Privacy Policy
Last updated:
1. Who processes the data
Karel Goldenberg Fredes, an individual trading as "Allaynce", tax ID 19.922.308-9, based in Santiago Centro, Santiago, Chile, operates Atlas Guidance and processes the data described in this policy.
For any privacy matter: [email protected].
2. Two distinct roles
Atlas Guidance is a service for companies, and that splits the processing in two.
For account data — who subscribes, who administers, billing — Allaynce decides the purposes and the means.
For the data the customer company enters into the service — its employees, its roles, its documents — the customer company decides, and Allaynce processes it solely on its behalf and on its instructions.
3. What data is processed
Account data: name and email of the people with access, the organization they belong to and their role within it.
Data entered by the customer: company structure, roles, assignments, processes, knowledge articles and any files attached.
Usage data: technical records of access and of significant actions inside the product, which support the audit log.
Payment data: handled by Paddle. Allaynce does not store card numbers.
4. What it is used for
To provide the contracted service and maintain its security and integrity.
To send operational communications related to the account: invitations, alerts and product notifications.
To manage the commercial relationship and collect payment, through Paddle.
Data is not sold to third parties, and data entered by the customer is not used for purposes unrelated to providing the service.
5. Where it is hosted
The database and files are hosted on Supabase, on Amazon Web Services infrastructure in the ca-central-1 region (Canada).
The application and this site are deployed on Vercel, executing in the US East region.
This means data may be processed outside the customer's country. By subscribing to the service, the customer accepts that international transfer.
6. Who it is shared with
Only with the providers needed to operate the service, each with access limited to what its function requires:
Supabase — database and file storage.
Vercel — hosting and application execution.
Upstash — job queue and temporary storage.
Paddle — sale, payment, taxes and refunds.
A transactional email provider (SMTP) for sending invitations and notifications.
Google Analytics, on the public pages of this site only.
7. Analytics on this site
This site uses Google Analytics to measure traffic on its public pages. There is no analytics tag inside the application.
8. How long it is kept
While the organization has an active account, its data is kept in order to provide the service.
After a cancellation, data is kept for 90 days so the account can be recovered or the information exported.
After that period the customer may request deletion by writing to the contact address, and it is carried out. The audit log and payment receipts may be kept for as long as applicable accounting and tax rules require.
9. Individual rights
People whose data is in Atlas Guidance may request access to it, its rectification or its deletion.
Where the data was entered by a customer company, the request must be addressed to that company, which decides on it. Allaynce will assist that company in responding.
For all other cases: [email protected].
10. Security
Access to data is checked on the server before information is returned, and no query can reach the data of an organization other than the requester's.
Significant actions are recorded in an audit log. Connections to the service are encrypted in transit.
Allaynce does not claim to hold third-party security certifications today.
11. Changes to this policy
The version in force is the one published on this page, with its last-updated date. Material changes are communicated before they take effect.