Privacy Policy

This Privacy Policy explains how [LEGAL ENTITY NAME], Inc. (a Delaware corporation, formation pending) (“Economic Atlas,” “we,” “us,” or “our”) collects, uses, discloses, and retains personal information when you visit or use the Economic Atlas Service. It does not govern third-party websites or services, which have their own policies.

1. Information we collect

Account information. When you create an account, our authentication provider, Clerk, processes the identity and sign-in information you choose to provide, such as your email address and authentication credentials or social sign-in information. Our application stores your Clerk user identifier and email address.

Service content. We process questions and messages submitted to the chat feature, saved chat conversations if you enable account sync, watchlists, saved preferences, and support communications. Avoid submitting sensitive personal information or confidential information that you do not want processed by our service providers.

Browser storage. The Service stores watchlists, chat history, and a pseudonymous chat-session identifier in your browser's local storage. When account sync is enabled, saved watchlists and chat history are also stored with your account so they can be available on other devices. You may clear browser-local data through your browser settings, but doing so does not remove any account-synced copy.

Payment information. Payments are processed by Stripe. We do not receive or store full payment-card numbers. We store limited billing records necessary to provide your plan, such as Stripe customer and subscription identifiers, subscription status, plan, and renewal date.

Usage and technical information. We process information generated by use of the Service, including IP address for rate limiting and security, request timing, usage totals, device/browser information that our hosting or authentication providers may collect, and log information necessary to operate and protect the Service. We do not currently operate an advertising network or sell personal information for cross-context behavioral advertising.

2. How we use information

We use personal information to provide and maintain the Service; authenticate users; process subscriptions; synchronize saved features; answer support requests; enforce limits and prevent fraud, abuse, and security incidents; measure and improve Service performance; comply with law; and establish, exercise, or defend legal claims. We use chat prompts and conversation context to generate requested AI-assisted responses. We do not use your content to train our own general-purpose AI model.

3. Service providers and disclosures

We disclose information to service providers that process it for us to operate the Service, including Clerk for authentication and account management, Stripe for payment processing, our cloud hosting and database providers (including Vercel and Supabase/Postgres), and AI providers used to generate chat responses (currently Anthropic or, when configured, OpenRouter and the model provider selected through it). These providers process information under their own terms and applicable data-processing commitments.

We may also disclose information when required by law, to protect rights, safety, and security, to investigate misuse, or in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets. We do not sell personal information or share it for cross-context behavioral advertising as those terms are defined by applicable U.S. privacy laws.

4. Retention

We retain account and product data for as long as needed to provide the Service and meet the purposes described in this Policy. We retain billing records as required for accounting, tax, dispute, and legal purposes. You may request deletion as described below; we will delete or de-identify personal information we control within a reasonable period, unless we must retain it for a legitimate legal, security, fraud-prevention, or accounting purpose. Backups may persist for a limited period before they are overwritten.

5. Your choices and privacy rights

Depending on where you live, you may have rights to request access to, correction of, deletion of, or a portable copy of personal information; to object to or restrict certain processing; and to withdraw consent where processing is based on consent. You can update sign-in details through your account controls. To request access, deletion, correction, or an export of product data, contact us at [CONTACT EMAIL]. We may verify your request before acting on it and will respond within the time required by applicable law.

If you are in Canada, you may withdraw consent subject to legal or contractual restrictions and reasonable notice. If you are in the EEA, UK, or Switzerland, [LEGAL ENTITY NAME], Inc. (a Delaware corporation, formation pending) acts as controller for the personal information described in this Policy. We process that information to perform our contract with you, comply with legal obligations, pursue our legitimate interests in operating and securing the Service, or with your consent where required. Information may be processed in Canada, the United States, and other countries where our service providers operate; where required, we use appropriate safeguards for international transfers. You may also complain to your local data-protection authority. If you are a California resident, you may have additional rights under California law; this Policy states that we do not sell or share personal information for cross-context behavioral advertising.

6. Cookies and similar technologies

We do not currently use our own advertising cookies. Essential cookies or similar technologies may be set by Clerk to provide sign-in and account security, and Stripe may use them on its hosted checkout. Our hosting providers may also process technical logs. If we add non-essential analytics, advertising, or similar tracking technologies, we will update this Policy and implement any consent mechanism required by applicable law before enabling them.

7. Security and children

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No internet transmission or storage system is completely secure, and we cannot guarantee absolute security. The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided personal information in violation of this Policy, contact us so we can take appropriate action.

8. Changes to this Policy

We may update this Policy to reflect changes to our practices, the Service, or law. We will post the revised Policy with a new effective date and provide additional notice when required by law. Your continued use of the Service after the effective date is subject to the updated Policy.