and our Service. No system is perfectly secure. Protect your credentials and notify us immediately of any suspected unauthorized use of your account. See our Security & Responsible Disclosure Policy for how to report vulnerabilities.
8. Your Rights and Choices
Depending on where you live, you may have rights to: access the personal information we hold about you and receive a copy in a portable format; correct inaccurate information; delete personal information; restrict or object to certain processing; withdraw consent where processing is based on consent; and not receive discriminatory treatment for exercising rights.
To exercise rights, contact privacy@atlas.red or write to us at the address above. We will verify your request (typically by confirming control of the account email; we may request additional information where necessary) and respond within the time required by applicable law. You may use an authorized agent where the law allows; we will require proof of the agent's authorization. If we decline a request, we will explain why, and where applicable law provides, you may appeal by replying to our decision or contacting privacy@atlas.red with "Appeal" in the subject line.
9. United States State Privacy Rights
California. If you are a California resident, the California Consumer Privacy Act as amended ("CCPA") gives you rights to know, access, correct, delete, and port your personal information, and to opt out of "sale" or "sharing." In the preceding 12 months we have collected the categories of personal information described in Section 1 (identifiers; commercial information; internet or other electronic network activity; approximate geolocation; professional information; and inferences drawn for service analytics) from the sources, for the purposes, and disclosed to the categories of recipients described above. We do not sell or share personal information about Service users as those terms are defined by the CCPA, and we do not use or disclose sensitive personal information other than to provide the Service. We do not knowingly sell or share the personal information of consumers under 16. Where required, we honor opt-out preference signals such as Global Privacy Control. California's "Shine the Light" law (Civil Code § 1798.83) permits you to request information about disclosures to third parties for their direct marketing; direct such requests to privacy@atlas.red with "California Privacy Rights" in the subject line. For rights regarding property and contact records about you in our products (including under the Delete Act), write to privacy@atlas.red.
Other U.S. states. Residents of states with comprehensive privacy laws (including Colorado, Connecticut, Texas, Virginia, and others) have similar rights of access, correction, deletion, portability, and opt-out, exercisable and appealable as described in Section 8.
10. EEA, United Kingdom, and Switzerland
If you are in the EEA, the UK, or Switzerland: our legal bases are identified in Section 2; where we rely on legitimate interests, you may object at any time and we will stop unless compelling legitimate grounds override, and you may object to direct marketing at any time without condition. You also have the right to lodge a complaint with your data protection supervisory authority (in the UK, the Information Commissioner's Office). We do not use your personal information to make automated decisions that produce legal or similarly significant effects about you.
11. Colombia
If you are in Colombia, we process personal data in accordance with Law 1581 of 2012 and its implementing decrees (and, for commercial and financial data, Law 1266 of 2008 where applicable). You have rights to know, update, rectify, and delete your personal data and to revoke authorization, exercisable through privacy@atlas.red. Complaints may be addressed to the Superintendencia de Industria y Comercio (SIC).
12. International Transfers
We are headquartered in Puerto Rico (United States) and process information in the United States and in other countries where we and our service providers operate, which may have different data-protection standards than your country. Where required, we use appropriate safeguards for cross-border transfers, including the European Commission's Standard Contractual Clauses and the UK addendum, as described in our Intra-Group Personal Data Protection Statement.
13. Children
The Service is intended for users eighteen (18) and older and is not directed to children. We do not knowingly collect personal information from children; if you believe a child has provided personal information, contact privacy@atlas.red and we will delete it.
14. Changes to This Policy
We will post changes to this Policy with an updated "Last Updated" date, and will provide additional prominent notice (such as email to account holders) of material changes before they take effect. Prior versions are archived at atlas.red/notices/archive.
15. Contact
Questions, requests, or complaints: privacy@atlas.red, or RED Atlas Inc., Attn: Privacy, Forward Center, PR-18 & PR-21, San Juan, Puerto Rico 00927, United States. You may also have the right to contact the supervisory or consumer-protection authority in your jurisdiction.
