Privacy Policy

Information we collect.

Information you provide to us

• Contact information such as name, company name, email address, phone number, and mailing address
• Billing and payment information necessary to process invoices
• Communications you send us, including support requests and correspondence

Information collected automatically

• Standard web server logs, including IP address, browser type, pages visited, and timestamps
• Cookies and similar technologies used to maintain session state and improve site functionality

Information we access in the course of providing services

To deliver managed IT, hosting, and integration services, we may access systems, data, and credentials provided to us by our clients. This access is used solely to perform the services requested and is governed by our service agreements.

How we use your information.

We use the information we collect to:

• Deliver and support the IT services you have engaged us to provide
• Create and send invoices and process payments
• Respond to inquiries and provide customer support
• Maintain and improve our services and systems
• Comply with legal obligations

We do not sell, rent, or share your personal information with third parties for marketing purposes.

Third-party services.

In operating our business, we use third-party services including accounting software, communication platforms, and cloud infrastructure providers. These providers have their own privacy policies and are selected for their commitment to data security. We share only the information necessary for them to perform their functions.

Atlas platform.

Effective date and last updated: September 14, 2026.

Hyperion Works, LLC (“Hyperion Works,” “we,” “us,” or “our”) operates the Atlas platform at atlascore.app and its applications (Atlas File Storage, Atlas CRM, Atlas Calendar, and others; together “Atlas”). This section explains what information Atlas collects, how it is used, and the choices you have. It supplements, and does not replace, the policy above for our website and general IT services.

Who this section covers

• Account holders and organization members who sign in to Atlas.
• People whose information is stored in Atlas by our customers (for example, a contact record in Atlas CRM). For that data, our customer is the controller and we process it on their instructions.

Information Atlas collects

Account information. Name, email address, password (stored as a salted hash), optional phone number for two-factor codes, organization name and billing address, and the apps each organization subscribes to.

Billing information. Card details are collected by our payment processor (Authorize.Net) and never touch our servers; we store only the processor’s token, the card brand, and last four digits. Invoices, payments, and usage counts are stored by us.

Content you put into Atlas. Files and folders (File Storage), contact and company records (CRM), calendars and events (Calendar), documents, messages, and any other content you or your organization create or import.

Data imported from connected accounts. When you choose to connect a third-party account, Atlas accesses only the data needed for the feature you started:

• Google Drive (drive.readonly) — reads the names, folder structure, and contents of files you select for a one-time import into Atlas File Storage; writes nothing to Google; the token is deleted when the import job completes or fails.
• Google Contacts (contacts.readonly) — reads names, email addresses, phone numbers, organizations, and postal addresses for a one-time import into Atlas CRM after you review a preview; writes nothing to Google; the token is deleted when the import job completes or fails.
• Google Calendar, one-time import (calendar.readonly) — reads the calendar list and events in the calendar and date range you choose, for a one-time import; writes nothing to Google; the token is deleted when the import job completes or fails.
• Google Calendar, two-way sync (calendar) — reads events on the calendar you connect and creates, updates, and deletes events on that Google calendar to mirror changes you make in Atlas; the token is kept while sync is connected and deleted when you disconnect.
• Microsoft 365 (Files.Read.All, Contacts.Read, Calendars.ReadWrite) — the Microsoft equivalents of the above via Microsoft Graph, with the same access windows.
• Apple iCloud (CalDAV/CardDAV, app-specific password) — contacts or calendars you choose, writing calendar events only for two-way sync. For CRM imports, the password is deleted when the import completes; for calendar sync, it is kept while sync is connected. You can revoke access at any time at appleid.apple.com.

Atlas does not run background or recurring access against a connected account except for calendar sync you have explicitly turned on. Atlas never sells, shares, or uses connected-account data for advertising, and never uses it to train machine-learning models.

Technical information. IP address, browser type, pages requested, and timestamps, kept in server and audit logs for security and troubleshooting.

Cookies. A session cookie to keep you signed in, a CSRF token, an optional “trust this device” cookie for two-factor authentication, and theme or layout preferences. Atlas does not use advertising or cross-site tracking cookies.

How Atlas uses information

• To provide, operate, secure, and support Atlas and the apps you subscribe to.
• To bill your organization and send invoices, receipts, and payment notices.
• To send transactional email (sign-in codes, password resets, invitations, billing notices, terms updates). Marketing email is sent only with consent and always has an unsubscribe link.
• To detect and prevent abuse and to comply with law.

How Atlas protects information

• Data in transit is encrypted with TLS. Passwords are hashed; connected-account tokens and app-specific passwords are encrypted at rest (AES-256-GCM).
• Access inside Atlas is scoped to your organization; each app verifies a signed, short-lived token on every internal request.
• Atlas runs on servers Hyperion Works owns and maintains, colocated at a data center in Tempe, Arizona, USA — there is no third-party hosting provider in this chain. Files in Atlas File Storage are replicated across multiple storage servers and backed up.
• Administrative access is limited to authorized Hyperion Works staff and is logged.

Sharing

We share Atlas information only with:

• Service providers who process it for us under contract: payment processing (Authorize.Net) and email delivery (our own relay at hyperionworks.com).
• Your organization’s administrators, who can see members, usage, and content within your organization.
• Authorities, when required by law or to protect rights and safety.

We do not sell personal information.

Google API Services User Data Policy. Atlas’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Data retention and deletion

• Account and organization data is kept while the account is active.
• Content in an app is kept while the organization subscribes. After an organization unsubscribes from an app, its data in that app is retained for 90 days so the subscription can be restored, then permanently deleted.
• Imported-account tokens are deleted as described above.
• Invoices and payment records are kept for 7 years as required for tax and accounting.
• Logs are kept for 90 days.
• You can delete your organization (and all of its data in every app) from Organization settings, or ask us at the address below. Deletion is permanent after the retention window.

Your choices and rights

• Review and update your profile and organization details in Atlas.
• Disconnect a connected Google, Microsoft, or Apple account at any time from the app’s settings; you can also revoke Atlas at myaccount.google.com/permissions, the Microsoft account privacy dashboard, or appleid.apple.com.
• Export your data: CSV export from Atlas CRM, file download from Atlas File Storage, and calendar export from Atlas Calendar.
• Depending on where you live you may have rights to access, correct, delete, or port your data, or to object to processing. Contact us and we will respond within 30 days.

Children

Atlas is a business tool and is not directed to children under 16. We do not knowingly collect information from them.

Changes

We will post changes here and, for material changes, notify account holders by email or in-app notice before they take effect.

Contact

Hyperion Works, LLC
7650 S. McClintock Dr. #103-388
Tempe, AZ 85284
privacy@hyperionworks.com
support@atlascore.app

How we protect your data.

We implement administrative, technical, and physical safeguards appropriate to the sensitivity of the information we handle. As an IT services company, security is central to our operations. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

How long we keep your data.

We retain client and business records for as long as necessary to fulfill the purposes described in this policy and to comply with applicable legal, tax, and accounting requirements.

Accessing and correcting your information.

You may contact us at any time to:

• Request access to personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information, subject to our legal obligations

Changes to this policy.

We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of our website or services after changes are posted constitutes acceptance of the updated policy.