Privacy Policy

This policy explains how Supergrow Digital Private Limited (“we”, “us”) handles personal data in Atlas and on this website. For a plain-language overview of our safeguards, see Trust.

What we collect

• Account details: your name, email, password (stored only as a secure hash) or the sign-in provider you choose, and your profile picture if you add one.
• Business data: what you add or connect, such as business details, products, orders and your store’s customer contacts.
• Public website information: pages of the website you give us, read to describe your business. When you use the website check without an account, we read the homepage and one shop page, send their public text to OpenAI for a short business read, and keep that read for a day so repeat checks of the same site are quick. Each check also counts against a daily limit for your IP address.
• Website check records: whether or not you allow analytics, we keep a record of each check so we can understand who is interested in Atlas: the website, the time and the result, your approximate location (country and region), your browser and operating system, and a scrambled code made from your IP address, which lets us count repeat checks. We do not store the IP address itself in this record. If you allow analytics and create an account in the same browser session, we also link that session’s earlier checks to your account; choosing Decline removes the link.
• Technical data: sign-in sessions, security logs and records of important activity in your workspace.
• Optional usage analytics: if you allow analytics, the pages you visit, interactions, browser/device information, page performance, referral information and IP addresses. Signed-in analytics includes your account ID, name and email. If you separately allow session replay, we record your journey on the website and inside Atlas, including displayed business information. PostHog masks input fields by default; ordinary page text remains readable. If your signed-in choice allows analytics, Atlas also sends named usage events from its servers, including WhatsApp use: for example signing up, adding a connection, asking a question (typed or by voice, and in which language) and how long the answer took, with your Business's name, category, platform, plan and country. These events never include what you asked, Atlas's answers, orders or customers.
• WhatsApp, if you connect it: your WhatsApp number, the messages you send Atlas and our replies, and delivery status. Your questions and answers are stored encrypted, like web chat. A voice note you send is turned into text to answer it, and we don’t keep the recording.
• Enquiries: what you send through our contact form. We email it to our team and do not store it in Atlas.

How we use it

To provide and secure Atlas, show your figures, run the AI tasks you enable, send the notifications and emails you choose, reply to you, and understand who is interested in Atlas from website checks. We do not sell personal data, and we do not send you marketing email unless you ask for it.

Who processes it

• Cloud hosting and email delivery providers that run Atlas for us.
• Product and web analytics (PostHog, EU Cloud), after your permission. Analytics includes actual page URLs and interactions. With separate replay permission, recordings can include business records, conversations and other information displayed on pages you are authorized to view. This is separate from optional business support sharing.
• Error and performance monitoring (Laravel Nightwatch, with data stored in the EU), which records how Atlas pages, background jobs and database queries perform, and errors when they happen. It includes the ID, name and email of the person signed in, so we can help them. We remove secrets from links and the values from database errors before anything is sent, and database queries are recorded without their values.
• AI providers (OpenAI, and models reached through OpenRouter, which may include Anthropic, Google, Meta, Microsoft and NVIDIA), which receive only the information a task needs. WhatsApp voice notes go to Sarvam, an Indian AI company, to be turned into text; longer ones, or any Sarvam can’t hear, go to Google’s Gemini through OpenRouter. When Atlas answers a voice note with voice, Sarvam also turns the answer’s text into speech. Public web searches go to DeepSeek and contain public business information such as your business name, products, competitors and founders’ names and roles, not orders or customer details. Trust explains each provider’s training policy.
• Meta (WhatsApp Cloud API), which carries messages between you and Atlas if you connect WhatsApp, under WhatsApp’s business terms.
• Our team, only for detailed business records when an owner turns sharing on, and only for the categories chosen.

How long we keep it

We keep your data while your account or business exists. WhatsApp delivery records are kept for ninety days, and WhatsApp brief reports are deleted when their link ends after seven days. Anyone you forward a report link to can see that report until then. To stop using WhatsApp, disconnect your number from your profile or send “disconnect” to Atlas. Disconnecting keeps your earlier chats in Atlas; deleting your account removes them. Activity history is kept for twelve months, and records of AI tasks for up to ninety days. When you delete your account or business, we delete the related data, except where the law requires us to keep it.

The scrambled code on a website check record is deleted after ninety days. The rest of the record is kept so we can see interest over time. This includes after an account is deleted, when the link to that account is removed; any scrambled code on the record stays until its ninety days end.

Optional analytics events have a one-year retention period on our selected PostHog plan. Session recordings have a separate retention period of up to thirty days. Provider expiry and deletion processing can take additional time. Contact us to request removal of analytics already collected; changing your browser choice stops new collection but does not erase past events. Your data request reference is shown below and in signed-in privacy settings while usage sharing is allowed. Preferences are in Settings → Privacy & Security or Profile; website visitors can use Privacy choices in the footer.

Your rights

Under the Digital Personal Data Protection Act, 2023 and other applicable law, you can ask to access, correct or erase your personal data, withdraw consent, and raise a grievance. Most of this is available in Settings; for anything else, email us. If you are a customer of a store that uses Atlas, please contact that store first, as it controls your data.

Cookies

We use essential cookies to keep you signed in and protect forms. With your permission, PostHog also uses browser storage and cookies for analytics. Allow necessary enables usage analytics without session replay; Allow all enables both analytics and session replay; Decline disables both. These choices are optional and separate from business support sharing. Use Settings → Privacy & Security or Profile to change them or decline at any time. Website visitors can use Privacy choices in the footer. Choices apply to this browser; we ask again when switching signed-in accounts. We do not use advertising cookies.

Security

Sensitive data such as store credentials and AI inputs is encrypted in our database, every business is kept separate, and access is checked on our servers. No system is perfectly secure, and we will notify you and the authorities of a breach as the law requires.

Changes

We will post updates here with a new date, and tell you about significant changes.

Contact

Supergrow Digital Private Limited
#198, 2nd Floor, CMH Road, Indiranagar, Second Stage, Bangalore 560038, Karnataka, India
CIN U72900KA2022PTC165642 · GSTIN 29ABJCS3122L1Z1

Email: [email protected] or [email protected]