Privacy Policy

1. Introduction

Atlas Cash Management, Inc. ("Atlas," "we," "us," or "our") respects your privacy and is committed to protecting the personal and financial information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our cash management platform (the "Platform").

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, company name, role, and other details provided during registration.
• Organization Information: Business name, type, jurisdiction, and authorized users added to your organization.
• Communication Data: Information included in any messages you send to our support team.

2.2 Information Collected Through Third-Party Services

• Financial Account Data (via Plaid): Account names, balances, transaction history, routing numbers, and account numbers from bank accounts you link to the Platform.
• Brokerage Data (via Alpaca): Portfolio positions, trade history, account balances, and investment performance data.
• Transfer Data (via Increase): Transfer status, amounts, and transaction identifiers for fund movements between your accounts.

2.3 Automatically Collected Information

• Usage Data: Pages visited, features used, actions taken, timestamps, and session duration.
• Device Information: Browser type, operating system, IP address, and device identifiers.
• Cookies and Similar Technologies: We use essential cookies for authentication and session management, and analytics cookies to understand Platform usage.

3. How We Use Your Information

We use collected information to:

• Provide, operate, and maintain the Platform and its features.
• Process account connections, transfers, and investment transactions.
• Generate cash flow analytics, AI-powered insights, and optimization recommendations.
• Execute automated sweep rules you configure.
• Communicate with you about your account, transactions, and Platform updates.
• Detect, prevent, and respond to fraud, security incidents, and technical issues.
• Comply with legal and regulatory obligations.
• Improve and develop new Platform features.

4. How We Share Your Information

We do not sell your personal or financial data. We share information only in the following circumstances:

• Third-Party Service Providers: We share data with Plaid, Alpaca, Increase, Clerk, and other service providers strictly as necessary to deliver Platform functionality. These providers are bound by contractual obligations to protect your data.
• Legal Requirements: We may disclose information when required by law, subpoena, court order, or governmental regulation, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
• With Your Consent: We may share information for other purposes with your explicit consent.

5. Data Security

We implement industry-standard technical and organizational measures to protect your information, including:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256).
• Secure authentication via Clerk with support for multi-factor authentication (MFA).
• Role-based access controls within organizational accounts.
• Regular security assessments and monitoring.
• Segregation of customer data by organization.

No method of transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide services. We also retain information as necessary to comply with legal obligations (e.g., financial record-keeping requirements), resolve disputes, and enforce our agreements. When your data is no longer needed, we securely delete or anonymize it.

7. Your Rights and Choices

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to certain processing of your data.
• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at privacy@atlascash.com. We will respond to verified requests within 30 days.

8. International Data Transfers

If you access the Platform from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses where required by applicable law (e.g., GDPR).

9. Children's Privacy

The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a person under 18, we will take steps to delete such information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Platform and updating the "Last updated" date. We encourage you to review this policy periodically.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: