Privacy Policy

Last updated: August 4, 2025

Introduction

Atlys ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use our web application (myatlys.com) and browser extension ("Atlys Extension").

Information We Collect

Information You Provide

  • Account Information: When you create an account, we collect your email address and basic profile information through our authentication provider, Clerk.
  • User-Generated Content: We collect information you create, including:
    • Shopping lists and list names
    • Product items (names, prices, descriptions)
    • Product images and URLs
    • Tags and categories
    • Display preferences and settings

Information Collected Automatically

  • Extension Data: When you use our browser extension, we may collect:
    • Product information from web pages you visit (product names, prices, images)
    • URLs of pages where you save items
    • Your list selections and preferences
  • Usage Data: We collect information about how you interact with our services, including:
    • Pages visited and features used
    • Time spent on different sections
    • Error logs and performance data
  • Technical Data: We automatically collect:
    • Device information (browser type, operating system)
    • IP address and general location
    • Session cookies and local storage data

How We Use Your Information

We use the information we collect to:

  • Provide and maintain our services
  • Process and store your shopping lists and items
  • Enable the browser extension functionality
  • Improve our products and user experience
  • Communicate with you about your account and our services
  • Ensure security and prevent fraud
  • Comply with legal obligations

How We Store Your Information

Data Storage

  • Web Application: Your data is stored in our secure database hosted on Vercel
  • Browser Extension: Some data is stored locally in your browser using Chrome's storage APIs
  • Authentication: Account information is managed by Clerk, our authentication provider

Data Retention

  • We retain your account information and user-generated content for as long as your account is active
  • You may delete your account and associated data at any time
  • Some information may be retained for legal or security purposes

Third-Party Services

We use the following third-party services:

Clerk (Authentication)

We use Clerk to handle user authentication and account management. Clerk's privacy policy can be found at: https://clerk.com/privacy

Vercel (Hosting)

Our web application is hosted on Vercel. Vercel's privacy policy can be found at: https://vercel.com/privacy

Data Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties, except:

  • With your explicit consent
  • To comply with legal obligations
  • To protect our rights and safety
  • With service providers who assist in operating our services (under strict confidentiality agreements)

Your Rights

You have the following rights regarding your personal information:

  • Access: Request a copy of your personal data
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your account and associated data
  • Portability: Request a copy of your data in a machine-readable format
  • Objection: Object to certain processing of your data

Security

We implement appropriate security measures to protect your information, including:

  • Encryption of data in transit and at rest
  • Secure authentication through Clerk
  • Regular security assessments
  • Access controls and monitoring

Cookies and Tracking

We use cookies and similar technologies to:

  • Maintain your session and preferences
  • Remember your login status
  • Improve our services
  • Provide a seamless experience between our extension and web app

Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

Legal Basis (GDPR)

If you are in the European Economic Area (EEA), our legal basis for processing your personal data includes:

  • Contract performance (providing our services)
  • Legitimate interests (improving our services, security)
  • Consent (where required)

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and how we use it.