Legal
Privacy Policy
Last updated July 26, 2026. What personal information DC Atlas collects, why we hold it, who processes it on our behalf, and the rights you have over it.
This policy explains how Atlas Development Global LLC, a Wyoming limited liability company trading as DC Atlas (“DC Atlas”, “we”, “us”), handles personal information when you visit https://dcatlas.io, use the DC Atlas application at https://app.dcatlas.io, or contact us.
It covers personal information about you. It does not cover the business information we publish about data center facilities and the companies that build and operate them, which is compiled from public sources and described in section 11 and in our Data Disclaimer.
1. Who is responsible for your information
Atlas Development Global LLC is the controller of the personal information described in this policy. You can reach us about anything in it at contact@dcatlas.io, or by post at 7345 W Sand Lake Rd, Ste 210 (Office 7891), Orlando, FL 32819, United States.
We are a Wyoming limited liability company based in the United States. If you are in the United Kingdom or the European Economic Area, sections 3, 6 and 9 set out the legal bases we rely on, how your information reaches the United States, and the rights you can exercise.
2. What we collect
Information you give us
- Account details. Your email address, and a password if you do not sign in with a third-party identity provider.
- Profile details. Your name, company, role and stated interests, where you choose to provide them during onboarding or in settings.
- Workspace content. Saved views, bookmarks, alert rules, comparisons, notes and exports you create in the app.
- Messages. What you write to us through the contact form, the waitlist or early-access forms, or by email.
- Atlas AI prompts. The questions you ask Atlas AI and the conversation context needed to answer them.
Information we collect automatically
- Usage information. When you are signed in, we record which records you open and the searches you run, with the time and your account. Concretely, that is the facility or company you viewed and the words you typed into a search box, together with the plan your organization was on at the time. We also record how much you use metered features such as Atlas AI, dataset downloads and reports, so we can operate fair-use limits and bill correctly when paid plans launch. Section 7 says how long we keep it.
- Technical information. IP address, browser and device type, operating system, language, and referring page. Our hosting and security layer logs this to serve the request and to detect abuse.
- Storage on your device. Cookies and local storage, as described in our Cookie Policy.
Usage information is recorded by our own servers as they answer your requests. We do not use a third-party analytics or advertising product, we do not load tracking scripts into the app for this purpose, and we do not track you across other websites. Inside the app, what we hold is a record of actions by a signed-in account. On our public website, if you accept analytics cookies, we also record which pages are opened and how visitors first reached us, without any identifier attached to it. Neither is a profile of you assembled from elsewhere.
We do not record the content you create while using the product for this purpose. Your saved views, watchlists, alert rules, notes and Atlas AI conversations are covered by the sections above and are not part of the usage record described here.
We do not ask for and do not want special-category information (health, biometrics, political or religious views, and similar). Please do not send it to us.
3. Why we use it, and our legal basis
Where the UK GDPR or EU GDPR applies to you, these are the purposes we process personal information for and the legal basis for each.
| Purpose | Information used | Legal basis |
|---|---|---|
| Creating and running your account, and providing the service you signed up for | Account, profile, workspace content | Performance of a contract with you |
| Answering Atlas AI questions and generating reports | Prompts, account, usage | Performance of a contract with you |
| Sending service email such as sign-in links, security notices and alerts you configured | Account, alert settings | Performance of a contract with you |
| Keeping the service secure, preventing abuse and enforcing our terms | Technical, usage | Our legitimate interest in protecting the service and our data |
| Understanding how the product is used so we can decide what to build and improve | Usage, account | Our legitimate interest in improving the product, or your consent where analytics cookies are used |
| Operating fair-use limits on metered features, and supporting and billing your account | Usage, account | Performance of a contract with you |
| Replying to enquiries and providing support | Messages, account | Our legitimate interest in responding to you, or performance of a contract |
| Sending product and marketing email you asked for | Account, profile | Your consent, which you can withdraw at any time |
| Meeting legal, accounting and regulatory obligations | As required | Compliance with a legal obligation |
We do not sell personal information, and we do not share it for cross-context behavioural advertising. We do not use your personal information to make decisions about you by automated means that produce legal or similarly significant effects.
4. Atlas AI and model providers
When you use Atlas AI, your question and the context needed to answer it are sent to a third-party model provider that runs the language model on our behalf. Today those providers are Anthropic and Google. They process the request under our contract with them, as our processors.
Your prompts are not used to train third-party models. We do not authorise it, and our providers' business terms do not permit it by default. We retain conversations so that you can return to them and so we can debug and improve the feature, and you can delete them. Do not paste confidential third-party information into a prompt.
5. Who processes it for us
We keep the number of companies that touch your information small, and we do not give any of them the right to use it for their own purposes. As at the date of this policy:
| Provider | What it does for us | Where |
|---|---|---|
| Cloudflare | Hosting, content delivery, bot protection and the sign-in challenge | Global edge network |
| Supabase | Database, authentication and file storage | United States |
| Resend | Transactional and notification email | United States |
| Anthropic | Language-model processing for Atlas AI | United States |
| Language-model processing for Atlas AI | United States | |
| Mapbox | Map tiles rendered in the application | United States |
We may also disclose personal information to professional advisers, to an acquirer or successor if the business is sold or reorganised, and to authorities where the law requires it. Where we are legally able to, we will tell you before we do.
We do not currently take payments through the platform. No payment processor is connected and we do not hold card details. When paid plans launch, this policy will be updated to name the payment processor before any payment is taken.
6. International transfers
The providers above are largely based in the United States, so personal information about visitors and users in the United Kingdom, the European Economic Area and Switzerland is transferred outside those regions. Where it is, we rely on the European Commission's Standard Contractual Clauses (with the UK Addendum where applicable), together with the technical and organisational measures described in section 8.
You can ask us for details of the safeguards that apply to a particular transfer.
7. How long we keep it
- Account and profile: for as long as your account is open, and up to 90 days after you close it, so the account can be restored if closure was a mistake.
- Workspace content: deleted with your account, on the same timetable.
- Usage information (the records you opened, the searches you ran, and your use of metered features): 12 months from the date of the action. After that it is deleted or reduced to totals that are no longer linked to you.
- Atlas AI conversations: until you delete them, or with your account.
- Support and enquiry email: up to 24 months after the matter is closed.
- Security and access logs: up to 12 months.
- Records we must keep by law: for the period the law requires.
Deleting your account deletes your usage record with it. The usage record is tied to your account in our database, so removing the account removes the underlying entries rather than leaving them behind under an orphaned identifier. You can also ask us to delete your usage record on its own, at any time, without closing your account: write to us using the details in section 13 and we will do it.
Aggregated or de-identified information that can no longer be linked to you may be kept indefinitely.
8. How we protect it
Access to production data is restricted to the people who need it, protected by authentication and row-level authorisation rules in the database, and encrypted in transit. Administrative surfaces are separately gated. We review access regularly, and we log privileged operations.
Who can see your usage information. Only DC Atlas platform administrators, through an internal admin screen that exists so we can support accounts and decide what to build next. It is not visible to other customers, and it is not visible to other members of your own organization: an administrator of your organization can manage its members and its plan, and cannot see what any individual member looked at. Our platform administrators see usage records and totals, never the content you create.
No system is perfectly secure. If a breach affects your personal information and is likely to result in a risk to your rights, we will notify you and the relevant supervisory authority as the law requires.
9. Your rights
Depending on where you live, you have some or all of the following rights over your personal information.
- Access
- Ask what we hold about you and get a copy of it.
- Correction
- Have inaccurate information corrected and incomplete information completed.
- Deletion
- Ask us to delete your information where there is no overriding reason to keep it.
- Portability
- Receive the information you gave us in a machine-readable form, or have it sent to another provider.
- Objection
- Object to processing we carry out on the basis of legitimate interests, including profiling.
- Restriction
- Ask us to pause processing while a dispute about accuracy or legitimacy is resolved.
- Withdraw consent
- Withdraw consent at any time where we rely on it, without affecting processing already carried out.
- Complain
- Complain to your data protection authority. In the UK that is the Information Commissioner's Office; in the EEA it is the authority where you live or work.
To exercise any of these, email contact@dcatlas.io from the address on your account, or use the controls in your account settings. We will respond within one month, and we will tell you if we need longer because the request is complex. We do not charge for this, and we will not treat you differently for asking.
If you are a California resident, you also have the right to know what we collect and disclose, to request deletion and correction, and not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are used in the CCPA.
10. Children
DC Atlas is a business product and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, tell us and we will delete it.
11. Information about companies and facilities
Separately from the personal information above, DC Atlas publishes a research database of data center facilities and the companies connected to them, compiled from public sources. That information is about organisations rather than individuals, and it is described in our Data Disclaimer.
Occasionally a public source names an individual, for example the executive quoted in an announcement. Where we process that information we rely on our legitimate interest in maintaining an accurate record of a public industry, balanced against the limited privacy impact of information the person or their employer has already published. If you are named in a record and want it reviewed or removed, write to contact@dcatlas.io and we will look at it.
12. Changes to this policy
We update this policy when what we do changes. The date at the top always shows the current version. If a change materially affects how we use your personal information, we will tell you by email or in the app before it takes effect.
13. Contact us
Questions, requests and complaints: contact@dcatlas.io. Post: Atlas Development Global LLC, 7345 W Sand Lake Rd, Ste 210 (Office 7891), Orlando, FL 32819, United States.