Who controls your data

Controller: ATAPIC Inc

6650 Rivers Ave Ste 105, PMB 726652, North Charleston, SC 29406-4829, USA

Email: privacy@atapic.com

Information we collect

Use of Google and Microsoft user data

When you connect your Google account (Gmail, Calendar, or Workspace) or Microsoft account (Outlook, Microsoft 365, Calendar) to ATAPIC, we access only the scopes you grant during OAuth, and we use that data exclusively to provide user-facing product features that you have requested.

AI processing

ATAPIC uses AI services to deliver the features you actually use — drafting messages, summarizing emails and meetings, recommending leads, generating research insights, normalizing your search intent, and automating workflow steps you trigger. AI is a tool inside the product, not an independent profile of you.

• Your prompts and the data you direct ATAPIC to process (e.g., a search query, an email you’re drafting, a meeting transcript you upload) may be sent to our AI providers for that single task.
• Our AI providers process this data on our behalf as data processors, under contractual terms that forbid using your content to train their general-purpose models.
• We use AI only to provide the features you requested. We do not use Google or Microsoft user data — including email and calendar content — to train ATAPIC’s or any third party’s general-purpose AI models.
• AI output can be wrong, incomplete, or out of date. You are responsible for reviewing AI-generated drafts, recommendations, and insights before sending them, acting on them, or relying on them in any decision. See our Terms of Service for the full disclaimer.

How we use data

• Provide and improve people discovery, research, and opportunity management features
• Personalize results, suggestions, and AI responses based on your goals and usage
• Measure performance, prevent abuse/fraud, and secure the service
• Comply with law, enforce terms, and maintain business and financial records

How we share data

• Subprocessors and service providers: trusted vendors who process data on our behalf under written confidentiality and data-processing terms (see the categories below).
• Business transfers: in mergers, acquisitions, or financing events, data may transfer under this same policy or a successor policy with comparable protections.
• Legal: to comply with law, enforce terms, or protect rights, property, and safety.

We do not sell personal information and do not share it for cross-context behavioral advertising under the CPRA.

Retention & Security

• Account data: kept while your account is active. Deleted within 30 days of account closure, except where we’re required to keep records longer for tax, fraud-prevention, or legal reasons.
• Saved lists, leads, deals, notes, and content you created: persist until you delete them or close your account, then deleted within 30 days.
• Email and calendar content accessed via OAuth: only retained as long as needed to deliver the feature (e.g., a tracked thread, an open scheduling proposal). Tokens are revoked and cached content is purged within 30 days of you disconnecting the account.
• AI prompt and output logs: short-lived diagnostic logs (typically up to 30 days) used only for debugging, abuse prevention, and quality. Not used to train general-purpose models.
• System and security logs: typically 90–180 days, longer where needed for security, fraud-prevention, or legal obligations.
• Backups: encrypted; rolled forward on a regular schedule. Deleted records are removed from active systems immediately and from backups on the normal backup-rotation schedule.
• Security: encryption in transit and at rest, role-based access, audit logging, least-privilege access, and regular backups.

How to delete your data

• In the app: open your account settings and choose Delete account, or delete individual leads, lists, deals, or documents from their detail page.
• By email: send a request to privacy@atapic.com with the subject "Delete my data." We’ll verify your identity and confirm completion. Most requests are completed within 30 days.
• Disconnect a connected account: see the revoke-access instructions in Use of Google and Microsoft user data above.

International data transfers

ATAPIC is operated from the United States. If you’re outside the US, your data may be transferred to and processed in the US or in other countries where our subprocessors operate. Where required, we rely on appropriate safeguards such as the EU Standard Contractual Clauses (SCCs) and equivalent UK and Swiss mechanisms to protect your data.

Your rights

Browser Extension Disclosures

If you install an ATAPIC browser extension, it is designed to enhance people discovery and research on supported sites and in the ATAPIC app.

• Scope & Permissions: Uses permissions such as activeTab, tabs, and storage to read publicly visible page content on supported domains you visit and to save settings. It does not collect passwords, payment info, or private messages.
• Data handled: Public profile elements (name, title, company, profile URL), public engagement signals visible to you, and UI context needed to build/save people into your ATAPIC lists.
• Local processing first: Content is parsed client-side; only the fields needed to create a record or run a feature you invoke are sent to ATAPIC.
• Limited Use: We use extension-collected data only to provide or improve extension and ATAPIC features you request, not to build unrelated profiles, and we do not sell this data.
• Opt-out: You can disable the extension or specific features in the extension settings. Removing the extension stops collection.

Marketing communications

We may send product updates, tips on using ATAPIC to find people, and educational content. You can opt out at the link included in any email or by emailing privacy@atapic.com.