AtlasPrivacy policy
This policy explains what personal data we process, why, and what your rights are. It applies to the atlaswork.business website and to the Atlas application.
1. Data controller
Fahria Agency LLC, Shams (Sharjah Media City Free Zone), Sharjah, United Arab Emirates — license no. 2536786.01. Contact: privacy@atlaswork.business.
2. Data we process
- Account: name, email address, company name, password (encrypted).
- Usage data: jobs, clients, buildings, units, schedules and history that you enter.
- Quotes: recipient details, amount, quote contents, and a record of when it was opened and answered.
- Working hours: clock-ins, breaks and hourly rates for your technicians, when you use time tracking.
- Notes: the notes you write on a job or a unit, including those marked private, which are never shown to the end client.
- Payment: handled by Stripe. We receive a subscription identifier and billing information, never the full card number.
- Technical data: connection logs, IP address and device type, for security and for keeping the service running.
- Connected mailbox (optional): if you connect your work address, we keep the connection settings and the app password, encrypted. Your messages are read from your provider at the moment you display them, then forgotten: we keep neither your emails nor your attachments.
- Photos and logo: a technician's photo and your company logo, when you add them.
- Pesticide application certificates: the number and expiry date of your technicians' certificates, when you enter them, so we can warn you before they expire.
- Products and stock: products, quantities, lots and movements that you record.
- Offline copy: a technician's job sheet, addresses included, is kept on their phone for at most 7 days, so they can work without a signal. It erases itself, and does so immediately if their access link is disabled.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Providing and running the service | Performance of the contract |
| Billing and payment | Performance of the contract / legal obligation |
| Security and abuse prevention | Legitimate interest |
| Service communications | Performance of the contract |
| Improvements and statistics | Legitimate interest / consent |
| Site analytics (Google Analytics) | Consent, which you can withdraw at any time |
| Measuring how well our ads work and showing Atlas again (Google Ads, Meta) | Consent, which you can withdraw at any time |
| Knowing where a sign-up comes from (ad campaign, referring site, landing page), stored with the account | Legitimate interest |
4. Subprocessors
We use providers that process data on our behalf:
- Supabase Inc. (United States) — database hosting: this is where your accounts, clients, addresses, jobs and settings live.
- Vercel Inc. (United States) — hosting of the website and the application.
- Stripe, Inc. (United States) — payment processing.
- Resend, Inc. (United States) — sending the service's emails: invitations, quotes, reminders, alerts and support messages.
- Google Ireland Limited (Ireland), with Google LLC (United States) — analytics for the marketing site, the demo and the sign-up screens (Google Analytics), only if you accept it in the cookie banner. Never inside a signed-in account. If you also accept advertising, Google Ads additionally learns whether one of our ads brought you to the demo or to sign-up.
- Meta Platforms Ireland Limited (Ireland), with Meta Platforms, Inc. (United States): the Meta pixel on the marketing site, the demo and the sign-up screens, only if you accept advertising in the cookie banner. It tells Meta whether one of our Facebook or Instagram ads brought you here, and lets us show you Atlas again on those platforms. Meta also uses this data for its own purposes, under its privacy policy. Never inside a signed-in account.
- Komoot GmbH — Photon (Germany) — address suggestions. The characters you type into an address field are sent to it so it can propose completions.
- OpenStreetMap Foundation — Nominatim (United Kingdom) — address country verification. When a new address is saved, or when its text is actually changed, that address alone is sent to establish which country it is in. No customer name, phone number, email, note or job data goes with it. What we keep is the country code, its date and a fingerprint of the address — the address itself is not copied. Map data © OpenStreetMap contributors, ODbL license.
These providers are required to protect your data and to use it only for the services they provide.
5. International transfers
Some data may be processed outside your country, in particular in the United States. These transfers are covered by appropriate safeguards (standard contractual clauses or equivalent mechanisms).
6. Retention
We keep your data for as long as your account is active. When the account is deleted, your service data is erased immediately and permanently: clients, buildings, units, jobs, quotes, working hours, team, stock and mailbox settings. The only exceptions are billing records, kept by our payment provider for as long as accounting obligations require, and technical security logs, kept for at most 30 days.
Deletion cannot be undone and we take no backup beforehand: export whatever you need first.
7. Your rights
Under the GDPR and applicable laws, you have the rights of access, rectification, erasure, restriction, objection and portability. To exercise them: privacy@atlaswork.business. You may also lodge a complaint with a data protection authority.
8. Security
We put technical and organisational measures in place: encryption in transit and at rest, isolation of each account enforced by the database itself, role-based access control, logging and backups. As no system is infallible, we cannot guarantee absolute security.
9. Cookies
The website uses cookies, described in our Cookie policy.
10. Changes
This policy may change. The date at the top of the page shows when it was last updated.