Atlas

Legal

Privacy Policy

Last updated: March 30, 2026

Introduction

Code Carbon Private Limited ("Atlas", "we", "us", or "our") operates the atlas-compliance.ai website and the Atlas platform (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our Service.

We are committed to protecting the privacy of our users, customers, and website visitors. This policy applies to all information collected through our Service, website, and any related services, sales, marketing, or events. By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

Effective Date: March 30, 2026.

Types of Data Collected

We collect several types of information to provide and improve our Service. The types of data we collect include:

Personal Data. When you request a demo, subscribe to our newsletter, submit a contact form, or create an account, we may collect personally identifiable information including your name, email address, company name, job title, phone number, and business address. We only collect personal data that you voluntarily provide to us.

Usage Data. We automatically collect certain information when you access our Service, including your Internet Protocol (IP) address, browser type and version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers, and other diagnostic data. This data helps us understand how our Service is used and how we can improve it.

Cookies. We use cookies and similar tracking technologies to track activity on our Service and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier. We use the following types of cookies:

  • Session Cookies: Used to operate our Service and maintain your authenticated session.
  • Preference Cookies: Used to remember your preferences and various settings.
  • Security Cookies: Used for security purposes, including detecting authentication abuses.

Location Data. We may collect and process information about your approximate location only with your express permission. You may enable or disable location services through your device or browser settings at any time.

How We Use Your Data

Code Carbon Private Limited uses the collected data for the following purposes:

  • To provide and maintain our Service, including monitoring the usage of our Service.
  • To manage your account and provide secure authentication for registered users.
  • To notify you about changes to our Service, including updates, security patches, and policy changes.
  • To provide customer support and respond to your requests, questions, and feedback.
  • To perform analytics and gather usage information so that we may improve our Service.
  • To monitor and prevent technical issues, detect fraud, and ensure the security of our Service.
  • To send you marketing communications about products, services, and events offered by Atlas, where you have opted in to receive such communications. You may opt out of marketing emails at any time by clicking the unsubscribe link included in every marketing email or by contacting us directly.

Data Retention and Transfer

We will retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your personal data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.

As a general guideline, we retain personal data for the duration of your active account relationship with us plus an additional twelve (12) months following account termination. Usage data is typically retained for shorter periods unless it is needed for security, to strengthen the functionality of our Service, or where we are legally obligated to retain it for longer periods.

Your information, including personal data, may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ from those of your jurisdiction. Code Carbon Private Limited is headquartered in India. If you are located outside India, please be aware that information we collect will be transferred to and processed in India. By submitting your personal data, you consent to this transfer, storing, and processing.

Data Disclosure

We may disclose your personal data in the following limited circumstances:

  • Business Transactions: If Code Carbon Private Limited is involved in a merger, acquisition, or asset sale, your personal data may be transferred. We will provide notice before your personal data is transferred and becomes subject to a different privacy policy.
  • Law Enforcement: Under certain circumstances, we may be required to disclose your personal data if required to do so by law or in response to valid requests by public authorities (such as a court or government agency).
  • Legal Requirements: We may disclose your personal data in the good faith belief that such action is necessary to comply with a legal obligation, protect and defend the rights or property of Code Carbon Private Limited, prevent or investigate possible wrongdoing in connection with the Service, protect the personal safety of users of the Service or the public, or protect against legal liability.
  • Service Providers: We may employ third-party companies and individuals to facilitate our Service, provide the Service on our behalf, perform Service-related activities, or assist us in analyzing how our Service is used. These third parties have access to your personal data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Atlas will never sell your personal data to third parties. Atlas will never share your personal information, account data, or any user-generated content with third-party artificial intelligence model service providers for the purposes of model training, fine-tuning, or any other form of machine learning development.

Data Security

The security of your data is of paramount importance to us. Atlas employs robust, enterprise-grade security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

Our security practices include:

  • ISO 27001 certification for our information security management system.
  • SOC 2 Type II compliance currently in progress.
  • TLS 1.2 or higher encryption for all data in transit.
  • Industry-standard AES-256 encryption for all data at rest.
  • Regular security audits, vulnerability assessments, and penetration testing.
  • Role-based access controls and principle of least privilege for all internal systems.

However, please be aware that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

Your Data Protection Rights

Depending on your location and applicable law, you may have the following rights regarding your personal data:

  • Right of Access: You have the right to request copies of your personal data that we hold.
  • Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
  • Right to Erasure: You have the right to request that we erase your personal data, under certain conditions.
  • Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
  • Right to Object to Processing: You have the right to object to our processing of your personal data, under certain conditions.
  • Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
  • Right to Withdraw Consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact us at support@codecarbonhq.com. We may need to verify your identity before responding to your request. We will respond to all legitimate requests within thirty (30) days. Occasionally, it may take longer if your request is particularly complex or you have made multiple requests, in which case we will notify you and keep you updated.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and store certain information. The tracking technologies we use include:

  • Session Cookies: These are temporary cookies that expire when you close your browser. They are essential for the proper functioning of our Service.
  • Preference Cookies: These cookies allow us to remember choices you make when you use our Service, such as remembering your login details or language preference.
  • Security Cookies: These cookies are used for security purposes and help us detect malicious activity and violations of our terms.

We use Google Analytics to monitor and analyze the use of our Service. Google Analytics collects information such as how often users visit the Service, what pages they visit, and what other sites they used prior to visiting the Service. You can opt out of having your activity on the Service made available to Google Analytics by installing the Google Analytics opt-out browser add-on.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

Third-Party Links

Our Service may contain links to third-party websites or services that are not owned or controlled by Code Carbon Private Limited. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party websites or services. We strongly advise you to review the privacy policy of every site you visit. We are not responsible or liable for the content, privacy policies, or practices of any third-party sites or services.

Children's Privacy

Our Service is not intended for use by anyone under the age of eighteen (18). We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us. If we become aware that we have collected personal data from children without verification of parental consent, we will take steps to remove that information from our servers.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top of this Privacy Policy. Where required by applicable law, we will also notify you by email or through a prominent notice on our Service prior to the change becoming effective. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, your personal data, or wish to exercise any of your data protection rights, please contact us:

  • Email: support@codecarbonhq.com
  • Company: Code Carbon Private Limited