AtlasXT Privacy Policy

AtlasXT LLC (“AtlasXT,” “we,” “us,” or “our”) respects privacy and is committed to protecting information processed through our Services.

This Privacy Policy explains how AtlasXT collects, accesses, uses, stores, shares, retains, and deletes information through the AtlasXT websites, applications, software, APIs, integrations, and related services.

1. Information We Collect

Depending on how you use the Services, AtlasXT may collect the following categories of information.

Account and Identity Information

This may include:

• name;
• email address;
• telephone number;
• organization;
• job title;
• username;
• account identifiers;
• authentication information; and
• enterprise identity information.

Customer Content

Customers may provide or import:

• contacts;
• organizations;
• business relationship information;
• projects;
• records;
• notes;
• documents;
• files;
• spreadsheets;
• workflows;
• dashboards;
• reports;
• communications;
• templates; and
• other business information.

Technical and Usage Information

AtlasXT may collect:

• IP address;
• browser type;
• device information;
• operating system;
• application version;
• login information;
• authentication events;
• usage information;
• security events;
• error information;
• performance information; and
• application diagnostics.

2. Google Data

AtlasXT provides an optional Google integration. Additional detail is available in the AtlasXT Google Data Use Disclosure.

Access

When you authorize the integration, AtlasXT may access Google information necessary to provide the functionality you request, including:

• Google Sheets selected for import;
• spreadsheet names;
• spreadsheet identifiers;
• spreadsheet structure, cell values, and metadata necessary for importing selected information;
• OAuth authorization information;
• access tokens; and
• refresh tokens where applicable.

AtlasXT’s Google Sheets importing functionality is read-only.

AtlasXT does not use the Google integration to modify, overwrite, or delete the source Google Sheet.

Storage

Google Sheets information that you select for import may be copied into AtlasXT’s hosted environment and stored as Customer Data so it can be displayed and used within the Services.

AtlasXT does not retain ongoing live access to Google Sheets content beyond what is needed to perform authorized imports and maintain the connection you request.

Use

Imported Google Sheets data may be used to:

• complete the import you request;
• display and organize the imported information in AtlasXT;
• support features that operate on Customer Data within the Services;
• provide customer support and troubleshooting when reasonably necessary; and
• maintain security and integrity of the Services.

AtlasXT does not use Google Sheets data for advertising, selling, or other purposes prohibited by Google’s Limited Use requirements.

Deletion

You may request deletion of Google Sheets–derived information stored in AtlasXT, subject to applicable law, contractual requirements, backups, legal holds, and other lawful retention needs described in Section 11.

Disconnecting Google stops future authorized API access but does not automatically delete Google Sheets information already imported into AtlasXT. Separate deletion of that imported Customer Data may be requested.

3. OAuth Tokens

Access and storage

When you authorize Google, AtlasXT may receive OAuth access tokens and refresh tokens (and related authorization information) from Google.

AtlasXT stores those tokens as reasonably necessary to maintain the authorized Google connection and to perform the Google Sheets importing functionality you request.

Use

OAuth tokens are used only to authenticate AtlasXT’s authorized API requests to Google on your behalf, maintain the connection, and provide the Google integration features you request.

AtlasXT does not sell OAuth credentials and does not use OAuth tokens for advertising or unrelated commercial purposes.

Deletion and revocation

When you disconnect the Google integration in AtlasXT, or revoke AtlasXT’s access through your Google account, AtlasXT will stop making new authorized Google API requests (subject to processing already initiated) and will delete or invalidate stored Google OAuth access and refresh tokens from active systems as reasonably practicable.

Token deletion or revocation does not automatically delete Google Sheets information previously imported into AtlasXT.

4. How We Use Information

AtlasXT may use information to:

• provide and operate the Services;
• authenticate users;
• maintain accounts;
• provide authorized integrations;
• import, store, and display Google Sheets information you select;
• maintain authorized Google connections using OAuth tokens;
• provide customer support;
• troubleshoot;
• maintain security;
• detect and prevent fraud or abuse;
• maintain backups and disaster recovery;
• send requested communications;
• process payments;
• comply with legal obligations;
• enforce agreements; and
• create aggregated, statistical, de-identified, or anonymized information that does not reasonably identify a person or Customer.

5. Google User Data Limited Use

The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

AtlasXT’s use of information obtained through Google APIs is subject to the Google API Services User Data Policy, including its Limited Use requirements.

AtlasXT uses Google user data only for purposes disclosed to users and permitted under applicable Google policies.

AtlasXT does not sell Google user data.

AtlasXT does not use Google user data for advertising or targeted advertising.

AtlasXT does not transfer Google user data to data brokers or information resellers.

AtlasXT does not use Google user data for creditworthiness, lending, or substantially similar prohibited purposes.

Google user data is not transferred to third parties except where the transfer is permitted under applicable Google requirements and reasonably necessary to provide the authorized user-facing functionality, protect security, comply with law, or otherwise fall within a permitted use.

Google’s current policy specifically restricts transfers and uses of Google user data and requires developers to accurately disclose access, use, storage, and sharing.

6. Service Providers

AtlasXT uses service providers to operate the Services.

These include:

Amazon Web Services

Hosting, databases, file storage, infrastructure, security, and logging.

Google

Account authorization and Google Sheets access.

Twilio and SendGrid

SMS and email notifications.

OpenRouter and applicable model providers

Optional user-initiated AI functionality.

Microsoft Entra ID or another customer-selected identity provider

Optional enterprise single sign-on.

Logflare

Application diagnostics and logging.

AtlasXT requires service providers to process information only for authorized purposes applicable to the services they provide.

7. AI Processing

AI functionality is optional and user-initiated.

When you intentionally invoke an AI feature, AtlasXT may transmit content selected or submitted by you to OpenRouter and the applicable AI model provider.

AtlasXT does not send all stored Customer Data to AI providers merely because that information is stored in AtlasXT.

You are responsible for determining what information you submit to AI functionality.

8. When We Share Information

AtlasXT may disclose information:

• to service providers providing services to AtlasXT;
• at the direction of Customer or an authorized user;
• to provide requested integrations;
• to comply with applicable law;
• in response to valid legal process;
• to protect rights, safety, or security;
• to detect or prevent fraud or abuse;
• to enforce agreements; or
• as part of a merger, acquisition, financing, restructuring, bankruptcy, reorganization, or sale of assets.

AtlasXT does not sell personal information for advertising purposes.

9. Security

AtlasXT maintains reasonable administrative, technical, and organizational safeguards designed to protect information from unauthorized access, use, alteration, loss, or disclosure.

No Internet transmission, cloud service, or electronic storage system can guarantee absolute security.

10. Retention

AtlasXT retains information for as long as reasonably necessary to:

• provide the Services;
• fulfill contractual obligations;
• maintain security;
• prevent fraud and abuse;
• comply with legal obligations;
• resolve disputes;
• enforce agreements;
• maintain backups; and
• perform other lawful business purposes.

Retention periods may vary depending on the type of information and applicable requirements.

11. Deletion

You may request deletion of applicable personal information or Customer Data, including Google Sheets information imported into AtlasXT, subject to applicable law and contractual requirements.

For Google OAuth tokens, disconnection or revocation is treated as described in Section 3: AtlasXT will delete or invalidate stored Google access and refresh tokens from active systems as reasonably practicable after the Google integration is disconnected or authorization is revoked.

AtlasXT may retain information where reasonably necessary for:

• legal obligations;
• security;
• fraud prevention;
• dispute resolution;
• legal holds;
• backups;
• accounting;
• enforcement; or
• other lawful purposes.

Deletion from active systems may not immediately remove information from backup systems, disaster-recovery systems, or immutable security logs.

12. Disconnecting Integrations

You may disconnect an integration through the applicable AtlasXT functionality or by revoking authorization through the applicable third-party service (including Google account settings for the Google integration).

Disconnecting an integration stops future authorized access. For Google, stored OAuth tokens are deleted or invalidated from active systems as described in Section 3.

Disconnecting an integration does not automatically delete information already imported into AtlasXT, including previously imported Google Sheets data. You may request deletion of that imported Customer Data under Section 11.

13. Privacy Rights

Depending on applicable law, individuals may have rights concerning their personal information, including rights to:

• confirm whether personal information is processed;
• access personal information;
• correct inaccurate personal information;
• request deletion;
• obtain a portable copy;
• opt out of certain processing; and
• exercise other rights provided by applicable law.

For example, Utah law currently provides specified rights of access, deletion, portability, correction, and certain opt-out rights to consumers covered by the Utah Consumer Privacy Act.

AtlasXT may require reasonable information to verify a request.

Where AtlasXT processes information solely on behalf of a Customer, AtlasXT may direct the individual to the applicable Customer because the Customer may be the party responsible for responding to the request.

14. International Processing

AtlasXT and its service providers may process information in the United States and other jurisdictions where AtlasXT or its service providers operate.

15. Children’s Privacy

The Services are intended primarily for organizations and business users.

AtlasXT does not knowingly collect children’s personal information where prohibited by applicable law.

16. Regulated Information

Unless expressly agreed in writing, AtlasXT does not represent that the Services are designed to process every category of regulated or highly sensitive information.

Customers are responsible for determining whether the Services satisfy their applicable regulatory requirements.

17. Changes to This Privacy Policy

AtlasXT may update this Privacy Policy from time to time.

Material changes may be communicated through the Services, website, or email where appropriate.

The updated version will identify its effective date.

18. Contact

AtlasXT LLC

Utah, United States

Website: https://atlasxt.com