Privacy Policy

1. Scope

This policy applies to the Atlas AI Local application and the informational website at atlaswithin.net. Atlas runs on the owner’s computer. This public website does not provide access to the local Atlas application and does not receive Gmail, Calendar, conversation, workspace, token, or memory data from it.

2. Information Atlas can access

After the owner explicitly connects a Google account, Atlas can access only the authorized account and scopes:

• Google account identity: the account email address, used to verify that the intended owner account was connected.
• Gmail: message and thread metadata, content, labels, Trash state, and unsent drafts needed for requested email assistance.
• Google Calendar: details for events on the primary calendar, limited to events the connected account owns.

Atlas does not expose an email-send action, does not permanently delete Gmail messages, and does not accept, decline, invite, or notify Calendar attendees.

3. How Google user data is used

Google user data is used only to provide owner-requested features, including:

• searching and reading relevant email and calendar information;
• preparing on-demand daily briefs and reply drafts;
• organizing Gmail labels, drafts, and recoverable Trash state;
• creating, updating, or deleting owner-controlled calendar events; and
• showing the owner exactly what an approval-gated action would change.

Email and event content is treated as untrusted data. Instructions inside a message or event cannot grant permission, reveal a secret, or authorize another action.

4. Local storage and processing

• The Google OAuth client credential and refresh token are stored in the owner’s macOS Keychain.
• Short-lived Google access tokens remain in process memory.
• Conversations, requested tool results, project context, exact pending-approval details, and privacy-minimized audit metadata may be retained in the local Atlas database so the owner can inspect and resume work.
• Atlas uses a local model by default. Optional cloud model providers are disabled by default. If the owner deliberately enables one and consents to use it for an owner-facing feature, data needed for that request may be sent to that provider under its separate terms and privacy policy.

Atlas does not place Google credentials in its public website, source files, portable backups, conversation memory, or audit detail. Portable Atlas backups intentionally exclude credentials, although they can include local conversation and application records selected by the owner.

5. Sharing and disclosure

Atlas does not sell Google user data, use it for advertising, or use it to build advertising profiles. Google user data is not shared with unrelated third parties. Data may be processed only as needed for an owner-directed feature, by a provider the owner deliberately enables, or when disclosure is required by law.

Atlas does not use Google user data to train, retrain, or improve a generalized or shared artificial-intelligence or machine-learning model. No person reads Google user data unless the owner gives affirmative permission for specific support, access is necessary to investigate a security issue, or access is required by law.

Atlas AI Local’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

6. Retention, deletion, and disconnection

Local records remain under the owner’s control and can be deleted through Atlas where supported or by removing the relevant local application data and backups. Disconnecting Google revokes the active refresh token and removes it from macOS Keychain; it does not automatically erase local records created before disconnection. Google Account settings provide an independent revocation control.

7. Website data

AtlasWithin does not use advertising trackers, user accounts, or analytics cookies on this website. The hosting and domain providers may process ordinary request information, such as IP address, browser details, and security logs, to deliver and protect the site. This website does not receive Google Workspace data from Atlas AI Local.

8. Security

Atlas uses local storage boundaries, macOS Keychain, bounded Google scopes, owner permissions, exact single-use approvals, and privacy-minimized audit records. No system can guarantee absolute security. The owner can stop Atlas, disconnect Google, and remove local data at any time.

9. Contact and changes

Privacy questions or deletion requests can be sent to privacy@atlaswithin.net. Material changes to this policy will be posted here with a new effective date.