ATLAS is operated by SAR SOLUTIONS, LLC, a Delaware limited liability company based in Dover, Delaware. This policy explains what we collect, why, and what you can ask us to do about it.
This Privacy Policy describes how SAR SOLUTIONS, LLC ("ATLAS", "we", "us", or "our") collects, uses, discloses, and protects personal information in connection with the ATLAS platform at atlas-stocks.com, including our websites, dashboards, simulations, reports, emails, and APIs (together, the "Services").
By creating an account or using the Services, you confirm that you have read this policy. If you do not agree with it, do not use the Services.
ATLAS runs quantitative models and uses third-party AI providers to generate summaries and analysis. We do not sell your personal information, and we do not use your account data, portfolios, or watchlists to train third-party AI models.
The entity responsible for your personal information (the "controller" under EEA/UK law, and the "business" under California law) is:
ATLAS is the commercial name of the platform through which we provide the Services.
The Services are operated from the United States and this policy is written under U.S. law. We also offer the Services to users in Mexico, the European Economic Area, and the United Kingdom.
If you are in one of those regions, the annexes at the end of this policy give you additional rights. Where an annex conflicts with the main body of this policy, the annex controls for users in that region.
The Services are not directed at anyone under 18. We do not knowingly collect personal information from children. If you believe a minor has given us personal information, contact us and we will delete it.
We collect the following categories of personal information. The California statutory category is noted in brackets.
Name, email address, country, language, time zone, date of birth (for age eligibility), and a hashed password or a Google sign-in identifier. [Identifiers]
Plan, subscription and trial status, credit balance, Stripe customer and subscription IDs, invoices, and payment history. Card numbers are collected and stored by Stripe, not by us. [Commercial information; financial information]
Tickers, positions, quantities, cost basis, allocations, watchlists, notes, simulations, saved portfolios, and alert settings that you enter. [Commercial information]
IP address, browser and device type, pages viewed, features used, simulations run, session and login timestamps, error logs. [Internet or network activity]
Emails and support messages you send us, email preferences, and whether you opened or clicked our emails. [Identifiers; internet activity]
Country or region inferred from your IP address, used for language, tax, and regulatory purposes. We do not collect precise GPS location. [Geolocation data]
We do not intentionally collect sensitive personal information such as government ID numbers, health data, biometric data, precise geolocation, or racial, religious, or political information. Please do not enter it into notes fields.
We use personal information for these business purposes:
We do not use your personal information for automated decision-making that produces legal or similarly significant effects about you.
We disclose personal information to service providers who process it on our behalf, under contract, and only for the purposes we specify. Our main providers are:
Payments, subscriptions, invoicing, and tax. Stripe is the processor of record for card data.
Hosting and delivery of the ATLAS web application.
Hosting of the ATLAS backend and database.
Delivery of transactional and product emails.
Sign-in with Google, where you choose to use it.
Model providers, including Anthropic, used to generate written analysis. Prompts sent to these providers are not used to train their models.
Providers of price, fundamentals, and news data. We send them tickers, not personal information about you.
We may also disclose personal information: (a) when required by law, subpoena, court order, or a lawful request from a public authority; (b) to enforce our Terms or protect the rights, safety, or property of ATLAS, our users, or the public; and (c) to a buyer or successor in a merger, acquisition, financing, or sale of assets, subject to this policy.
In the 12 months preceding the effective date of this policy, we have not sold personal information, and we have not shared it for cross-context behavioral advertising, as those terms are defined under California law. We do not sell or share the personal information of minors under 16.
Disclosures to the service providers listed above are made for business purposes, not for sale.
We are based in the United States and our infrastructure and service providers are located primarily in the United States and the European Union. If you use the Services from Mexico, the EEA, or the UK, your personal information will be transferred to and processed in the United States.
For transfers of personal data out of the EEA or the UK, we rely on the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable), together with supplementary technical measures such as encryption in transit and at rest. You can request a copy of the relevant transfer mechanism by emailing us.
We keep personal information only as long as we need it for the purposes described above.
We use technical and organizational measures appropriate to the risk, including HTTPS/TLS in transit, encryption at rest, hashed passwords, role-based access controls, least-privilege access to production systems, and logging and monitoring.
No system is perfectly secure. We cannot guarantee absolute security, and you are responsible for keeping your password confidential. If we become aware of a breach affecting your personal information, we will notify you and the relevant authorities as required by applicable law.
Session and authentication cookies that keep you logged in and protect against fraud. These cannot be turned off without breaking the Services.
Local storage entries that remember your language and light/dark theme.
First-party measurement of feature usage, so we can see what works. Used only with your consent where consent is legally required.
Where consent is required (EEA, UK), we ask for it before setting non-essential cookies, and you can withdraw it at any time. You can also block or delete cookies through your browser settings, though this may break parts of the Services. We do not currently respond to browser Do Not Track signals; we do honor Global Privacy Control (GPC) signals as an opt-out of sale/sharing where applicable.
If you live in California, Colorado, Connecticut, Virginia, Texas, or another U.S. state with a comprehensive privacy law, you have the following rights, subject to that law:
To exercise any of these rights, email info@atlas-stocks.com from the address on your account, or use the account deletion option in Settings. We will verify your identity by confirming control of your registered email, and we will respond within 45 days (extendable by another 45 days where permitted). You may use an authorized agent; we may ask for proof of authorization.
If we deny your request, you may appeal by replying to our decision. California residents may also complain to the California Privacy Protection Agency or the California Attorney General.
This annex is the privacy notice ("aviso de privacidad") required by the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) for users in Mexico.
SAR SOLUTIONS, LLC, 1111b S Governors Ave, Suite 55731, Dover, DE 19904, United States. Privacy contact: info@atlas-stocks.com.
The categories listed in section 04 of this policy: identification, contact, billing, investment, and usage data.
Providing the Services, managing your account and subscription, processing payments, and providing support. These purposes are necessary for our relationship with you.
Product and marketing emails, and user surveys. You may refuse these without affecting your access to the Services.
Your data is transferred to and processed in the United States and the European Union by the service providers listed in section 07. These transfers do not require your consent under Article 37 of the LFPDPPP, as they are necessary to perform our contract with you.
You have ARCO rights: Access, Rectification, Cancellation (deletion), and Opposition to processing. You may also revoke your consent and limit the use or disclosure of your data. To exercise these rights, email info@atlas-stocks.com with your name, the account email, a description of the right you are exercising, and proof of identity. We will respond within 20 business days and, if the request is granted, act within 15 business days.
To refuse secondary purposes, reply to any of our marketing emails, adjust your email preferences in Settings, or write to us. If you believe your rights have been infringed, you may file a complaint with the INAI (inai.org.mx).
If you are in the EEA, SAR SOLUTIONS, LLC is the controller of your personal data and we process it on the following legal bases (Article 6 GDPR):
Creating your account, running simulations, building and tracking portfolios, processing your subscription, and providing support. Without this data we cannot provide the Services.
Keeping tax, accounting, and billing records.
Securing the platform, preventing fraud and abuse, debugging, measuring and improving the product, and defending legal claims. We balance these against your rights and you may object at any time.
Non-essential cookies and marketing emails. You can withdraw consent at any time, without affecting processing carried out before withdrawal.
You have the right to access your data; to have it rectified; to have it erased; to restrict or object to processing (including profiling based on legitimate interests); to data portability; and to withdraw consent. You are not subject to decisions based solely on automated processing that produce legal or similarly significant effects.
To exercise any of these rights, email info@atlas-stocks.com. We will respond within one month, extendable by two further months for complex requests. You also have the right to lodge a complaint with your local supervisory authority — in Spain, the Agencia Española de Protección de Datos (aepd.es).
If you are in the UK, Annex B applies to you in the same way, read as referring to the UK GDPR and the Data Protection Act 2018 instead of the EU GDPR.
Transfers of your personal data to the United States are made under the UK International Data Transfer Addendum to the EU Standard Contractual Clauses. You have the right to complain to the Information Commissioner's Office (ico.org.uk).
We may update this policy to reflect changes in the Services, the law, or our providers. The version published on this page is the current one, and the effective date is shown at the top.
If we make a material change, we will notify you by email or through the platform before it takes effect. Continuing to use the Services after that means you accept the updated policy.
For any privacy question, request, or complaint, write to us. We read every message.