Privacy Policy
Last updated: February 2026
What We Collect
When you join the waitlist, we collect your email address. That's it. No tracking pixels, no behavioral analytics, no third-party cookies.
If you use Atlas & Thorn as a product, we store the data necessary to provide the service: your account information, configuration preferences, and integration credentials (encrypted at rest).
What We Don't Do
We do not sell, rent, or share your personal data with third parties for marketing purposes. Ever.
We do not train AI models on your data. Your knowledge base, conversations, and business context remain yours.
Data Storage & Security
All data is stored on EU-based infrastructure. Integration credentials are encrypted using AES-256 at rest and transmitted exclusively over TLS 1.3.
Self-hosted users retain full control over their data. Nothing leaves your infrastructure unless you explicitly configure external integrations.
Third-Party Processors
We use a limited number of operational providers (hosting, email delivery) that process data strictly on our behalf under data processing agreements. We do not use advertising networks or analytics platforms that profile users.
Your Rights
You may request access to, correction of, or deletion of your personal data at any time. We respond to all requests within 30 days.
For EU residents: you have full rights under GDPR including data portability and the right to lodge a complaint with a supervisory authority.
Data Retention
Waitlist data is retained until you unsubscribe or request deletion. Account data is retained for the duration of your subscription and deleted within 90 days of account closure, unless legally required to retain it longer.