Privacy notice

Responsibility and scope

Indico Group (Pty) Ltd., registration 2020/020444/07, is responsible for the personal information it processes to operate Atlas UI, its website, waitlists, customer access and support. Contact info@atlas-ui.com or +27 83 605 0658. Address for legal notices: 659 Fenwick St, Moreletapark, Pretoria, Gauteng, 0181, South Africa. Physical business/office address: Unit 51 Fernel Park Ridge, Olympus, Pretoria, Gauteng, 0081, South Africa. Information Officer: Jean-Jaques Martin Nel, registration 2026-069409, registered on 15 October 2026. Privacy and access requests: info@atlas-ui.com. See our PAIA manual for record-access procedures and the downloadable manual.

This notice distinguishes information held by Atlas from information processed by services you choose to connect. It does not mean that all Atlas functions run offline or that every item in a Brain remains only on your computer.

Advertising choices and storage are described in our Cookie Notice. Use Cookie preferences below to change your choice.

Information we use and why

Providing a marketing email is optional. Purchase and activation information is needed to deliver and verify your licence; without it we may be unable to fulfil the order. Optional names and unnecessary support attachments are not conditions of receiving basic support. Information may come from you, the payment provider, the browser/hosting service and relevant transaction records.

We process information as needed to fulfil your order, meet legal obligations, operate and secure the service on a lawful basis, and carry out the optional activities you consent to. We do not treat consent to marketing or advertising as necessary for a purchase. You may withdraw optional consent without cancelling the licence.

Desktop workspaces, Brain and connected AI

The desktop app can keep conversations, workspace settings, memory, selected references and outputs in its local profile and folders. Linked files or folders may remain in their original locations. Brain organises available context; it is not a guarantee that information can never be transmitted. Relevant prompts, extracts, files, images, screen captures or conversation context may be sent to the selected AI or connected tool when a feature uses them.

Automatic provider routing can change which configured service handles a task. Optional voice features can send submitted audio or text for transcription or speech generation. Inspectors and browser tools can share the selected or requested content needed for a task. Check permissions and the scope of a request before including confidential information, other people's data or sensitive material. Workspace organisation is not an independent security barrier against every task that you authorise across workspaces.

Each connected provider has its own storage, retention, model-training controls and privacy terms. Atlas does not promise that a provider never retains or trains on submitted content. Review the provider's settings. Licence checks themselves do not upload your conversations, files, AI passwords or API keys. A support report is saved locally and shared with us only if you submit it. Indico does not need your private credentials to provide normal support.

Ask Atlas website chat

When you send an AI question, the Atlas backend sends your message, relevant recent conversation context and approved product guidance to DeepSeek to generate a reply. This website guide cannot access your desktop Brain, files, licence or account, and cannot submit a support ticket. Keep API keys, passwords, licence keys and personal or confidential information out of the chat.

Recent conversation context is encrypted and held in this open page’s memory, with a 30-minute expiry. Clear chat or reloading the page discards that context. We do not save chat transcripts in our database or server logs. Clearing chat does not reset the question allowance or delete records already processed by DeepSeek. DeepSeek applies its own privacy and retention terms. A necessary anonymous 24-hour cookie and server counters enforce the question allowance, request limits and spending ceilings. Failed AI requests do not consume your 30-question allowance. We retain anonymous request identifiers, timestamps, status and cost for up to two days; daily cost counters for up to 35 days and monthly totals for up to 65 days. A keyed hash of the connection IP helps limit abuse; the chat database does not store the raw IP. Expired records are removed on later activity. These records contain no message text.

Replies can be mistaken. Use the linked official information or contact support for decisions about a purchase or a problem with your account. This guide answers Atlas product questions only.

Lists and email

Windows launch, Claude and Mac lists are separate choices. A purchase or beta invitation does not automatically subscribe you to unrelated marketing. We send the requested welcome/availability messages and necessary order, security and support notices. Marketing messages provide an unsubscribe route; you may also email info@atlas-ui.com. Unsubscribing does not withdraw essential transaction communications.

Support inbox and customer assistance

Emails to our business addresses, their metadata, relevant attachments and support notes may be held in our mailbox and Customer Desk so authorised staff can respond. The current local connector synchronises mail while the operator computer is running; immediate replies are not guaranteed. Customer Desk can suggest prepared answers. If an authorised person uses an AI assistance tool to help with a support request, relevant message/context may be supplied to that service under appropriate processing controls; sensitive or unnecessary content should be excluded. A request for support does not subscribe you to unrelated marketing.

Service providers and access

Authorised Atlas personnel access information only where needed for operations and support. We use website hosting/storage, email delivery/mailbox and payment services. The current service stack includes Sites hosting using Cloudflare infrastructure, GoDaddy/Titan for our mailbox, Resend for automated email delivery, and, for checkout when enabled, Paystack. Email delivery update, 20 October 2026: Resend receives the destination address, email content and delivery metadata needed to send automated messages. Open and click tracking are disabled for this sending domain. Optional Meta measurement and the AI/voice/tools you connect are described separately. Paystack collects your card details. For a monthly licence, Atlas keeps the payment and authorisation references needed to collect the renewals you approved, alongside the charge amount, currency, conversion information where applicable, and payment status. Atlas does not receive your full card number or card security code.

Information may be processed outside South Africa by hosting, payment, email or connected services. Transfers must comply with POPIA section 72, through adequate protection under law or binding arrangements or another applicable statutory basis. The destination and handling depend on the service and configuration. We do not claim all data is hosted in South Africa. Contact the Information Officer for available information about the recipients and safeguards relevant to your information. We may disclose relevant information where legally required or necessary to establish or defend a legal claim.

Private beta access

For invited testers we hold the invitation email, optional name, invitation/access status, visit and download-request records and release versions. Private single-use links expire after seven days and customer/beta sessions last up to 24 hours. We store token hashes. Access to a link demonstrates possession of it, not independent identity verification. Keep links private. These records support testing and access management and are separate from marketing lists. We review them when the beta and related support purpose ends; longer retention needs another lawful purpose. Revoking access cannot recall an installer already downloaded.

Retention and deletion

We use the following retention approach. Review-based periods require an assessment and removal when information is no longer lawfully needed; they are not a promise that every system or backup erases data at the exact same moment.

The current website removes live-activity records older than 24 hours on a subsequent activity report and spam-control counters older than 48 hours on a subsequent sign-up. These are cleanup triggers, not promises of deletion at the exact second. Cookie/session periods appear in the Cookie Notice. Backups and hosting logs may have separate operational retention cycles. Deleted data remaining in restricted backups is not used for ordinary marketing or support; deletion is reapplied if a backup is restored. Where records must be retained, we restrict their use to the remaining lawful purpose. A minimum suppression record may be needed to respect an unsubscribe request.

Your choices and rights

You may request access, correction or deletion and raise objections or withdraw optional consent by emailing info@atlas-ui.com. We may request proportionate identity verification. Some records cannot immediately be deleted because they are required for the licence, accounting or a dispute; we will explain the basis and options. Rights and response periods depend on applicable law. Overseas users retain any additional rights that apply to them.

You may complain to South Africa's Information Regulator through inforegulator.org.za, email enquiries@inforegulator.org.za, telephone 010 023 5200, or a competent authority in your jurisdiction. For record-access procedures and prescribed forms, see our PAIA manual. POPIA complaints can be addressed to POPIAComplaints@inforegulator.org.za and PAIA complaints to PAIAComplaints@inforegulator.org.za. See the Regulator contact page for current submission channels.

Security, children and updates

The current licence service stores hashes of licence/access tokens and uses restricted customer sessions; the Windows activation credential uses Windows secure storage. These measures do not make any system risk-free. We will assess security incidents and notify affected people and authorities where required. Do not email passwords, full card details or API keys.

Atlas is not marketed to children. Do not submit children's personal information without an appropriate lawful basis. Purchases and account eligibility follow the age requirements in the terms and connected providers' rules.

We will date changes to this notice and notify you of material changes where appropriate. New optional processing requires a suitable lawful basis; publishing a changed notice alone does not create consent.

Customer accounts

Auth0 handles customer sign-in, email verification and password recovery. Atlas stores your verified email, an account identifier, linked licences and an expiring session to provide billing and downloads. The Atlas account session lasts up to seven days and ends when you sign out. Contact info@atlas-ui.com for account assistance.