Privacy Policy

Synaptic is the controller of the personal data processed through Atlon. For any privacy question, contact us at hello@atlon.one.

This policy explains what we collect, why, how long we keep it, who we share it with, and the rights you have.

- Account data: your email, name, and authentication details. - Content: the prompts you write, the files you upload, and the chats you create. - File fingerprints: a technical hash of your files, used to detect duplicates and avoid storing the same file twice. - Usage data: technical logs such as your IP address, browser and device information, and records of requests to our service. - Payment data: handled by Stripe. We receive confirmation of payment but never store your full card details.

We process your data to:

- provide the service and generate your results (performance of our contract with you); - operate, secure, and improve the platform, and prevent abuse (our legitimate interests); - comply with our legal obligations, including tax and accounting; - send service communications, and, where required, with your consent.

You can withdraw consent at any time where processing is based on it.

To generate results, we send your prompts and the relevant files to the AI provider you use, solely to produce your output.

Some features automatically read your files to generate tags and descriptions that help you organise them.

We never use your content to train AI models, and our providers are bound by terms that prohibit training on your inputs.

We share data only with service providers who process it on our behalf to run Atlon:

- Cloudflare R2 — file storage; - Supabase — database and authentication; - Stripe — payment processing; - AI providers (such as OpenAI, Google, Anthropic, Replicate, and fal) — to generate your results; - a weather service and a web-search provider — when you use chat features that call them.

We do not sell your personal data.

Some of our providers are located outside the European Union, including in the United States. Where your data is transferred outside the EU, the transfer is protected by appropriate safeguards, such as the European Commission's Standard Contractual Clauses and/or the EU-US Data Privacy Framework.

- Account and content: kept while your account is active. - Deleted files: kept in trash for 30 days, then permanently removed. - Technical logs: kept for up to 60 days. - Payment and accounting records: kept for the period required by law.

When you close your account, we delete or anonymise your data, except what we must keep to meet legal obligations.

You have the right to access, correct, delete, and export your data, and to object to or restrict certain processing. Where processing is based on consent, you can withdraw it at any time.

To exercise your rights, contact us at hello@atlon.one. If you are in the EU and believe we have not respected your rights, you may lodge a complaint with your data protection authority; in France, this is the CNIL.

Your files are stored in a private storage bucket that is not publicly accessible. Access is granted only through short-lived signed links that expire automatically. Data is encrypted in transit.

No method of storage or transmission is perfectly secure, but we take reasonable measures to protect your data and limit who can access it.

Atlon is intended for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, contact us at hello@atlon.one and we will delete it.

We use only the cookies and similar technologies strictly necessary to keep you logged in and to operate the service. We do not use advertising or analytics cookies. If this changes, we will update this policy and ask for your consent where required.

We may update this Privacy Policy. We will post the updated version with a new effective date and, for material changes, notify you by email or in the service.

For any question about this policy or your data, contact us at hello@atlon.one.