← Atlashot

Privacy Policy

Last updated 2026-08-08

This notice explains how we handle the email address you give us on the Atlashot signup form at atlashot.com, and the rights you have over it. It is written to meet the EU/UK GDPR and applies wherever you are. It does not cover the Atlashot application, which has not been released.

  1. Data controller

    The controller responsible for your personal data is the operator of atlashot.com.

    Privacy contact: privacy@atlashot.com

  2. What we collect and why

    From the signup form, and nothing else:

    • your email address;
    • whether you asked to join the private beta;
    • a record of your consent — that you gave it, the revision of this notice you gave it against, and the date.

    We use it for one purpose only: to send you Atlashot launch announcements and private beta invitations. We do not ask for your name, phone number, or payment details, we set no advertising or analytics cookies, we do not build a profile of you, and we do not use your address to advertise anything other than Atlashot.

  3. Legal basis

    We rely on your consent (GDPR Article 6(1)(a)), which you give by ticking the consent box on the signup form. Giving it is optional: you may decline, and the only consequence is that we cannot send you launch news or a beta invitation. You may withdraw it at any time — see sections 6 and 8. Withdrawing does not affect anything we lawfully did beforehand.

  4. Where your data is held

    Your data is stored on servers hosted in Tokyo, Japan (via Fly.io). If you are in the European Economic Area or the UK, this is an international transfer; Japan has been recognised by the European Commission as providing an adequate level of data protection, which is the safeguard we rely on. It may also be processed in [EMAIL PROVIDER LOCATION — fill when provider chosen] by the provider in section 7.

  5. How long we keep it

    We keep your email address for as long as you want to hear from us. There is no fixed expiry date: you stay on the list until you unsubscribe or withdraw your consent, at which point we delete your record. We may also remove addresses that have become permanently undeliverable.

  6. Your rights

    Under the GDPR you have the right to access a copy of your data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw your consent at any time (Articles 15–21).

    To exercise any of these, email privacy@atlashot.com. We respond within one month. You also have the right to lodge a complaint with your local data protection supervisory authority.

  7. Who processes it

    We do not sell your email address and we do not share it for anyone else's marketing. It is handled on our behalf only by our hosting provider (Fly.io) and our email delivery provider, [EMAIL PROVIDER — fill when chosen], solely to deliver the messages described in section 2 and under a data-processing agreement. We disclose it to no one else except where the law requires.

  8. Unsubscribe

    Every email we send includes a one-click unsubscribe link, and our marketing messages comply with the GDPR, the ePrivacy rules, and the US CAN-SPAM Act. Unsubscribing withdraws your consent and removes your address from the list.

  9. Changes to this notice

    If we change this notice we update the date at the top. Where a change is material, we tell you by email before it takes effect. The revision you consented to is recorded with your signup, so we can always tell which terms applied to you.

Draft — replace all [BRACKETED] placeholders and have counsel review before relying on this.