Privacy Policy
Last updated: May 22, 2026
Your business knowledge is the reason Atlas exists — and protecting it is central to how we operate. This policy describes what we collect, why, and the choices you have.
In short: we don't sell your data, we don't train shared models on your workspace content, and you can export or delete your data at any time.
1. Overview
This Privacy Policy explains how Commonwealth Creative ("Atlas," "we," "us") collects, uses, and protects information when you use our website and products. It applies to visitors, account holders, and the authorized users of a customer workspace.
We designed Atlas so that your business knowledge stays yours. We act as a processor of the data you connect, and we do not use your workspace content to train models shared with other customers.
2. Information We Collect
We collect information in three ways: what you provide, what you connect, and what we observe.
2.1 Information you provide
Account details such as your name, work email, company, and password when you create an account, and any messages you send us.
2.2 Connected data
When you connect a tool, Atlas ingests the documents, records, and metadata you authorize in order to build your knowledge layer. You control which tools are connected and can disconnect them at any time.
2.3 Usage information
We collect logs, device and browser information, and product analytics to operate, secure, and improve the service. On this marketing site and the pre-signup setup pages we also use Google Analytics and the Meta pixel to measure how people find Atlas and to reach people who started signing up; neither runs inside the signed-in product, and you can opt out of interest-based advertising through your browser and the ad platforms' own controls.
3. Google User Data
If you connect a Google account to Atlas, this section describes exactly what Atlas accesses and what it does with it. It applies in addition to everything else in this policy.
3.1 What Atlas accesses
Atlas asks for one Gmail permission, read-only (gmail.readonly). With it, Atlas reads the messages in the mailbox you connect: the sender, recipients, subject, date, message body, and the text of attachments. Atlas cannot send mail, reply, delete, archive, label, or mark anything as read, and it does not access your contacts, calendar, or any other Google service through this permission.
Reading starts from the moment you connect and covers new mail from then on. Atlas does not read your mailbox's history unless you forward it.
3.2 How Atlas uses it
Mail is read for one purpose: to keep your own knowledge base current. Atlas files each message in your knowledge base, notes what it learned with the message as its source, and uses that to answer questions you or your customers ask and to propose work you can accept or decline. Atlas does not use Google user data to train models that serve anyone else, to build profiles, or for advertising of any kind.
3.3 How it is stored and who can see it
Your mail is stored in your own private knowledge base on our servers, in an isolated environment that belongs to your account alone, encrypted at rest and in transit. The access token Google issues is encrypted at rest and used only to read your mailbox on your behalf.
No person at Commonwealth Creative reads your Google user data except when you ask for support and consent to it for that request, or when it is necessary to investigate abuse or a security incident, or when required by law.
3.4 Sharing
Google user data is never sold, never shared with advertisers or data brokers, and never transferred to third parties, except to the infrastructure providers that host the service under contract, and to authorities where legally compelled.
3.5 Retention and deletion
You can disconnect Gmail at any time from your mailbox page inside Atlas, or by removing Atlas from your Google Account's third-party access settings; either stops all reading and Atlas discards the access token. What Atlas already filed stays in your knowledge base, which is yours to edit, download, or delete at any time. Deleting your Atlas account deletes your knowledge base and every token with it within 30 days.
3.6 Limited Use
Atlas's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
4. How We Use Information
We use information to provide and secure the service, to respond to support requests, to comply with legal obligations, and to improve product quality.
- •Deliver core functionality: retrieval, automation, and answers grounded in your data
- •Authenticate users and protect against fraud and abuse
- •Provide customer support and service communications
- •Analyze aggregate, de-identified usage to improve the product
5. How We Share Information
We do not sell your personal information. We share information only with subprocessors who help us run the service, when required by law, or with your direction (for example, an integration you enable).
- •Infrastructure and hosting providers under contract
- •Payment processors for billing
- •Analytics and error-monitoring services on aggregate data
- •Authorities where legally compelled, with notice where permitted
6. Data Retention
We retain workspace data for as long as your account is active and as needed to provide the service. When you delete content or close your account, we delete or de-identify associated data within a commercially reasonable period, subject to legal retention requirements.
7. Your Rights and Choices
Depending on your location, you may have rights to access, correct, export, or delete your personal information. Workspace administrators can manage most data directly from the product; for anything else, contact us and we will respond within the timeframes required by applicable law.
8. International Transfers
Atlas operates globally. Where we transfer personal information across borders, we rely on appropriate safeguards such as standard contractual clauses. Enterprise customers can request specific data-residency arrangements.
9. Security
We protect information with encryption in transit and at rest, tenant isolation, least-privilege access, and continuous monitoring. See our Security page for details. No system is perfectly secure, but we work hard to protect your data and to notify you promptly of any incident that affects it.
10. Children's Privacy
Atlas is a business product not directed to children under 16, and we do not knowingly collect their personal information.
11. Changes and Contact
We may update this policy from time to time; material changes will be posted here with a new effective date. Questions? Email support@atlasknows.io.