Privacy Policy

1. Introduction

Elegsys ("we", "us", "our") operates Atlas, an AI-native accounting platform. This Privacy Policy explains how we collect, use, store, and protect your information when you use our Service.

Paddle is our Merchant of Record and independently processes payment data in accordance with their own privacy policy. We encourage you to review Paddle's Privacy Policy for details on payment data handling.

2. Information We Collect

We collect the following categories of information:

• Account information: Name, email address, organization name, and role within your firm.
• Financial data: Transactions, invoices, bank feeds, journal entries, and other accounting records you upload or generate through the Service.
• Usage data: Feature usage, task token consumption, AI agent interactions, and session activity.
• Technical data: IP address, browser type, device information, and operating system.
• Payment data: Collected and processed by Paddle. We do not store your credit card or bank account details.

3. How We Use Your Information

• Providing and operating the Atlas platform
• Processing AI agent tasks including reconciliation, journal entries, and compliance certificates
• Improving service quality, features, and AI accuracy
• Communicating service updates, billing information, and support
• Ensuring security, preventing fraud, and detecting abuse
• Complying with legal obligations

4. Data Isolation and Multi-Tenancy

Atlas uses database-level Row-Level Security (RLS) to ensure complete data isolation between tenants. This means:

• Each organization's data is mathematically isolated at the database layer
• No user or process can access data belonging to another tenant
• Multi-client portals (Firm Engine) maintain separate data boundaries for each client

5. Data Sharing

We may share your information with:

• Paddle: For payment processing, tax collection, and billing as our Merchant of Record.
• Infrastructure providers: Hosting and database services, under data processing agreements.
• Legal obligations: When required by law, court order, or government request.

We do not sell your personal data to third parties.

6. Data Storage and Security

We protect your data through:

• Encryption at rest and in transit (TLS 1.2+)
• Role-based access controls and audit logging
• Regular security assessments
• Database-level Row-Level Security for tenant isolation

7. Your Rights

You have the right to:

• Access your personal data held by us
• Export your accounting data at any time
• Request deletion of your data, subject to legal retention requirements
• Correct inaccurate personal information

Specific rights may vary depending on your jurisdiction. To exercise any of these rights, contact us at info@elegsys.com.

8. Cookies and Tracking

Atlas uses essential cookies for authentication and session management. We do not use third-party advertising or tracking cookies.

9. Third-Party Services

The Service integrates with the following third parties:

• Paddle: Merchant of Record for payment processing and tax compliance.
• AI/ML providers: For powering agent functionality such as auto-categorization and document processing.

Each third-party service operates under its own privacy policy.

10. Data Retention

• Active accounts: Data is retained for as long as your account is active.
• After termination: You have 30 days to export your data. After this period, data is permanently deleted.
• Legal requirements: Certain financial records may be retained as required by applicable law.

11. Children's Privacy

Atlas is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification. The "Effective date" at the top of this page indicates when the policy was last revised.

13. Contact

If you have questions about this Privacy Policy, contact us at info@elegsys.com.

Elegsys, Pakistan