Privacy Policy

OnAtlas -- operated by Risk and Insight Group

Last updated: June 17, 2026

This Privacy Policy describes how OnAtlas ("OnAtlas", "we", "us", or "our"), operated by Risk and Insight Group, collects, uses, and protects your personal information when you use our platform at onatlas.io.

By using OnAtlas, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

We collect the following types of information:

• Account Information: Name, email address, and password when you register.
• Profile Information: Professional details, biography, and brand assets you upload.
• Content: Documents, text, and media you upload to the platform for processing.
• Usage Data: How you interact with OnAtlas, including features used and actions taken.
• Social Media Tokens: OAuth access tokens for connected social media accounts (stored securely, never shared).
• Payment Information: Billing details processed securely through our payment provider. We do not store full card numbers.

2. How We Use Your Information

We use your information to:

• Provide, operate, and improve the OnAtlas platform.
• Generate AI-assisted content, brand intelligence, and reputation insights on your behalf.
• Publish content to your connected social media accounts at your direction.
• Process subscription payments and manage your account.
• Send you service-related communications and platform updates.
• Comply with legal obligations.

We do not sell your personal information to third parties. We do not use your content to train AI models.

3. Social Media Integrations

When you connect a social media account (such as TikTok, LinkedIn, or Instagram) to OnAtlas, we receive OAuth access tokens that allow us to publish content on your behalf. Specifically:

• We only access the permissions you explicitly grant during the OAuth flow.
• TikTok API access is used solely to publish content you create and approve within OnAtlas.
• We do not access, store, or share your social media followers, messages, or private data.
• You may revoke access at any time through OnAtlas settings or directly through the social media platform.

4. Data Sharing

We share your information only in the following limited circumstances:

• AI Processing: Content is sent to Anthropic's Claude API for processing. Anthropic's privacy policy governs their handling of this data.
• Payment Processing: Billing data is handled by our payment processor in accordance with PCI-DSS standards.
• Infrastructure: Data is stored on Supabase and Vercel infrastructure with industry-standard security.
• Legal Requirements: We may disclose information if required by law or to protect our legal rights.

5. Data Retention

We retain your account data for as long as your account is active. If you cancel your subscription and request account deletion, we will delete your personal data within 30 days, except where retention is required by law.

You may request an export of your data at any time by contacting us at the address below.

6. Data Security

We implement industry-standard security measures to protect your information, including encryption in transit (TLS), encrypted storage, and role-based access controls. Multi-factor authentication is available and encouraged for all accounts.

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your data using commercially reasonable means.

7. Cookies and Tracking

OnAtlas uses essential cookies to maintain your session and authentication state. We do not use third-party advertising cookies or tracking pixels. Analytics, if used, are limited to aggregate, non-identifiable usage data to improve platform performance.

8. Your Rights

You have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.
• Export your data in a portable format.
• Revoke social media integrations at any time.

To exercise any of these rights, contact us at the address below.

9. Children's Privacy

OnAtlas is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised date. Continued use of OnAtlas after changes take effect constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or your data, contact us at: