VisionAtlas acts as a data processor for most workspace content; your organization is the controller. Employees and other data subjects may contact you first—use these tools to respond.
Export workspace data
Admins can download a JSON bundle under Settings → Privacy & data → Export workspace data. It includes users (without password hashes), audit logs (within your retention window), goals, KPIs, initiatives, and weekly updates.
Use this for portability requests, contract offboarding, or internal records. Exports may contain personal data—protect the file like any sensitive export.
Delete users
Under Admin → Users, reassign any goals, KPIs, or initiatives owned by the user, then delete the account. Audit entries may be retained with the actor anonymized for security and legal purposes.
Delete the entire workspace
Settings → Privacy & data → Delete workspace requires typing the company name, cancels Stripe subscriptions when configured, and removes tenant data from the application database. Azure SQL point-in-time backups may retain data for a limited period—see the confirmation text in the app.
Consent records
SMS opt-in timestamps appear on user records when Text allowed is enabled at registration or in the user profile. Keep your employee privacy notice aligned with how you use reminders and password reset SMS.
DPA and subprocessors
The Data Processing Agreement and subprocessor list are linked from Settings → Privacy & data. Enterprise customers with a signed DPA should rely on that agreement where it conflicts with the online version.
Escalations
Contact privacy@visionatlas.ai when you cannot fulfill a request with in-app tools alone.