Privacy Policy

Who we are

Atlas is an AI work system for teams, operated by PT Monago Teknologi Nusantara.

This policy applies to useatlas.work, atlasai.id, the Atlas app, and the bots and integrations connected to Atlas.

Our role for your data

For your account data and the data you put into Atlas, Atlas is the personal data controller.

If you use Atlas as a member of a team, the team owner or admin decides who can access the team's data. For that data, Atlas processes it on your team's instructions.

Data we collect

We only collect the data needed to run the service.

• Account data: name, email address, a hashed password, your profile photo if you sign in with Google, and your role in a team.
• Your content: messages and instructions to Atlas, files and attachments, Project contents, knowledge, memory, and the outputs Atlas produces.
• AI coworker and automation data: settings for AI coworkers and agent teams, routine schedules, and the history and results of each run.
• Connector data: when you connect services such as Gmail, Google Calendar, Google Drive, Google Sheets, or Google Slides, we receive the data you allow, for example emails, calendar events, and files accessed to complete your tasks. The same applies to tools you connect through MCP.
• Channel data: messages you send to Telegram bots connected to Atlas, and their replies.
• Technical data: IP address, device and browser type, pages visited, and system and usage logs.
• Payment data: transaction status and amount, and your credit balance. Card numbers are processed directly by the payment provider and are not stored by us.

How we use data

We use data to:

• Run the features you use, such as chat, Projects, AI coworkers, automations, connectors, and channels.
• Send the necessary content to AI model providers to generate answers and complete your tasks.
• Create accounts, verify sign-ins, and keep the service secure.
• Calculate credit usage and process payments.
• Send service emails, such as sign-in codes, approval requests, and important notices.
• Meet legal obligations and respond to official requests from competent authorities.

Data from connectors and channels is only used for the features you turn on.

We do not sell personal data to anyone.

Data from Google services

Atlas only requests the Google access needed by the connectors you turn on, and uses that data to carry out the tasks you ask for.

Atlas's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Data from Google is not used for advertising and is not sold.

You can revoke Atlas's access at any time from your Google Account settings or from Settings, then Connectors, in Atlas.

Legal basis

We process data on the basis of our service agreement with you, your consent, legal obligations, and legitimate interests.

Legitimate interests include keeping our systems secure and preventing misuse of the service.

Who receives data

We share data only with service providers that help us run Atlas. They may only use the data for that purpose.

• Servers and storage: cloud providers for databases, files, and hosting.
• AI: AI model providers, only to process the requests you run.
• Connectors and channels: Google, Telegram, and the MCP tool providers you connect, within the permissions you grant.
• Payments: a payment provider, to process credit purchases.
• Email: an email delivery provider.

We may also disclose data when required by law or requested by a competent authority.

Transfers outside Indonesia

Some of our service providers, including AI model providers, process data outside Indonesia.

We make these transfers with the safeguards required by the Personal Data Protection Law.

How long we keep data

Account data and your content are kept while your account is active and for as long as needed to run the service.

Data is deleted when you request deletion, except data we are legally required to keep. See Data Deletion for how.

We keep a record that a deletion took place as proof that the request was fulfilled.

Security

Data is sent over encrypted connections (HTTPS).

Passwords are stored as hashes, and connector access tokens are stored encrypted.

Data Protection in Atlas can mask personal information such as emails, phone numbers, identity numbers, and payment cards before it is sent to AI providers, and always blocks credentials such as API keys.

AI coworkers and automations only get access to the capabilities you allow, and important actions can require your approval.

Access to data is limited by role, both in your team and at Atlas.

If a personal data breach occurs, we notify affected parties within 3 x 24 hours.

Your rights

Under the Personal Data Protection Law, you have the right to:

• Be informed about how your data is processed.
• Access your data and request a copy.
• Correct inaccurate data.
• Request deletion of your data.
• Withdraw consent you have given.
• Object to decisions based solely on automated processing.

Send requests to privacy@useatlas.work. We respond within 3 x 24 hours after verifying your identity.

Children's data

Atlas is meant for teams and businesses, not for children.

Do not put a child's personal data into Atlas without consent from a parent or guardian as required by law.

Cookies and browser storage

We use the cookies and browser storage needed for sign-in, security, language preference, and basic app functions.

Changes to this policy

We may update this policy. The date of the last update is shown at the top of this page.

We announce important changes by email or in the app before they take effect.

Contact us

For questions or requests about personal data, contact privacy@useatlas.work.