Privacy
Atlas Thread Privacy Policy
Atlas Thread is a consumer application that helps people organize personal records into a private, source-backed memory. This policy explains the information we collect, why we use it, who receives it, and the controls available to you. It applies to Atlas Thread websites, applications, and connected services.
Information we collect
- Account and profile information, such as your email address, authentication state, profile details, and security metadata.
- Records and content you choose to provide, including uploaded documents, notes, extracted events, timelines, summaries, stories, and chat content.
- Operational information needed to deliver and secure the service, such as job state, request identifiers, model usage, and non-content diagnostics.
- Financial information you explicitly authorize through a connected provider, such as institution and account metadata, balances, and transactions.
Atlas Thread does not receive or store the online banking username and password you enter in a financial provider's connection flow.
How we use information
We use information to provide the features you request, authenticate and protect your account, build and update your private memory, respond to support or privacy requests, prevent abuse, diagnose service failures, and meet legal obligations. We do not sell personal information or use your records to train Atlas Thread models.
Connected financial accounts and Plaid
If you choose to connect a financial account, Atlas Thread uses Plaid Inc. ("Plaid") to let you select an institution and authorize the specific financial data made available to Atlas Thread. Plaid's handling of information is governed by the disclosures shown in Plaid Link and by Plaid's End User Privacy Policy.
Connecting an account is optional. Atlas Thread requests financial data only for the money-memory features shown to you. You may disconnect a linked institution and request deletion of imported financial data. Disconnecting stops future retrieval; deleting the related data removes it from active product systems subject to the backup, legal, security, and audit limits described below.
AI processing
AI features are optional and run when you request an AI-assisted workflow. The relevant bounded context is sent through Atlas Thread to the configured model provider over encrypted connections. Supported model calls disable provider-side request and response storage. Atlas Thread does not send Plaid credentials or Plaid access tokens to model providers. Financial data is not included in an AI request unless the product clearly presents that financial workflow to you.
Service providers
We use service providers for cloud hosting, storage, security, email delivery, AI processing when requested, and financial connectivity when authorized. Providers receive only the information needed for their service and are subject to applicable contracts and provider terms. We may also disclose information when required by law, to protect users or the service, or in connection with a corporate transaction subject to appropriate safeguards.
Security
Atlas Thread uses controls including encrypted transport, managed encryption at rest, multi-factor authentication in production-like environments, least-privilege service identities, profile-scoped access controls, secrets management, and structured security audit events. No system can guarantee absolute security, but we design controls to reduce unauthorized access and limit the impact of a failure.
Retention and deletion
We retain account data, records, derived memory, and authorized financial data while your account is active and the data is needed to provide features you keep enabled. You can delete records, reset generated memory, disconnect financial institutions, and permanently delete your account using product controls or by contacting us. Deletion removes or de-identifies data from active systems, while limited copies may remain until backup expiration or where needed for security, fraud prevention, legal obligations, disputes, or retention-protected audit evidence. We review this policy and the underlying retention schedule at least annually and after material changes.
Your choices
- Choose whether to upload records, use AI features, or connect a financial institution.
- Review and revoke a remembered device from Account > Security & sign-in.
- Delete individual records, generated memory, connected financial data, or your account.
- Ask for access, correction, export, or deletion by contacting us.
Children
Atlas Thread is not directed to children under 13, and we do not knowingly collect personal information directly from a child under 13 without legally valid authorization.
Changes to this policy
We may update this policy as the product, providers, or legal requirements change. We will update the date above and provide additional notice when a change is material.
Contact
For privacy, security, access, correction, or deletion questions, contact privacy@atlasthread.ai.