How we use your information

Who this page is for

People with a signed-in staff account on Project Atlas. It explains, in plain terms, what the app records while you work and who can look at it. The Privacy Policy covers visitors to the public site and the market data itself; this page is about you and your account.

What we collect

• Account basics — username, role, optional email, and a hashed (scrambled) password.
• Your profile, if you set one — job title, chains, categories, territory. Preset choices only, never free-form notes.
• Your chats with Bob, when memory is on for your account — each question, Bob's answer, a trimmed copy of the lookups behind it, and the names of any groups you sort your chats into. Phone numbers, emails and TINs are removed before anything is stored.
• Notes you save for Bob — up to 20 short notes. Only your own click saves one; Bob can suggest, never save.
• Activity — each sign-in, and each desk-app page you open. The page name only, plus your browser type. Never what you type or search.
• Exports — which dataset, when, the file name, and how many rows you pulled.
• What you post on the Feedback board — feature requests, comments and upvotes, and the bug reports, data corrections and general feedback you send. Each keeps the screen it was sent from; a bug report also keeps that screen's full address, filters included, so the team can reproduce it.
• Failed sign-in attempts. When the typed name matches no account we keep only a fingerprint of it — the first two letters and the length — never the text itself, so a password pasted into the wrong box is not stored.

What we use it for

• Signing you in and running the app.
• Pre-filling tools with your defaults. When you use Ask Atlas, your question, your profile, your saved notes and the recent turns of that chat go to our AI model provider to shape the answer — only to providers that don't collect them to train models.
• Protecting the data: repeated sign-in failures are throttled, wrong-password attempts on a live session are logged, and unusually large exports stand out.
• Seeing which features get used, so we improve the right things.

Who can see it

• Admins only. The admin console shows, per user: last sign-in, sign-in counts, export volumes (including rows), failed sign-ins, and every account change — password resets, role, access, team — with who did it and when.
• An admin can open the app as you (“sign in as”). It is recorded in the audit log from start to end, a banner shows on every page while it lasts, their clicks are counted as the admin's activity — not yours — and your password cannot be changed that way.
• Nobody else. Other users, including your manager, get no view of your activity.
• The Feedback board is the one place you publish to others, and only by posting: your feature requests, comments and upvotes show your username to everyone signed in. Bug reports, data corrections and general feedback are seen only by you and the admins.
• Your chats with Bob, their groups and your saved notes: nobody but you. They're encrypted in the database, no admin screen shows them, and while an admin is signed in as you, Bob neither reads nor saves them.

What we never do

• Sell your information or use it for advertising. The app carries no ad or analytics trackers.
• Read your password. Only a hash is stored; admins can reset it, never see it.
• Log what you type or search — page views keep the page name only.
• Turn your profile into permissions. It never grants or blocks access to any data.
• Receive files you analyze with the Your Data report builder. The file, its contents, and its name stay in your browser — reports and exports are generated on your device, and we record only that an export happened, never what was in it.

How long we keep it

Indefinitely, right now. Activity and audit records have no automatic deletion or expiry date. Deactivating an account stops new records but erases nothing. If you need something removed, it is a manual request to an admin.

Chats with Bob are the exception: they're deleted automatically 180 days after their last question, your saved notes and chat groups when you delete them, and all of it when your account is deactivated.

Feedback board posts stay until they are deleted. You can withdraw a post while the team hasn't picked it up and nobody else has joined in, and delete your own comments any time; admins can hide or remove anything.

Your choices

• The profile is optional. Clear it any time with “Clear profile” — with an empty profile and a private chat, only your question goes to the AI provider.
• Start a private chat on the Ask page when you'd rather not keep it: it isn't saved, and Bob doesn't read your notes.
• See, edit, download or delete your chats and notes on your profile page — one at a time, or everything at once.
• Change your own password on the profile page (field rep accounts are admin-managed).
• Ask an admin what is recorded about you; contact details are in the Privacy Policy.