Privacy Policy
Last updated: 2026-05-31
1. What We Collect
Account info (name, email, hashed password). Billing info processed by Stripe — we never store raw card numbers. Agent run data (inputs, outputs, step logs). For BYO-key users: your Anthropic API key in encrypted form only (AES-256-GCM at rest, master key held separately). We log only the last 4 characters for display (e.g. '...ABCD').
2. How We Use It
To provide and improve the service. To compute your token bill. To send transactional emails (run complete, invoice, security alerts). To detect abuse. We do not use your data to train AI models.
3. Who We Share With
Anthropic — for managed-key users, your agent inputs are sent to Anthropic's Claude API to run agents. Anthropic's Privacy Policy governs that data. Stripe — billing events. We never sell your data to third parties. No data brokers.
4. Data Retention
Run history: 90 days by default, then deleted. BYO-key: your API key is deleted immediately and irreversibly when you remove it from settings. Account data: deleted within 30 days of account closure on request.
5. Your Rights
Export all your data as JSON via Settings > Data > Export. Delete your account and all associated data via Settings > Account > Delete. Opt out of marketing emails via the unsubscribe link in any email. To request manual deletion or a data extract, email privacy@atmosphereagi.com.
6. BYO Key Security
Your Anthropic API key is encrypted with AES-256-GCM at rest using a master key we hold separately from the ciphertext. We log only the last 4 characters for the display in your settings dashboard. Deletion is immediate and irreversible — we cannot recover a deleted key.
7. Cookies
We use one session cookie (httpOnly, samesite=lax, 24h) for authentication. Optionally, we use Plausible Analytics — a privacy-respecting tool with no cross-site tracking, no fingerprinting, and no third-party cookies. No ad-tech trackers.
8. Children
AtmosphereAGI is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.
9. International Transfers
Anthropic operates in the United States. When you use managed-key agents, your inputs transit to US servers under Anthropic's Data Processing Addendum. Our own infrastructure runs on Hetzner (EU) and Neon (US). We rely on standard contractual clauses for cross-border transfers where required.
10. Changes
We will email you 14 days before any material change to this policy. Minor edits (typos, clarifications) take effect immediately.
11. Contact
Email privacy@atmosphereagi.com for privacy questions or data requests.