This Privacy Policy describes how VisionAtlas ("VisionAtlas," "we," "us") handles personal information when you use our websites and application (the "Service"). By using the Service, you agree to this Policy. If you do not agree, do not use the Service.
Roles and lawful processing
For most workspace and business content (goals, KPIs, initiatives, updates, and similar data your organization submits), your organization is the data controller and VisionAtlas acts as a data processor, processing that content on documented instructions to provide the Service. Account and billing data may involve VisionAtlas as a controller where we determine purposes (for example, managing your subscription relationship).
Where GDPR or similar laws apply, controller customers are responsible for lawful basis, employee notices, and data subject requests for workspace content. VisionAtlas assists with appropriate technical measures (export, erasure tools, security) as described in our Data Processing Agreement when executed or accepted at registration.
The Service is intended for business performance data, not for protected health information (PHI) or clinical patient records. See our Terms of Service for acceptable use.
Information we collect
Account and workspace data. When you register or are invited, we collect information such as name, work email, company name, role, department assignments, and authentication credentials (stored as secure hashes).
Customer content. You may submit business data in the Service, including goals, KPIs, initiatives, weekly updates, observations, risks, action items, comments, and files you upload (for example, company logos).
Usage and device data. We collect standard log and usage information (IP address, browser type, pages viewed, timestamps) to operate, secure, and improve the Service.
Payment data. Subscriptions are processed by Stripe. We store billing identifiers and subscription status; Stripe processes payment card details according to its privacy policy.
Communications. If you opt in to SMS, we process your phone number and message preferences. Email delivery (for example, verification, reminders, and support) may use our email provider.
How we use information
We use information to:
- Provide, maintain, and secure the Service
- Authenticate users and enforce access controls
- Send transactional messages you request or that relate to your account
- Process subscriptions and support requests
- Improve the Service, including AI-assisted features you enable
- Comply with law and protect our rights and users
We do not sell your personal information.
AI features
When AI features are enabled, relevant customer content may be sent to configured AI providers (for example, OpenAI or Azure OpenAI) to generate summaries, suggestions, or insights. Do not submit information you are not permitted to share with subprocessors listed in your agreement with us.
Cookies and similar technologies
We use cookies and similar technologies for authentication, security, language preferences, and (when configured) bot protection on registration. You can control cookies through your browser; some features may not work without essential cookies.
How we share information
We share information with service providers that help us operate the Service, such as cloud hosting, email, SMS, payment processing, and AI providers. We require appropriate safeguards contractually where applicable. A current subprocessor list is available in Settings → Privacy & data in the application and in our security documentation. We may disclose information if required by law or to protect the Service and users.
Data retention
We retain information while your account is active and as needed to provide the Service, resolve disputes, enforce agreements, and meet legal obligations. Audit and security logs may be retained according to configured retention policies.
Your choices and rights
Depending on your location, you may have rights to access, correct, delete, or export personal information, or to object to certain processing. Contact us at privacy@visionatlas.ai (or your account administrator for workspace data). We may verify your request before responding.
International transfers
If you access the Service from outside the United States, your information may be processed in the United States and other countries where we or our providers operate.
Security
We use administrative, technical, and organizational measures designed to protect information. No method of transmission or storage is completely secure.
Children
The Service is not directed to children under 16, and we do not knowingly collect their personal information.
Changes
We may update this Policy from time to time. We will post the updated version on this page and update the effective date. Material changes may be communicated through the Service or email where appropriate.
Contact
VisionAtlas Privacy inquiries: privacy@visionatlas.ai General support: configure your organization's support contact or email support@visionatlas.ai.