AI ATLAS® Back to Atlas
OUR PRIVACY APPROACH · OCTOBER 2026

Your universe.
Your rules.

AI Atlas helps you understand your AI activity while collecting as little as possible.

Metadata, with context.

Activity records contain application, timestamp, model when provided, category, and optional tokens and recorded cost. Atlas does not store prompts, responses, or conversation bodies. A supported export’s title can be classified locally in your browser and is discarded before storage.

You decide where data lives.

The public demo uses a separate illustrative dataset. The local workspace stores imported metadata in this browser’s local storage, without a server upload. Device-local data is accessible to anyone using this browser profile. An authenticated workspace stores records in your configured Supabase project with per-user access policies.

Connections are explicit.

Eligible organization API connections require your admin credentials. Keys are encrypted on the server and are never returned to the browser. Personal subscriptions do not automatically provide access to chat history. We never use session cookies, hidden endpoints, or scraping to access your tools.

Classification stays local.

Atlas can suggest a work category from imported title metadata using simple local rules. Suggestions include their confidence and source. You can correct them. No content is sent to an external AI classification service.

Export, disconnect, delete.

Settings lets you export imported event records as JSON or CSV, clear activity, or delete your authenticated account. Account deletion also removes related records and credentials. Downloaded export files are your responsibility. Disconnecting a provider deletes its stored API credential and stops future synchronization; imported data remains until you delete it.

Service boundaries.

Configured account functionality uses Supabase for identity and storage, and Inngest for background API synchronization. Provider API calls send their required credentials to the corresponding provider. Hosting infrastructure may process standard request metadata. No security certification or regulatory compliance is claimed.

Explore privacy controls