Privacy Policy

AdvisoryAtlas is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our service, including the website, REST API, and embeddable widget.

1. Information We Collect

Information You Provide

You can browse much of AdvisoryAtlas without creating an account. If you choose to register, contact us, subscribe to a paid API plan, or otherwise interact with protected features, we may collect the information you submit, such as your name, email address, authentication details, and account preferences.

Automatically Collected Information

When you visit our website or use our services, we may automatically collect:

• Usage Data: Pages visited, features used, time spent, referral pages, and interactions
• Technical Data: IP address, browser type, device information, operating system, and log data
• Session Data: Authentication state, security events, and saved preferences
• Cookies and Similar Technologies: Data used to remember settings, measure traffic, and support advertising
• API Usage Data: For API subscribers, request timestamps, endpoints accessed, HTTP response codes, and rate-limit consumption
• Payment Transaction Data: For paid subscribers, billing confirmations including subscription status, plan type, and payment timestamps (we do not store full card numbers)

2. How We Use Your Information

• Provide and maintain our service
• Operate user accounts and features such as favorites and PDF export
• Manage API subscriptions, enforce rate limits, and process billing
• Improve user experience and website functionality
• Analyze usage patterns and optimize performance
• Ensure security and prevent abuse
• Display and measure advertising where applicable
• Comply with legal obligations

3. Legal Basis for Processing

Where applicable (e.g. EEA users), we process personal data on the following legal bases:

• Contract performance: To provide the service and manage your account and API subscriptions
• Legitimate interests: Improving our service, ensuring security, analyzing aggregate usage, and preventing fraud
• Legal obligation: Compliance with applicable laws and court orders
• Consent: For optional activities such as advertising personalization

4. Information Sharing and Disclosure

• Legal Requirements: When required by law or legal process
• Safety: To protect rights, property, or safety of users or the public
• Service Providers: With trusted partners who assist in operating our service
• Business Transfer: In connection with a merger, acquisition, or sale of assets

5. Payment Processing

If you subscribe to a paid API plan, your billing information is collected and processed by Stripe, Inc., our third-party payment processor. We do not store full payment card details on our servers. Stripe processes payment data in accordance with its own Privacy Policy and PCI-DSS standards.

• We receive only limited confirmation data: subscription status, plan type, and payment timestamps
• Stripe may transfer and store billing data in the United States and other countries where it operates
• You can review Stripe's data practices at stripe.com/privacy

6. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember your preferences and maintain your authenticated session
• Analyze website traffic and usage patterns
• Improve website performance and user experience
• Serve personalized advertisements through Google AdSense

Where required by applicable law (for example in the EEA and UK under GDPR and ePrivacy rules), we present a consent management banner that allows you to accept, refuse, or customize non-essential cookies and personalized advertising. You can update your consent preferences at any time through the consent settings provided on this website.

We may also use Google reCAPTCHA on certain forms. reCAPTCHA collects hardware and software information and sends it to Google for analysis. You can control cookies through your browser settings; disabling them may affect some functionality.

7. Advertising and Google AdSense

We may use Google AdSense to display advertisements. Google AdSense uses cookies and web beacons to serve ads based on your prior visits to our website or other websites. We may also work with Ezoic Inc. as an advertising and consent-management partner; Ezoic processes data in accordance with its own privacy policy. You can opt out of personalized advertising via Google Ads Settings or the Digital Advertising Alliance.

8. Data Security

We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. Security measures include: HTTPS encryption, secure hosting, regular security updates, and privacy by design. No internet transmission is completely secure, and we cannot guarantee absolute security.

9. Data Retention

• Account data is retained while your account is active and deleted upon account deletion
• API usage logs are retained for up to 90 days for security purposes
• Billing records may be retained for up to 7 years as required by financial regulations
• Analytics data may be retained in anonymized form without time limit

10. Third-Party Services

We rely on third-party providers for hosting, analytics, authentication, AI processing, error monitoring, email delivery, consent management and advertising (including Google AdSense and Ezoic), and payment processing (including Stripe for API subscriptions). Those providers may process data on our behalf subject to their own terms and privacy policies.

11. International Data Transfers

Your data may be transferred to and processed in countries other than your own, including Canada and the United States. We rely on service providers such as Stripe, Google, and our hosting infrastructure, which may process data in various jurisdictions. We take reasonable steps to ensure such transfers comply with applicable data protection requirements.

12. Children's Privacy

Our service is not directed to individuals under 16 years of age, or the minimum age for digital consent in your jurisdiction. We do not knowingly collect personal data from minors. If we become aware that we have collected personal data from a minor, we will take immediate steps to delete such information.

13. Account Deletion and Your Right to Erasure

You may delete your account at any time from your Settings page. When you delete your account, we permanently remove your profile, favorites, API keys, and active subscriptions. Billing records required by financial regulations may be retained for the applicable statutory period.

If you need assistance with deletion, contact us and we will process your request within 30 days, subject to identity verification.

14. Your Privacy Rights

Depending on your location, you may have the right to:

• Access, correct, or delete information we hold about you
• Object to or restrict processing of your information
• Data portability (receive your data in a machine-readable format)
• Withdraw consent for optional processing
• Lodge a complaint with a supervisory authority in your jurisdiction