Last updated: April 2026
Atlas Design Institute ("we," "us") is the data controller for personal data collected through the Spy by Atlas platform. Contact: atlasalpaytr@gmail.com
Account Data: Name, email address, and password hash when you register. Profile Data: Information you voluntarily provide — company, role, industry, social media handles, daily routine, interests, and security concerns. Usage Data: Queries submitted to the platform, reports generated, pages visited, timestamps. Payment Data: Processed by Paddle (our merchant of record). We do not store credit card numbers. Technical Data: IP address, browser type, device information collected for security and service improvement.
We use your data to: provide and operate the Service; generate personalized intelligence reports; authenticate your identity; process payments and manage subscriptions; send service-related communications; improve the Service; comply with legal obligations; detect and prevent fraud and abuse.
We process personal data on the following bases: Contract performance: to provide the Service you subscribed to. Legitimate interests: to improve our Service and prevent abuse. Consent: for optional profile data you voluntarily provide. Legal obligation: to comply with applicable laws.
Your data is stored in secure PostgreSQL databases hosted by Supabase with Row-Level Security (RLS) enforced. Each user's data is strictly isolated — no data is shared between accounts. All data is encrypted in transit (TLS) and at rest. Authentication tokens are managed via secure HTTP-only cookies. We retain your data for as long as your account is active. Upon account deletion, all personal data is permanently removed within 30 days.
We do NOT sell your personal data. We share data only with: Paddle: payment processing (as merchant of record). Supabase: database hosting. Google (Gemini API): AI processing of your queries (queries are not stored by Google for training). Law enforcement: only when required by valid legal process.
You have the right to: Access your personal data. Rectify inaccurate data. Erase your data ("right to be forgotten"). Restrict processing of your data. Port your data to another service. Object to processing based on legitimate interests. Withdraw consent at any time. To exercise these rights, contact us at atlasalpaytr@gmail.com. We will respond within 30 days.
The Service analyzes publicly available information ("open-source intelligence"). We do not access private systems, hack databases, or intercept communications. All intelligence reports are derived from data that is already publicly accessible. If you are the subject of a search and wish to have information removed, please contact us.
We use essential cookies for authentication and session management. We do not use advertising or tracking cookies. See our Cookie Policy for details.
The Service is not directed to individuals under 18. Family account features that monitor children's social media are operated by the parent/guardian and do not create accounts for minors. We do not knowingly collect data from children under 13 (COPPA) or under 16 (GDPR).
Data may be processed in the European Union, United States, and Turkey. We ensure appropriate safeguards for international transfers in compliance with GDPR, including Standard Contractual Clauses where applicable.
We may update this policy periodically. Material changes will be communicated via email or in-app notification. Continued use after changes constitutes acceptance.
Data Protection Inquiries: atlasalpaytr@gmail.com — Atlas Design Institute — Istanbul, Turkey