Privacy notice
Updated September 26, 2026
This notice explains what data Atlantos processes, why, and what your rights are (EU Regulation 2016/679 and UK GDPR).
Data controller
[Ragione sociale del titolare], [Indirizzo della sede]. For any privacy request: privacy@atlantos.eu.
The Chamber of Commerce you work with sees your company’s data and requests so it can assist you.
What data we process
Account: email address and, if you set one, your password (stored encrypted by the authentication service).
Company: company name, country, products, customs codes, markets and descriptions you enter.
Activity: searches, saved buyers, feedback on results, introduction requests and messages with the Chamber.
Free trial: the same data, linked to an anonymous session without an email.
Online subscriptions: billing company name and email, plan, subscription status and renewal date. Card details are handled by Stripe: we never see or store them.
Technical data: access and error logs needed to run and secure the service.
Data about other companies
To suggest buyers we use public company data: the Companies House register, HMRC statistics, the UK customs tariff and companies’ public websites. We do not collect personal data of those companies’ employees or contacts.
Why we process it and on what basis
To provide the service you asked for (performance of a contract): market analysis, buyer search, introductions.
For security, abuse prevention and improving result quality (legitimate interest).
To comply with legal obligations, where applicable.
We do not sell your data or use it for advertising.
Artificial intelligence
Some features use AI models to classify products, assess buyer relevance and draft text. We send these services only the information needed (e.g. the product description, public company data), not your email. Results are suggestions: the Chamber reviews every introduction before contacting a company.
Who we share it with
Supabase (database and authentication, servers in Ireland, EU).
Railway (application servers, EU) and Vercel (website hosting).
Stripe (payments for Explore and Match subscriptions).
TypeSafe and OpenRouter (AI models) and Serper (web search).
Some of these providers are based in the United States: transfers rely on the safeguards required by the GDPR (standard contractual clauses or adequacy decisions).
How long we keep it
As long as your account is active. If you delete your account, we immediately delete your data and that of companies where you are the only member.
Data from free trials that were not turned into an account is deleted periodically.
Billing records for subscriptions are kept for as long as tax law requires (10 years in Italy), even after the account is deleted.
Technical logs are kept as long as needed to secure the service.
Your rights
You can access, correct and delete your data, restrict or object to its processing, and receive it in a readable format.
From “My company” → “Privacy and data” you can download all your data or delete your account yourself. For anything else write to privacy@atlantos.eu.
You can lodge a complaint with the Italian Data Protection Authority (Garante) or the UK ICO.
Cookies
We only use strictly necessary technical storage: the browser keeps your sign-in session and a few preferences (e.g. language). We do not use profiling or advertising cookies.