Privacy Policy

What changed on October 28, 2026

• ATOM Fit, optional: if you turn it on, ATOM reads your daily steps, distance, stairs and exercise minutes from Apple Health or Health Connect, and shares them only with the tour mates you choose. Details.

What changed on October 26, 2026

• New section for people in the UK, the EU, the EEA and Switzerland: who is responsible for your data, legal bases, special-category data, where data is stored and the transfer safeguards, and how to complain.
• Deleting your account now erases it within 15 minutes, including every tour you own.
• Passport, date of birth, home address, emergency contact, allergy, medical, dietary and gender details on contact cards are encrypted at rest.
• The full list of outside services, corrected.
• In the UK, the EU, the EEA and Switzerland, the record of which screens you use is off until you say yes. ATOM's fonts and public visit counts no longer involve Google or store anything on your device.
• ATOM's own emails carry an Unsubscribe link.
• Optional two-step sign-in (a code from an authenticator app) for every account.
• When the assistant, or the free ATOM 101 at atominterstate.app/101, cannot answer a touring or how-to question, ATOM now keeps the text of that question, with no name or account attached, so the answer can be added to ATOM 101. Details.
• ATOM 101 may show anonymous totals worked out from tours on ATOM, such as the median per diem. Only the total is kept and shown, never a tour or account, and only when 5 or more accounts are in it. Details.

What changed on October 15, 2026

• ATOM may occasionally ask how likely you are to recommend it, at most once every 90 days. Your answer and the optional comment are kept with your account unless you turned off Share how I use ATOM in Settings, and are used only to improve ATOM. Details.
• ATOM now also counts the real actions taken in each tour (for example "a settlement was saved in the Money section" or "a crew member was invited"), with the tour, the section and the kind of action. Never what was entered. Tied to you only if Share how I use ATOM is on; otherwise the tour still counts, with no name. Details.
• When an account closes, ATOM keeps an anonymous count: the month it signed up, its plan, how it joined, its role and why it closed. No name, email or contact details. Details.

What changed on October 14, 2026

• ATOM now records which screens you use and for how long, the day and hour, and your device type, tied to your account unless you turn it off in Settings. We use it only to improve ATOM and so the ATOM founders can reach out to you directly. It is never sold, never used for ads, and never includes what you type or your tour data. Details.
• Emails the ATOM founders send you may include a small image that tells us whether the email was opened. Details.

What changed on October 13, 2026

• We now say exactly how we count visitors. Inside the app we use Plausible, a privacy-friendly visit counter. On our public pages (homepage, free tools, Mac download) ATOM counts visits itself. Neither uses cookies, collects personal information, or follows you to other websites. Details.

What changed on October 9, 2026

• You can now connect ATOM to an outside AI assistant you choose, like Claude or ChatGPT. It is off unless you connect it. How it works and what is shared.
• If you use Email Scan, the entries ATOM made from your Gmail (for example a receipt or a hotel confirmation saved to your tour) are part of your tour data, so a connected assistant can see them when you ask it a question. Email contents themselves are never sent. Google data details.

What changed on October 6, 2026

We rewrote parts of this policy so it matches exactly what ATOM does. In plain words:

• ATOM uses AI to read the documents you add, not only for the chat assistant. This policy now says so, names who does the reading, and explains your controls.
• The ATOM Intelligence switch in Settings now applies on our servers, not only on your screen. Off means no document of yours is sent to an AI service.
• If a document says it may not be put into AI tools, ATOM stops and asks you before reading it.
• The once-a-day receipt check of your Gmail now only runs if you turn it on.
• We list every outside service that handles your data.
• Deleting your account now also deletes the files you uploaded and any saved document reads.

Who We Are

ATOM Interstate ("ATOM", "we", "us", or "our") is a software application designed for the touring music industry. We provide tools for tour management, accounting, logistics, and operations. Our contact email for anything about your data is atom@atominterstate.app.

This Privacy Policy explains how we collect, use, and protect your personal information when you use ATOM at atominterstate.app.

If You Are in the UK, the EU, the EEA or Switzerland

The UK GDPR and Data Protection Act 2018, the EU GDPR, the Swiss Federal Act on Data Protection, and the UK and EU rules on cookies and electronic marketing (PECR and the ePrivacy rules) apply to your data. This section explains how ATOM meets them. The rest of this policy gives the detail.

Who is responsible for your data

• Your own account (sign-in, settings, community profile, how you use ATOM, emails we send you): ATOM is the controller.
• A tour's data (its schedule, money, crew and contact cards, guest lists, files): the tour's owner (usually the artist's tour manager or management company) decides what goes in and why, and is the controller. ATOM processes that data on the owner's behalf and only to run ATOM for them. If you are on a tour's crew card and want to see, correct or remove it, ask the tour's owner, or write to us and we will pass it on.

Why we are allowed to use your data (legal bases)

• Contract: running your account and the features you use.
• Legitimate interests: keeping ATOM secure (rate limits, sign-in protection, audit logs), fixing bugs, and anonymous page and screen counts. You can object at any time.
• Consent: tying the record of which screens you use to your account (asked once, off until you say yes), and any marketing email. You can withdraw consent at any time in Settings or with the Unsubscribe link, without affecting anything before.
• Legal obligation: records we must keep by law, such as payment records.

Health, dietary, religious and union details

A tour may record allergies, medical notes, meal needs (which can reveal religion) or union membership for its crew so it can feed, insure, pay and look after them. These are special categories of data. The tour's owner decides whether to record them and needs a lawful reason, usually the person's explicit consent or employment law. ATOM keeps passport, date of birth, home address, emergency contacts, allergies, medical, dietary and gender details encrypted at rest (AES-256), shows them only to the people the tour allows, and never uses them for anything else.

ATOM Fit activity (steps, distance, stairs, exercise minutes) can count as health data. ATOM collects it only after you tick the consent box and turn ATOM Fit on (your explicit consent), and you can withdraw it any time by turning ATOM Fit off, which deletes it. See ATOM Fit.

Where your data is stored, and transfers

ATOM's database and files are hosted by Supabase in the United States (Virginia; the Manager product in Oregon), and the app by Netlify, also in the US. Some of the providers listed under Third-Party Processors are in the US too. When your data leaves the UK, EU, EEA or Switzerland, we rely on the European Commission's Standard Contractual Clauses with the UK International Data Transfer Addendum (and their Swiss equivalent), included in each provider's data processing terms, or on the EU-US Data Privacy Framework and its UK and Swiss extensions where the provider is certified. Ask us for a copy of the relevant terms.

Analytics and storage on your device

ATOM sets no advertising or tracking cookies. In the UK, EU, EEA and Switzerland, the record of which screens you use stays off until you say yes. Plausible page counts store nothing on your device and hold no personal data. ATOM's public pages count visits without storing anything on your device. See Cookies and Local Storage.

Complaints

You can complain to the UK Information Commissioner's Office (ico.org.uk), to the data protection authority where you live or work in the EU or EEA, or to the Swiss Federal Data Protection and Information Commissioner. We would like the chance to sort it out first: write to atom@atominterstate.app.

Data We Collect

We collect only what is necessary to operate the service:

• Account information: email address, name, and a hashed password (we never store your password in plain text)
• Tour and financial data: show details, guarantees, expenses, settlements, crew information, and other data you enter into ATOM
• Sensitive financial fields (encrypted): wire transfer info, EIN, and uploaded W-9 PDFs are encrypted on your device with AES-256-GCM before they are saved. Our servers store only ciphertext — even our database administrators cannot read these fields. If you choose Read this for me on a W-9 or bank letter, that one file is sent once to our AI provider (see Reading your documents with AI) to pull out the fields; it is not saved by that step, and the fields you keep are encrypted as above.
• Device and session data: a device token used to maintain your session across logins
• IP addresses: logged temporarily for rate-limiting and security purposes (e.g. detecting brute-force login attempts)
• License keys: used to authenticate your account and validate your subscription
• Which screens you use: ATOM records which screens you open (the kind of screen, like Day Sheets or Settlements, and which tab of it, never which day, show or person), which of its main buttons you tap (the button, like Directions or Share, never what is on it), the kind of file you make or print from a screen (a PDF, a spreadsheet, a picture, a print; never the file's name or what is in it), how long you actively use each one, the day of the week and hour in your own time zone, and your device type (phone, tablet or computer; web, iPhone app or Mac app). This is tied to your account unless you turn it off in Settings (in the UK, the EU, the EEA and Switzerland, only once you say yes) → Share how I use ATOM to help improve it. With it off, screens are still counted but without your name, and what was already recorded under your name is erased. If your browser sends Do Not Track or Global Privacy Control, ATOM counts without your name on that browser. We never record what you type, your tour data, your IP address or your browser details here. Only the ATOM founders see it. We use it only to improve ATOM and to reach out to you directly. It is never sold and never used for ads. ATOM also counts the real actions taken in each tour (a save, a send, an invite: the tour, the section such as Money or Advance, and the kind of action, never the content), so the founders can see which parts of ATOM tours actually run on. With sharing off, those counts keep the tour but not your name.
• How likely you are to recommend ATOM: now and then (at most once every 90 days) ATOM may ask how likely you are to recommend it, on a scale of 0 to 10, with an optional comment. You can skip it with Not now. Your answer and comment are kept with your account, along with your plan, your role and your device type at that moment, unless you turned off Share how I use ATOM to help improve it in Settings, in which case they are kept without your name. Only the ATOM founders see them, and we use them only to improve ATOM. They are erased when you delete your account. Never sold, never used for ads.
• Product usage events: we record which features you use within ATOM (e.g. which tabs you open, which import flows you run, when you send messages to the AI assistant). This data is tied to your account under the same rules, used solely to improve the product, never sold, never shared for anyone else's use (our hosting providers only store it for us) and never used for advertising. You can request deletion at any time.
• Gmail OAuth tokens (if you connect Gmail): stored encrypted at rest with AES-256-GCM. Read-only scope — we cannot send, delete, or modify any email. Email content is read when you run a scan and is not kept, with one exception you control: if you turn on the overnight receipt check, a short copy of each email that looks like a receipt is kept until you review or dismiss it (see Google API Services User Data).

Email opens. Emails the ATOM founders send you may include a small image that tells us whether the email was opened. We use it only to know whether a message reached you. It is never sold and never used for ads.

We do not collect payment card data directly. We do not use advertising trackers or cookies that follow you around the web. We do not sell your data to any third party.

How we count visitors. Inside the app we use Plausible Analytics, a privacy-friendly service, to count page visits. Plausible sets no cookies, does not collect personal information, and does not follow you across other websites. On our public pages (the homepage, the free tools, the Mac download page) ATOM counts visits on its own servers: only the page and what was done there (opened, used, printed). No cookies, no IP address, no account, and never anything you type into a tool. Neither count is used for advertising or sold.

How We Use Your Data

• To provide and operate the ATOM service
• To authenticate your account and maintain your session
• To sync your data across devices via cloud storage
• To send transactional emails (e.g. invite links, password reset codes)
• To power the ATOM AI chat assistant with your tour context (see AI section below)
• To read documents you give ATOM (contracts, deal memos, settlements, receipts, riders, tech packs, passports, W-9s, travel confirmations) and fill in the details for you, so you do not have to type them (see Reading your documents with AI)
• To understand which features are valuable so we can improve the product (first-party usage analytics — never sold or shared for anyone else's use)
• So the ATOM founders can reach out to you directly, for example to ask how a screen you use a lot is working for you. You can turn off the link between your account and the screens you use in Settings at any time.
• To ask, at most once every 90 days, how likely you are to recommend ATOM, and use the answers only to improve it (see How likely you are to recommend ATOM)
• To know how many people visit our public pages (the homepage, the free tools, the Mac download page). We count visits anonymously on our own servers: the page and what was done there (opened, used, printed). No cookies, no IP address, no account, and never anything you type into a tool.
• To protect the service against abuse and unauthorized access

AI Chat Assistant

ATOM includes an AI chat assistant powered by Anthropic's Claude API. When you use this feature, a snapshot of your current tour data (shows, expenses, crew) is sent to Anthropic's API to generate a response. This data is used solely to answer your question and is not used to train Anthropic's models under our API agreement.

Do not share sensitive personal data (e.g. social security numbers, banking credentials) in the chat interface.

We do not keep your chat

We do not store the messages you type into the assistant, with one exception: a question it could not answer (next section). Our AI usage records hold token counts and cost only, so that we can monitor spend. They never contain the content of your messages. Your conversation history is kept in your own browser's local storage on your device, not on our servers.

Questions ATOM could not answer

When the assistant, or the free ATOM 101 tutor at atominterstate.app/101, cannot answer a touring or how-to question, ATOM keeps the text of that one question so the missing answer can be written into ATOM 101.

• Before it is kept, ATOM removes email addresses, phone numbers, web links, money amounts and long numbers from it.
• It is stored with no name, email, licence key, account, workspace or tour, and none of your tour data. The same question asked again is grouped by its wording, never by who asked.
• A member of the ATOM team reads it, and Anthropic's Claude API may read it to draft the answer for the team to check. It is not used to train Anthropic's models.
• Because it is not linked to you, we cannot find it as yours or withdraw it later. Please do not put anyone's name or private details in a question.

Sending a question so ATOM can learn (optional, per question)

When the assistant cannot answer a question about how ATOM works, it may offer to send that one question to the ATOM team so we can write the missing answer into the product. This is entirely optional and is asked separately every single time. Nothing is sent or stored unless you choose to send it.

If you choose to send it:

• You see the question in an editable box first and can change or delete any part of it. Only the final text in that box is sent. We never receive the original wording.
• We store the question text, and your role and account type (for example "crew" or "tour manager") so the answer can be written for the right kind of user.
• We do not store your name, email, licence key, account, workspace, tour, or any of your tour data alongside it. Submissions are not linked to you or to your account.
• A member of the ATOM team reads the question in order to write the answer.
• Repeated submissions of the same question are grouped by the wording of the question itself, never by who sent them.

Because a submission is not linked to your account, we have no way to identify it as yours, which also means it cannot be withdrawn after sending. If you choose "No thanks", nothing more is sent. (A question the assistant could not answer may already be kept without your name, as described above.)

Please do not include personal details, financial figures, or anyone's name when sending a question. The editable box is there so you can remove them first.

Totals across ATOM tours (ATOM 101)

ATOM 101 may show anonymous totals worked out from the tours on ATOM, for example the median per diem paid per day, the median venue cut on merch, or the usual overage split on guarantee versus percentage deals.

• A computer job works them out. Only the result is kept and shown: the median, a middle range once 10 or more accounts are in it, and how many accounts it came from.
• A total is shown only when 5 or more separate accounts contribute, and each account counts once, so no single tour can be picked out.
• No tour, artist, venue, date, account or single tour's number is ever stored with the total or shown. ATOM staff do not see any tour's money to make them.
• Test and demo tours are left out. If you turn off Share how I use ATOM in Settings, your tours are left out too.

ATOM Fit (Apple Health and Health Connect)

ATOM Fit is optional and off until you turn it on.

• What it reads: only your daily step count, walking and running distance, flights of stairs climbed and exercise minutes, from Apple Health (HealthKit) on iPhone or Health Connect on Android, after you give permission on your phone. It never reads heart rate, sleep, weight, workouts, medical records or any other health data, and it never writes anything to Apple Health or Health Connect.
• What it keeps: one line per day with those four numbers, plus the tour city you were in that day (taken from your tour dates) so ATOM can compare your walk to a local landmark. Nothing else.
• Who sees it: only you, unless you choose to share with a whole tour or with tour mates you pick. Those people see your totals (steps, distance, stairs, exercise minutes) on a leaderboard, never your city, and only while you are both on that tour. Your tour manager, the tour owner and admins cannot see it unless you shared with them. ATOM staff do not look at it.
• What it is never used for: advertising, marketing, data mining, or anything other than showing you and the people you chose your activity. It is never sold or shared with anyone else, and never stored in iCloud.
• Deleting it: Turn off ATOM Fit and delete my activity deletes every day ATOM Fit saved, right away. Deleting your account deletes it too, and Download My Data includes it. Apple Health and Health Connect keep their own copy, which ATOM does not touch.

Reading Your Documents with AI

Much of ATOM's value is that you can drop in a contract, settlement, receipt or rider and ATOM fills in the dates, money and contacts for you. To do that, ATOM sends the document to an AI service that reads it and hands the details back. Here is exactly how that works.

When it happens

• Only when you add a document (drop a file, take a photo, paste text, or choose an import), or tap a Scan button.
• The one thing that runs on a schedule is the overnight receipt check of your Gmail, and only if you turn it on. Even then, nothing is read by AI until you tap Review.

Who reads it

• Anthropic (Claude), through its business API. This reads documents, photos and email text and returns the details.
• Google Cloud Vision, only for scanned pages that have no readable text, to turn the page image into text first.

Neither service may use your documents to train its AI models under the business terms we use. Under Anthropic's published policy, what we send through its API is deleted within 30 days, and kept longer only if it is flagged for a violation of Anthropic's usage policy. We do not use your documents to train any AI either.

What is sent

The document or the part of it needed to find the details: its text, or an image of its pages if it is a photo or scan. For email scans, the email text and its attachments that look relevant. Where it helps match things up, a few details from your tour go with it (for example the show date and venue). Your other account data is not sent.

What is kept

The details you keep (a show, an expense, a contact) are saved in your account like anything you type. If you uploaded the file itself, it is kept in private storage so you can open it later. Results of longer document reads are saved to your account so the app can pick them up when they finish. All of it is removed when you delete your account.

Your controls

• Turn it off. Settings → ATOM Intelligence. With it off (or with Smart Capture off), no document of yours is sent to an AI service; our servers check this before every read. You can still type everything in by hand.
• Documents that forbid AI. Before reading a document's text, ATOM checks it for wording that bans putting it into AI tools or machine learning (for example "shall not be uploaded to any artificial intelligence tool"). If it finds that, it stops, shows you the sentence, and only continues if you confirm you are allowed to. This check runs on our own servers and sends nothing anywhere. It cannot check photos or scans before they are read, and it does not flag ordinary "confidential" wording, which nearly every tour contract has.
• Always check the result. AI can misread. Check what it fills in, especially dates and money.

Documents that belong partly to someone else

Contracts, offers and settlements often include another party's information (an agency, a promoter, a venue), and many say their terms are confidential. ATOM handles them only on your behalf, the same way your email or cloud storage does: to show them back to you and the people you choose to share your tour with. We never share them with anyone else, never use them for advertising, and never use them to train AI. You are responsible for being allowed to upload what you upload; if a contract forbids it, do not upload it, or enter the details by hand.

Connecting ATOM to Your Own AI Assistant (Claude, ChatGPT)

You can connect ATOM to an AI assistant you already use, such as Claude (by Anthropic) or ChatGPT (by OpenAI), and ask it about your tour. This is your choice. Nothing is connected unless you set it up yourself and tap Allow on ATOM's approval screen.

What the assistant can see

It signs in as you, with your own ATOM login, and sees exactly what the YO ATOM assistant sees for you: your tours, shows and day sheets, the contacts your role can see, and money only if your role can see money. ATOM applies the same permission checks it applies everywhere else, on our servers, before anything is sent. Crew never see money. It can suggest a change to a day (a note, schedule rows, a hotel), but it shows you exactly what will change and nothing is saved until you say yes, and only if your role can edit that day in ATOM. It cannot change money. Each change it saves is noted in your tour's activity log.

Where your questions go

When you ask the assistant something, your question and the part of your ATOM data needed to answer it are sent to that assistant's company (for example Anthropic or OpenAI). That company handles them under its own terms and privacy settings, which you agreed to when you signed up with them, including whether your chats are kept or used to improve their models. Those companies act for you here, not for ATOM, so they are not listed in our processors below. ATOM sends data only when you ask, and only what your role can see.

If you use Email Scan, the entries ATOM created from your Gmail (such as an expense from a receipt, or a hotel or flight from a confirmation) are part of your tour data, and the assistant can see them like any other entry. The emails themselves are never sent to a connected assistant. ATOM does not keep them (see Google API Services User Data).

What ATOM keeps

We keep a record that an assistant is connected (its name, when it connected and when it was last used) so you can see and remove it, and a note in your tour's activity log when one is connected or disconnected. We store sign-in tokens only in scrambled (hashed) form. We do not keep the questions you ask through the assistant.

Your controls

• Disconnect one. Settings → Connected assistants → Disconnect. It is cut off on its very next request.
• Turn them all off. Settings → ATOM Intelligence off. ATOM stops sharing with every connected assistant at once.
• Sign out everywhere also disconnects every assistant.

Google API Services User Data

If you choose to connect your Gmail account to ATOM (Money → Settings → ATOM Automation, or the email scan buttons in Tour Book, Travel, Advance and Merch), the following terms apply specifically to your Google data. ATOM's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

What we request and why

We request a single Google API scope:

• https://www.googleapis.com/auth/gmail.readonly — read-only access to your Gmail messages and attachments

We use this scope only to find touring paperwork in your inbox that ATOM can turn into entries for you: receipts, hotel folios, airline and travel confirmations, settlement statements, credit card statements, show advance emails, merch reports and tech packs. This saves you typing each one by hand. We never use Gmail data for any other purpose.

What we do with your Gmail data

• Scans run when you start them. A scan happens when you tap a Scan button. The only exception is the overnight receipt check, which is off unless you turn it on (Money → Settings → ATOM Automation → "Check my email overnight for receipts"). When it is on, once a day ATOM searches for new receipts and keeps a short copy (up to 6,000 characters) of each matching email so you can review them in the morning. Nothing is read by AI until you tap Review. Turning it off stops it.
• Search is targeted. ATOM searches for messages from travel and touring vendors, card issuers and the people you advance shows with, and for receipt-type attachments, within the date range of the scan. It does not read your inbox at large, and personal correspondence is not what it looks for.
• Read, then let go. When a matching message is found, its text (and relevant attachments) is sent to our AI reader to pull out the details. For a scan you start, the email itself is not kept on our servers. The only copies we keep are the short overnight copies described above, until you review or dismiss them.
• Store only the structured result. What we keep is the parsed expense row: vendor name, date, amount, currency, category, and a reference back to the source message ID so you can re-fetch the original from Gmail if needed.
• No transfer to other apps, except where you choose it. Gmail data we read is not shared with, sold to, or transferred to any third party, with two exceptions: as required to provide the Email Scan feature itself (the AI parser, see below), and, only if you connect your own AI assistant, the entries ATOM created from your Gmail when you ask that assistant about your tour (see Connecting ATOM to Your Own AI Assistant). Email contents are never sent to a connected assistant.
• No advertising. Gmail data is never used for advertising, marketing, or to build any kind of user profile.
• No human review except for support. No employee reads your Gmail messages. The only exception is if you explicitly grant us permission as part of a support investigation, or if we are required to do so by law.
• No machine-learning training. Gmail content is not used to train, improve, or develop any AI or machine learning model.

How your Google data is stored

• OAuth tokens. The access and refresh tokens Google issues to ATOM are encrypted with AES-256-GCM at rest in our database, using a key held only in our serverless function environment. The tokens themselves never appear in plaintext outside the running function process.
• Email content. Not stored for scans you start. Overnight receipt check (only if you turn it on): a short copy of each matching email until you review or dismiss it, and deleted with your account.
• Parsed results. Stored as expense rows in your account, just like any expense you would enter manually.

How to revoke access

You can disconnect ATOM from your Gmail account at any time:

• From inside ATOM: Money → Settings → ATOM Automation → Disconnect. This deletes our stored OAuth tokens immediately.
• From your Google Account: visit myaccount.google.com/permissions, find ATOM Interstate, and click Remove access. Google will invalidate the tokens on their side and ATOM will be unable to make further API calls on your behalf.

Revoking access does not delete the parsed expense rows that were already imported — those are your data and remain in your ATOM account. To delete those as well, edit them individually or delete your ATOM account using the controls in Settings → Privacy & Your Data.

Data sub-processors for Gmail data

When a scan reads a message, its text and attachments go to Anthropic (Claude) to pull out the details, and scanned attachments with no readable text may go to Google Cloud Vision to be turned into text first. Neither may use your Gmail data to train its models. Under Anthropic's published policy, API inputs are deleted within 30 days unless flagged for a usage-policy violation. No other third party receives Gmail content.

Third-Party Processors

We use the following outside services to operate ATOM. Each receives only what it needs to do its job, only processes it on our behalf, and is not allowed to sell it or use it for advertising. The services marked "only if" receive nothing unless you use that feature.

• Supabase (supabase.com) — cloud database and file storage. United States (Virginia; ATOM Manager in Oregon).
• Netlify (netlify.com) — hosting and serverless functions. US-based.
• Resend (resend.com) — email delivery: invites, sign-in codes, receipts you ask for, and occasional notes from the ATOM founders (each with an Unsubscribe link). United States.
• Postmark (postmarkapp.com) — receives emails you forward to ATOM (flight confirmations, guest-list replies) so ATOM can read them. United States.
• Anthropic (anthropic.com) — AI provider (Claude). Reads the documents, photos and email text you choose to have read, and powers the YO ATOM assistant. Business API: no training on your data.
• Google Cloud (cloud.google.com) — Cloud Vision, to turn scanned pages into text; Google Maps and Places, to look up addresses, venues and travel times (the place you look up is sent; when a map shows in your browser, Google also sees your device's internet address).
• Google and Apple — only if you choose to sign in with them or connect Gmail.
• Plaid (plaid.com) — only if you connect a bank account in Money, to read its transactions.
• ElevenLabs (elevenlabs.io) — only if you talk to YO ATOM by voice, to turn your speech into text and the answer into speech.
• FlightAware (flightaware.com) — flight numbers and dates, to show live flight status.
• Open-Meteo (open-meteo.com) — city or place names, for weather.
• Instacart (instacart.com) — only if you send a shopping list to Instacart.
• Telegram (telegram.org) — ATOM's own staff alerts (a new signup's source, outage and spend alerts), with no names or full email addresses; and, only if you connect ATOM to Telegram, the messages you choose.
• Apple (Push Notification service) — notification text and a device push token, to deliver ATOM notifications to the iPhone and Mac apps.
• Capgo (capgo.app) — delivers app updates to the iPhone app; receives the app version and a device id, no account data.
• CARTO and OpenStreetMap — map tiles; your browser fetches them, so they see its internet address.
• Dropbox, QuickBooks (Intuit) — only if you connect them, for the files or accounting data you choose.
• Spotify, Apple Music, Vimeo — only if you play music or video in ATOM; their players load from their own servers.
• Travel suppliers (such as Duffel, Amadeus, Hotelbeds, Expedia, Blacklane, Travelport) — only when a booking is made through ATOM Travel, the traveller's name, date of birth and travel details needed for that booking.
• Agency systems (for example WME) — only if a tour connects one, to bring in that tour's bookings.

If you connect ATOM to your own AI assistant (Claude, ChatGPT or another), that assistant's company is chosen by you and acts for you, not for us. See Connecting ATOM to Your Own AI Assistant.

Data Retention

Your data is retained for as long as your account is active. When you delete your account it is erased within 15 minutes, and our backups roll off within 30 days. IP-based rate-limit counters expire within a day and are never kept longer than 90 days.

Results of longer document reads, saved so the app can collect them, are kept with your account and deleted with it. Overnight email copies are kept until you review or dismiss them. AI providers keep what we send them only as described in Reading your documents with AI.

Deleting Your Account & Your Data

You can delete your account at any time: your picture (top right) → Account → Danger zone, or → Security & Legal → Delete My Account. You confirm with a code sent to your email. When you do, you are signed out everywhere at once, and within 15 minutes:

• Your login credentials and license key are removed
• Every tour you own is erased, for everyone on it: schedule, contacts and personnel cards, money records, files and the rest
• Your community profile and friends list are deleted; your messages in direct messages are blanked (the other person's side stays)
• A tour someone else owns keeps its own card about you (its owner is responsible for it); you are taken off its rosters
• Records of access you approved (for example letting ATOM support view your account) are closed and kept as proof of what you agreed to
• The record of which screens you used is erased, and so are your answers to the "how likely are you to recommend ATOM" question
• ATOM keeps an anonymous count that an account closed: the month it signed up, its plan, how it joined, its role and whether it was closed by you or by ATOM. No name, email, license key or contact details, so it cannot be traced back to you. We use it only to understand why people leave.
• Sync and backup snapshots are purged within 30 days
• IP logs used for rate-limiting are retained for up to 90 days for security purposes
• The audit entry for the deletion holds no name or email, only a one-way code

Your Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR) and applicable local law:

• Right of access: request a copy of the personal data we hold about you
• Right to rectification: request correction of inaccurate data
• Right to erasure: request deletion of your data ("right to be forgotten")
• Right to restriction: request that we limit how we process your data
• Right to data portability: request your data in a machine-readable format
• Right to object: object to processing based on legitimate interests
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at atom@atominterstate.app. We will respond within 30 days.

You also have the right to lodge a complaint with your local data protection authority (e.g. the ICO in the UK, or your national DPA in the EU).

You can download a copy of your data yourself: your picture → Security & Legal → Download My Data. The legal bases we rely on are listed in If You Are in the UK, the EU, the EEA or Switzerland.

Cookies and Local Storage

ATOM uses browser storage on your device (not advertising cookies) for things the app needs: your sign-in, your settings and a copy of your tour so ATOM works offline. No advertising or third-party tracking cookies are set. ATOM's own record of which screens you use is tied to your account only with your yes in the UK, the EU, the EEA and Switzerland (elsewhere it is on by default and can be turned off in Settings). Plausible page counts store nothing on your device. See our Cookie Policy for full details.

Security

All data is transmitted over HTTPS (SSL/TLS), provisioned automatically by Netlify via Let's Encrypt. Passwords are hashed using PBKDF2 (600,000 rounds) before storage and are never transmitted or stored in plain text. Access to your data requires a valid session token.

• Session tokens are stored only as one-way fingerprints, so a copy of our database cannot be used to sign in.
• Banking details, and the passport, date of birth, home address, emergency contact, allergy, medical, dietary and gender details on contact cards, are encrypted at rest with AES-256-GCM using a key held separately from the database.
• Optional two-step sign-in with an authenticator app, for every account; required for ATOM staff.
• The database refuses all public access; only ATOM's own server functions can reach it. Uploaded files are private and opened only through signed, time-limited links.
• Sign-in attempts are rate-limited, and personal details are kept out of our server logs.

Staff Access to Your Data

In the ordinary course of business, ATOM personnel do not access the contents of your tour data. Your settlements, deals, expenses, crew information, and uploaded files are not read by our team as part of our daily operations.

There are three narrow exceptions where a staff member may view your data:

• Automated processing. Our servers perform syncing, encrypted backups, and security monitoring. These are automated systems — no human reads your data as part of them.
• Support access with your consent. Authorized ATOM personnel can request view-only access to your account by sending you a request through the app. You see it as a banner at the top of the screen with the name of the requester, the reason, and the duration they're asking for. You approve or decline. If you approve, access is time-bounded, you can revoke it at any time, every view is audit-logged, and we send you a summary of what was accessed when the grant ends. See "Support Access Process" below for details.
• Legal compulsion. Where required by a subpoena, court order, or lawful government request, we may be compelled to disclose data. Where we are permitted to do so, we will notify you.

Confidentiality Commitment

When an ATOM staff member does access your account under any of the circumstances above, we are bound to the following:

We will not:

• Share your specific tour data — financials, deal terms, settlement figures, artist fees, commissions, crew information — with any third party for marketing, sales, or commercial purposes
• Retain copies of your data outside the audit log
• Use your specific data to train any AI or machine-learning model
• Access your account without one of the three reasons listed above

We may:

• Use what we learn while debugging a specific issue you reported to resolve that issue
• Incorporate generalized, non-identifying insights into product improvements

We must:

• Disclose where legally compelled
• Act where necessary to protect the safety of users or the integrity of the service (for example, if we detect abuse)

All staff access is logged with the administrator's identity, the target account, the grant ID (where applicable), a timestamp, and the section(s) viewed. These audit logs are retained for the life of the service. You can view your own audit log at any time inside the app.

Internal misuse of staff access is a termination offense under our employment policies.

Support Access Process

When we need to look at your account to help you — whether you've reported a bug, we're observing how beta users interact with a new feature, or we're otherwise working on your behalf — we use a consent flow with the following guarantees:

• You are asked first. A request appears as a banner at the top of your screen. It shows the name of the requester, the reason they're asking, the requested duration, and two buttons: Approve and Decline.
• You can decline. If you do, no access is granted.
• Approval is time-limited. Grants have a maximum duration — up to 4 hours for a Support Debugging grant, up to 30 days for an optional Beta Observation grant — and expire automatically.
• You can revoke at any time. While a grant is active, a passive banner on your screen shows the time remaining and an "End access" button. Clicking it ends the session immediately.
• Every view is logged. Each read of your data is stamped with the grant ID. You can see every session and every view in your own audit log inside Settings → Security & Legal.
• You get a summary. When the grant ends, we email you a summary of what was viewed, aggregated by section (for example, "Settlements: 12 views, Day Sheets: 4 views").
• Access is limited to authorized personnel. Requests can only be initiated by ATOM staff who have been granted this specific capability internally. Not all ATOM employees have this access.
• Nothing is written. Support access is strictly view-only. Staff cannot modify, delete, or add data to your account through this flow, even during an active grant.

Children's Privacy

ATOM is not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16.

Changes to This Policy

We may update this policy as the product evolves. When we do, we'll update the effective date at the top. For significant changes, we'll notify active users by email.

Contact

Questions about this policy or your data? Email us at atom@atominterstate.app.