Privacy Policy

1. Controller and contact

OakMind AI Inc., an Ontario, Canada corporation, is responsible for personal information processed through the Atlas website, marketplace accounts, purchases, redemptions, downloads, and support. The Privacy Officer can be reached at [email protected]. General support is available at [email protected].

2. Information we collect

• Account information: identifiers, email, verification status, profile information, age or guardian confirmations, and authentication events supplied through our identity provider.
• Marketplace activity: credit balances and ledger entries, consent records, orders, entitlements, download records, cart requests, and support history.
• Payment information: transaction identifiers, status, amount, currency, and limited billing details supplied by Stripe. We do not receive or store complete card numbers.
• Technical and security information: IP address, browser and device attributes, request metadata, Turnstile results, fraud signals, logs, cookies, and local storage needed for authentication, carts, consent, security, and site operation.
• Communications: information included in support, legal, privacy, or refund requests.

3. Sources

We collect information directly from you and your browser, and from service providers involved in authentication, bot prevention, payments, and transaction fulfillment. We may also receive information from payment networks or authorities when investigating fraud, chargebacks, or legal claims.

4. Purposes and legal bases

We process information to create and secure accounts; provide credits, licenses, downloads, and support; process and reconcile payments; keep consent and transaction records; detect fraud and abuse; debug and improve reliability; and comply with tax, accounting, consumer, and legal obligations. Where applicable, these activities rely on performing our contract, complying with law, consent, and our legitimate interests in operating and securing Atlas. We do not sell personal information or use it for third-party behavioural advertising.

5. Providers and disclosures

We disclose only what is reasonably needed to: Cloudflare for hosting, storage, networking, security, and Turnstile bot protection; Clerk for authentication and account management; Stripe and payment networks for checkout, payment, refunds, and fraud prevention; communications providers for service messages; and professional advisers, acquirers, courts, regulators, or authorities where law or a transaction requires it. Providers may process information under their own privacy notices as independent controllers for some functions.

6. Required and optional information

Account identifiers, authentication, security checks, and transaction information are required to create an account, grant credits, redeem assets, or process payment. Without them, the relevant service cannot be provided. Profile fields and marketing communications are optional. We will request separate consent before sending marketing messages where required.

7. Retention

Account profile data is kept while the account is active and is deleted or de-identified after a verified deletion request unless an exception applies. Order, payment, license, refund, tax, and consent records may be retained for up to seven years after the relevant transaction or account closure. Routine security and access logs are generally retained for up to 12 months; support records for up to 24 months after resolution; and backup copies for up to 90 days after removal from active systems. We may retain relevant records longer for an active dispute, security incident, legal hold, or obligation.

8. International processing

OakMind AI Inc. is based in Canada. Cloudflare, Clerk, Stripe, and other providers may process information in Canada, the United States, the European Economic Area, or other countries where they operate. Information may therefore be subject to foreign law. Where required, we use contractual or legally recognized transfer safeguards and assess cross-border processing.

9. Automated security decisions

Turnstile and our fraud controls evaluate technical and transaction signals to detect automated or abusive activity. A failed check may temporarily prevent a credit grant, redemption, download, or checkout. If you believe a decision is wrong, contact [email protected] for review by a person.

10. Your rights and complaints

Depending on where you live, you may request access, correction, deletion, portability, or a copy of your information; withdraw consent; or object to or restrict certain processing. Some transaction records must be retained. Email [email protected]; we will verify your identity before acting. You may also complain to the Office of the Privacy Commissioner of Canada, the Commission d’accès à l’information du Québec when applicable, or your local privacy authority.

11. Children and guardians

Atlas is not directed to children under 13 and we do not knowingly allow them to create accounts. Users from 13 until their local age of majority must have a parent or legal guardian accept the Terms. If we learn that an under-13 child provided personal information, we will take reasonable steps to delete it. A parent or guardian may contact the Privacy Officer.

12. Security, storage controls, and changes

We use administrative and technical safeguards designed to protect information, but no system is completely secure. Necessary cookies and local storage support sign-in, carts, consent state, fraud prevention, and security; disabling them may prevent these features from working. We will identify policy changes with a new effective date and provide additional notice or seek consent when required.