Privacy Policy

1. What Atlas Is

Atlas is a personal productivity assistant that connects to your Google Calendar and Gmail to help you manage your schedule, emails, notes, and reminders. Atlas is built on the Lovable platform.

2. Who Processes Your Data

We do not process your data ourselves. Atlas is powered by Lovable AI, which handles data processing on our behalf. When you use Atlas, your data is processed through Lovable's secure infrastructure. We do not run our own servers or data-processing pipelines.

For details on how Lovable processes data, please refer to the Lovable Privacy Policy.

3. What Data We Access

Atlas accesses only the data you explicitly authorize through Google OAuth:

• Google Calendar — read events and create new events on your behalf.
• Gmail — read emails to generate summaries and compose draft replies; send emails when you explicitly approve.
• Profile info — your name and email address to identify your account.

We do not access, store, or process passwords, payment information, or any data from services you have not connected.

4. How We Use Your Data

Your data is used solely to provide Atlas features:

• Generating daily briefings from your calendar and inbox.
• Creating reminders and scheduling events.
• Drafting email replies in your tone.
• Sending you reminder emails at times you request.

We do not sell your data, use it for advertising, or train general AI models on your content.

5. Data Storage & Security

Your data is stored in Lovable's managed backend infrastructure, which uses industry-standard encryption at rest and in transit. Access is protected by Row-Level Security (RLS) policies, meaning your data is isolated from other users.

Google OAuth tokens are stored encrypted and are only used to perform actions you explicitly request.

6. Data Retention & Deletion

We keep your data for as long as you have an active Atlas account. You can delete your account and all associated data at any time from your dashboard settings. Upon deletion, your data is permanently removed from our systems within 30 days.

7. Your Rights

You have the right to:

• Access the data we hold about you.
• Correct inaccurate data.
• Delete your account and all associated data.
• Withdraw Google OAuth access at any time via your Google Account settings.

8. Contact

For privacy-related questions or data requests, contact us at: privacy@nordatlas.io