Privacy Policy

Atlas PDF is operated by Atlas Software. For privacy-related questions, contact us at privacy@getatlaspdf.com.

We collect the following categories of personal data:

• Account data — name, email address, hashed password, account creation date.
• Billing data — subscription plan, payment status, billing period. Payment details (card numbers) are processed exclusively by Stripe and never stored on our servers.
• License & device data — license key, activated device names, operating system, device fingerprint, activation date, last seen date.
• Usage data — AI feature usage (request type, token counts, estimated cost) to enforce plan limits.
• Audit logs — login events, password changes, and other security-relevant actions, including IP address and timestamp.
• Support & feedback — messages you send via the contact form or in-app feedback, including any diagnostic information you choose to share.

Atlas PDF processes your documents locally on your device. Document contents are not uploaded to or stored on our servers unless you explicitly use a cloud AI feature that requires it.

• Performance of a contract — to create and manage your account, process your subscription, activate licenses, and deliver the service.
• Legitimate interest — to detect fraud, secure accounts, send transactional emails, and maintain audit logs.
• Legal obligation — to retain billing records as required by Dutch tax law.
• Consent — for optional communications such as product announcements. You can withdraw consent at any time.

• Creating and managing your account and license
• Processing payments and sending invoices via Stripe
• Sending transactional emails (email verification, password reset, subscription updates)
• Enforcing plan limits and feature entitlements
• Detecting and preventing abuse, fraud, and unauthorized access
• Providing customer support
• Complying with legal obligations

We share data with the following trusted processors under data processing agreements:

• Stripe — payment processing. Stripe acts as an independent data controller for payment data. See stripe.com/privacy.
• Email provider — transactional email delivery (verification emails, password resets, invoices).
• Hosting provider — our servers are hosted in the European Union.

We do not sell your personal data to third parties.

• Account data is retained for as long as your account is active.
• Billing records are retained for 7 years as required by Dutch tax law (Belastingdienst).
• Audit logs are retained for 12 months.
• When you delete your account, personal identifiers are anonymised immediately. Billing records subject to legal retention are kept in anonymised form.

Under the GDPR you have the following rights:

• Access — request a copy of the data we hold about you.
• Rectification — correct inaccurate data.
• Erasure — request deletion of your account and personal data.
• Portability — receive your data in a machine-readable format.
• Restriction — request that we limit how we process your data.
• Object — object to processing based on legitimate interest.
• Withdraw consent — at any time, where processing is based on consent.

To exercise any of these rights, email privacy@getatlaspdf.com. We will respond within 30 days. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

The Atlas PDF website uses only technically necessary cookies for session management. We do not use tracking, advertising, or analytics cookies.

Passwords are hashed using bcrypt. Tokens are signed with HS256 and stored with short expiry times. All data is transmitted over HTTPS. Access to production systems is restricted and logged.

We may update this policy from time to time. We will notify you of material changes by email or via an in-app announcement. Continued use of Atlas PDF after the effective date constitutes acceptance of the updated policy.