Privacy Policy

This Privacy Policy describes how Atlas Growth Media (“Atlas,” “we,” “us”) collects, uses, and safeguards information when you use the Atlas client portal (the “Portal”). By creating an account or signing in, you agree to the practices described here.

• Account information — name, company, email address, and password (or, if you sign in with a third-party provider, the identifiers that provider shares with us).
• Portal activity — pages you visit, documents you download, and support requests you submit, used to operate and improve the Portal.
• Ad account credentials you choose to connect — for example, a Meta Ads access token and ad account ID entered on the sign-in page. These are provided voluntarily so we can pull your real campaign metrics into the dashboard; the Portal functions in preview mode without them.
• Billing information — invoice and payment status, handled by our payment processor. Atlas does not store full payment card numbers.

If you connect a Meta Ads (Facebook/Instagram) access token, it is stored in an encrypted, HTTP-only cookie that is never exposed to page scripts and is never sent to any domain other than Atlas’s own servers and Meta’s Graph API. We use it exclusively to request read-only performance metrics (impressions, reach, clicks, spend, conversions) on your behalf so the Campaign Performance and Dashboard pages can display accurate, live numbers instead of sample data.

We do not use your token to modify campaigns, place ad spend, or access data outside the ad account you specify. You can disconnect your ad account at any time from the sign-in page or Settings, which immediately deletes the stored token from our systems.

• Operate, maintain, and personalize your Portal experience.
• Display accurate campaign, lead, invoice, and document data.
• Respond to support requests and send service-related communications.
• Detect, prevent, and address fraud, abuse, or security incidents.
• Comply with legal obligations.

We do not sell your personal information. We share it only with the service providers necessary to run the Portal — for example, our authentication provider, hosting infrastructure, and payment processor — and with advertising platforms (such as Meta) when you explicitly connect an ad account. Each provider is bound by contractual obligations to protect your data.

Account and portal activity data is retained for as long as your account is active. Connected ad account tokens are retained only until you disconnect them or your session expires, whichever comes first. You may request deletion of your account and associated data at any time by contacting us.

• Access, correct, or update your profile from Settings.
• Disconnect any connected ad account at any time.
• Opt out of non-essential email notifications from Settings.
• Request a copy or deletion of your data by contacting support.

We use industry-standard safeguards — including encryption in transit, HTTP-only session cookies, and least-privilege access controls — to protect your information. No method of transmission or storage is 100% secure, but we work to continuously improve these protections.

We may update this Privacy Policy from time to time. Material changes will be communicated through the Portal or by email before they take effect.

Questions about this policy or your data can be sent to weston@atlasgrowth.media.