This Privacy Policy explains how Atlas, operated by GRR BAOW LLC (“Atlas”, “we”, “us”), collects, uses, shares, and protects information when you use the Atlas platform at app.atlasecom.ai and our website at atlasecom.ai(together, the “Service”).
Who we are
Atlas is a software platform that businesses use to run their e-commerce operations. GRR BAOW LLC is a limited liability company organized in the State of Wyoming, United States. You can reach us any time at shrey@grrbaow.com.
How Atlas works, and why that matters for your data
Atlas helps a business operate its store. To do that, our customer (the business) connects their own third-party accounts — for example Meta (Facebook and Instagram), Google (including Gmail), Microsoft (Outlook), Shopify, TikTok, Klaviyo, Amazon, Walmart, and analytics tools — and Atlas then accesses those accounts through each platform’s official API, on the customer’s behalf and under the customer’s instruction, only to provide the features the customer turns on.
For most connected data (such as a store’s orders or the personal data of the store’s own end-customers), Atlas acts as a data processor on behalf of the business, which is the data controller. We process that data only to provide the Service and only as the business directs.
Information we collect
1. Account information
When you create an Atlas account we collect your name, email address, a securely hashed password, and (optionally) your company name and role.
2. Data from the accounts you connect
When you connect a platform, we access only the data needed for the features you enable, which may include:
- Advertising data (Meta, Google Ads, TikTok, Pinterest, Snapchat, Microsoft): campaigns, ad sets, ads, budgets, spend, and performance metrics.
- Store data (Shopify, Amazon, Walmart): products, orders, customers, inventory, fulfillments, and reports. This can include personal data of your end-customers such as names, email addresses, shipping addresses, and order details.
- Support inbox data (Gmail, Outlook): the messages, threads, and contacts in the support mailbox you connect, so Atlas can read, organize, and draft or send replies for the customer-support features you enable.
- Marketing data (Klaviyo and similar): lists, segments, flows, campaigns, subscriber profiles, and metrics.
- Analytics data (Triple Whale, Hyros, and similar): aggregated performance and attribution metrics.
3. Usage and technical data
We collect standard log and device information (IP address, browser type, pages used, timestamps) and use essential cookies to keep you signed in and to operate the Service.
How we use information
- To provide, operate, and maintain the features you enable.
- To run the automations you configure, on the rules and limits you set (for example, adjusting ad budgets within caps you define, or drafting support replies for your review).
- To secure the Service, prevent abuse, debug, and provide support.
- To communicate with you about your account and the Service.
- To comply with legal obligations.
We do not sell your personal data or the personal data of your end-customers. We do not use data from your connected accounts for our own advertising, and we do not use it to train generalized AI or machine-learning models.
Google user data (Limited Use)
Atlas’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we access Gmail data only to provide and improve the in-product customer-support features you enable; we do not use Gmail data for advertising; we do not transfer it to others except as necessary to provide or improve those features, for security purposes, or to comply with applicable law; and we do not allow humans to read your Gmail data unless we have your consent for specific messages, it is necessary for security or to comply with law, or the data is aggregated and anonymized.
Meta platform data
Where you connect a Meta (Facebook or Instagram) account, we use Meta Platform data solely to provide the Atlas features you enable and in accordance with the Meta Platform Terms and Developer Policies. You can remove Atlas’s access at any time from your Facebook settings, and you can delete the data we obtained (see Data Deletion).
Service providers and sub-processors
We share data only with parties that help us run the Service under contract, including:
- Cloud hosting and infrastructure providers (compute, storage, and database).
- The platforms you connect, when Atlas acts on your behalf (for example, sending a support reply or updating a campaign budget).
- AI processing: Atlas uses Anthropic’s Claude API to power certain automations. Only the data needed for a given task is sent, and it is not used to train models.
Each provider is bound to use the data only to provide services to us.
Other ways we may share data
- Legal requirements: when required by law, regulation, or valid legal process.
- Protection: to protect the rights, property, or safety of Atlas, our customers, or others.
- Business transfer: in connection with a merger, acquisition, or sale of assets, subject to this Policy.
Data retention
We keep account and connected data for as long as your account is active and as needed to provide the Service. You can disconnect any platform at any time; when you do, we stop accessing it and delete or revoke the stored access tokens for it. You can request deletion of your data at any time — see Data Deletion. We may retain limited information where required to comply with legal, tax, or security obligations.
Security
We protect data with encryption in transit (TLS) and encryption at rest for credentials and access tokens, access controls, and least-privilege practices. No system is perfectly secure, but we work continuously to protect your information.
Your rights and choices
Depending on where you live, you may have the right to access, correct, delete, or export your personal data, and to withdraw consent or object to certain processing. To exercise any of these, email shrey@grrbaow.com.
- EEA / UK (GDPR): our legal bases are performance of a contract, our legitimate interests in operating and securing the Service, your consent (where required), and compliance with law. Where we act as a processor for a business, direct your request to that business and we will assist.
- California (CCPA/CPRA): we do not sell or “share” personal information, and you may request to know, delete, or correct your information.
International transfers
We are based in the United States and may process data in the United States and other countries. Where required, we use appropriate safeguards for cross-border transfers.
Children
The Service is for businesses and is not directed to children. We do not knowingly collect data from anyone under 18.
Changes to this Policy
We may update this Policy from time to time. We will change the “Last updated” date above and, for material changes, provide additional notice. Continued use of the Service after an update means you accept the revised Policy.
Contact us
Questions or requests about this Policy or your data: shrey@grrbaow.com (GRR BAOW LLC, Wyoming, USA).