Scope of this policy
This policy covers the Atlas app: the sign-in and data download component of the Atlas service, operated by AtlasLabs OÜ. It describes what data the app accesses through your Google account and how that data is handled. The app is one component of the Atlas service; the service as a whole is governed by the service agreement between your company and AtlasLabs OÜ.
What the app accesses
When you sign in with your Google account, the app receives:
- Read-only permission to access files in your company's dedicated data area on Google Cloud
The app does not request or receive your profile information. Sign-in happens with Google; the app itself receives only an access key, and Google's access control determines what that key can read.
The app cannot read, change, or delete anything else in your Google account.
How your data is used
The app downloads your company's data files to your own device, where they remain under your control. Nothing the app accesses is used for advertising, profiling, or training AI models.
What we receive
Data downloaded by the app flows directly from Google Cloud to your device. AtlasLabs does not receive, store, or process your files through the app. Standard technical access logs (which files were accessed and when) are kept in your company's isolated cloud environment for security and auditing.
Storage and protection
Your data is protected by the following mechanisms:
- All data transfers use encrypted connections (HTTPS/TLS)
- Your company's data is hosted in the European Union, encrypted at rest, in a cloud environment dedicated to your company alone
- Access follows the principle of least privilege: granted per person, read-only, limited to your company's own data area, and withdrawable at any time
- Every access to the data area is logged and auditable
- The app stores its sign-in token and downloaded data files on your device only; the token grants read-only access and can be revoked from your Google account at any time
More on how the Atlas service protects data: security and data protection.
Retention and deletion
The app keeps nothing outside your device: deleting the sign-in token and the downloaded files removes everything the app has stored, and revoking the app's access in your Google account invalidates the token immediately. Technical access logs in your company's cloud environment are retained for a limited period (at most 400 days) and then deleted automatically. When your company's service agreement ends, the company's data area is deleted.
Sharing
We do not share, sell, or transfer data accessed by the app to anyone.
Revoking access
You can revoke the app's access at any time:
- Remove the app's permission in your Google account settings
- Or ask us to withdraw your access: hello@atlasinsight.ee
Access also ends when your company asks us to remove a user or when the service agreement ends.
Google API Services User Data Policy
The Atlas app's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Changes and contact
If this policy changes, the current version is always published at this address. Questions are welcome at hello@atlasinsight.ee.