Last updated: September 29, 2026 · Atlas Finance System LLC
When you create an ATLAS account, we collect your name, email address, and a securely hashed password (we never store your password in plain text). As you use the app, we store the financial data you enter or import into a workspace — accounts, transactions, categories, budgets, debts, subscriptions, and recurring bills — along with your language, currency, and time zone preferences. Business workspaces may also contain customer and vendor contact details, invoices, expenses, projects, time records, and accounting information you provide. If you use ATLAS's Support feature, we store the ticket content, contact name/email, and any messages you send us about it.
A workspace can have more than one member (for example, a family or small-business team). Financial data you enter into a shared workspace is visible to that workspace's other members, the same as any collaborative app — it isn't private to you alone once it's in a shared workspace. Access depends on workspace roles. Private workspaces are not shared with other customers; authorized service processing and support may still require access.
Your data is used to provide, secure, support, and improve ATLAS: displaying your accounts and transactions, computing balances and reports, and sending account-related email such as password-reset links and, if you opt in for a workspace, upcoming-bill reminder emails. We do not use your data for advertising, and we do not sell, rent, or share your financial data with third parties for marketing purposes.
Account and financial records are stored in ATLAS's PostgreSQL database hosted by Neon in an Amazon Web Services U.S. region. Uploaded documents use private Vercel Blob storage. Access through ATLAS requires authorization. The application is hosted on Vercel; the providers described below also process data for the features you use.
Demo Mode (the "Try Demo" buttons on the sign-in page) lets you explore ATLAS with pre-populated example data without registering — we don't collect your name, email, or a password to start one. A temporary account is created behind the scenes to hold the session and its pre-populated data, along with a small amount of non-identifying usage information (for example, whether you completed the guided tour). A Demo Mode session automatically expires after 30 minutes. Expired demo records are removed during subsequent cleanup; choosing Exit demo starts deletion immediately.
We use Resend (resend.com) to deliver verification, password-reset, support, and other enabled account notifications. Resend receives the recipient address and rendered message. Opted-in bill reminders include bill names, due dates, and amounts; requested business invoice reminders include the details needed for that notice. Support notifications link to the authenticated ticket instead of including the conversation or internal notes.
Vercel hosts the application and provides privacy-focused Web Analytics and Speed Insights. These services receive request and page-performance information as described below; they do not receive your password or the financial contents you enter into ATLAS as analytics events.
Neon hosts the PostgreSQL database that stores ATLAS account, workspace, and financial records. ATLAS stores only a securely hashed version of your password, not the plaintext password.
When bank connections are enabled and you choose to connect one, Plaid receives the information needed to link the selected institution and provide account and transaction data to ATLAS. ATLAS stores the resulting access token in encrypted form along with the connected account records. For web subscriptions, Stripe processes checkout and subscription billing; ATLAS receives customer/subscription identifiers, plan and billing status, and invoice information needed to manage the subscription. ATLAS does not receive your full payment-card number from Stripe checkout. Plaid and Stripe receive this information only when you use the corresponding connection or billing feature.
When you use AI Concierge, OpenAI receives your question, relevant conversation history, and financial information selected from your authorized workspace to prepare an answer. ATLAS stores your conversation so you can revisit it. Archiving hides a conversation from the list and does not delete it.
Receipt and document features store the files you choose to upload, their metadata, extracted text, and financial links. AI extraction sends the image or PDF content to OpenAI; documents can include account numbers, contact details, or other information printed on them. When security scanning is enabled, uploaded bytes are also processed by ATLAS's malware scanner hosted on Railway. Choose only files you intend to process.
If an Apple or Google store subscription is offered in your installed version, that store processes payment and ATLAS receives purchase identifiers, verification records, and subscription status. If text-message verification is available and you enable it, Twilio receives your phone number and verification requests.
ATLAS uses Vercel Web Analytics to understand aggregate page usage and Vercel Speed Insights to measure real-world performance. Depending on the request, Vercel may process the page path, referrer, approximate region, browser, operating system, device type, timestamps, and web performance measurements. Vercel Web Analytics does not use third-party cookies or create a persistent profile that follows you across other apps or websites. We use this information only to improve ATLAS, never for advertising, and we do not intentionally send names, email addresses, passwords, financial amounts, transaction descriptions, or account contents as analytics events.
ATLAS also records limited diagnostic events when the application crashes. These events contain an anonymous event identifier, the type of error, and the page pathname needed to locate the failing screen. They do not include query strings, stack traces, form contents, passwords, financial amounts, transaction descriptions, account contents, names, or email addresses. The events are written to ATLAS's Vercel runtime logs and used only to diagnose reliability issues.
We retain account and workspace records while they are needed to provide the service. You can permanently delete your account and its data yourself at any time at www.atlasfinancesystem.com/account/delete, or contact us at the address below if you're unable to sign in. Deleting your account removes your login and personal settings; financial data in a workspace only you belong to is deleted as well, while a shared workspace and its other members' data are preserved — your own membership in it is simply removed. If you own a shared workspace (one with other members), you'll need to transfer ownership to another member first; account deletion is blocked until you do, specifically so another member's workspace and data can never be deleted as a side effect of you deleting your own account.
Deletion also attempts to remove private uploaded files and disconnect linked banks. Provider cleanup can require additional processing. Service-provider logs, backups, payment records, and records required by law may follow separate retention periods; deletion from the active app does not mean immediate removal from every backup or provider. Contact us if you need help with a deletion request.
Manage and cancel subscriptions through their original billing provider. Deleting an ATLAS account or uninstalling the app does not guarantee cancellation of an Apple or Google subscription.
Passwords are hashed before storage and are never recoverable in plain text. Sessions are authenticated with a signed, HTTP-only cookie that isn't accessible to page scripts. Optional two-step verification stores the security records needed to verify your method, including encrypted authenticator secrets or passkey public keys. Your device PIN, fingerprint, or Face ID biometric template is not sent to ATLAS. Production connections use HTTPS; these controls are not a claim of end-to-end encryption.
ATLAS is not directed at children under 13, and we do not knowingly collect information from children under 13.
We may update this policy as ATLAS changes. The date above identifies the latest version.
Questions about this policy, or requests regarding your data, can be sent to atlasfinancesystem@gmail.com.