Atlas — Privacy Policy

Last updated: 14 September 2026. Atlas is a desktop AI assistant for Mac and Windows, published by Axxell. Contact: gattialex00@gmail.com.

What Google user data Atlas accesses

When you connect your Google account, Atlas requests the scope https://www.googleapis.com/auth/gmail.modify. Through it, Atlas accesses the following Gmail data of your account: the content and headers of your email messages (sender, recipients, subject, date, body and attachment names), message labels and read/unread state, and the ability to create and send messages. Atlas only reads the recent messages you ask it to see; it does not scan or index your whole mailbox.

How Atlas uses this data

Atlas uses your Gmail data only to carry out the actions you explicitly request, by voice or text, inside the app: (1) list and search your recent emails; (2) open a message and mark it as read; (3) reply to a message; (4) compose and send a new email; (5) move a message to trash. Atlas performs no other processing. The data is used solely to provide these features to you and is never used for advertising, never sold or shared with third parties, and never used to develop, improve or train AI/ML models.

Storage, sharing and retention

To provide the features above, your Google OAuth refresh token is stored encrypted (AES-256-GCM) on our server, associated with your Atlas license; access tokens are short-lived and kept only in memory. Email content is fetched on demand to answer your request and is not permanently stored on our servers. We do not sell or share your Google user data. Human access to your data does not occur, except as necessary to perform the operation you requested, for security purposes, or to comply with applicable law.

Data protection & security

We protect your Google user data, including sensitive Gmail content, with the following measures:

• Encryption in transit: all data exchanged between the Atlas app, our server and Google is transmitted over encrypted connections (HTTPS/TLS).
• Encryption at rest: your Google OAuth refresh token is stored encrypted with AES-256-GCM; the encryption key is held separately from the data. Short-lived access tokens are kept only in server memory and are never written to disk.
• No persistent storage of email content: the content of your emails is fetched on demand only to fulfill your request and is not saved on our servers.
• Access control: stored tokens are isolated per user (bound to your Atlas license) and are used only to serve your own requests; there is no human access to your data except as strictly necessary to perform an operation you requested, for security, or to comply with law.
• Retention & deletion: your token is retained only while your account is connected and is permanently deleted when you disconnect (from Atlas or from your Google account permissions).
• Minimization: Atlas requests only the single scope needed for its email features and reads only the recent messages you ask to see.

Limited Use disclosure

Atlas's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Revocation and deletion

You can disconnect your Google account at any time from Atlas settings, which deletes the stored token from our server. You can also revoke Atlas's access from myaccount.google.com/permissions.

Informativa (IT): Atlas accede ai messaggi Gmail del tuo account (contenuto, intestazioni, etichette, stato letto/non letto e invio) tramite lo scope gmail.modify, solo per eseguire le azioni che richiedi nell'app: elencare/cercare, aprire e segnare come letto, rispondere, inviare, cestinare. I dati non sono venduti, condivisi, usati per pubblicità né per addestrare modelli. Il token è conservato cifrato sul server; puoi scollegarti in ogni momento (il token viene eliminato). Uso conforme alla Google API Services User Data Policy, requisiti Limited Use inclusi.