Privacy Policy

Account information.Creating an account requires only an email address and a password. We don’t ask for your name, phone number, or physical address to sign up. Your password is handled by Amazon Cognito, our authentication provider — we never see or store it ourselves.

What you tell us to generate a plan. Atlas Concierge is a concierge platform: the whole point is that you describe what you need, in your own words, and our AI agents research and recommend real options. Depending on which of our journeys you use (events, fashion, shopping, travel, packing, local businesses, real estate, relocation, or hosting an event), that can include your destination or location, dates, budget, party size, style preferences, and free-text descriptions of what you’re planning. Some journeys ask for more specific detail where it genuinely improves the recommendation — for example, dietary restrictions or accessibility needs for an event, or the ages of children you’re packing or shopping for. You choose how much to share; most fields are optional.

Optional profile preferences.The “My Profile” page lets you save styling and travel preferences (age range, gender, budget range, preferred styles, dietary restrictions, accessibility needs, favorite destinations) so you don’t have to re-enter them. Today, this information is stored only in your own browser (localStorage) — it is not sent to or stored on our servers. If that changes in a future version, we’ll update this policy before it does.

Saved plans.If you’re signed in, plans you generate are saved to your account, including the details you submitted to create them and the recommendations we returned. Plans are also kept in your browser’s local storage so you can see recent activity even when signed out.

Payment information.If you subscribe, checkout and billing management happen entirely on Stripe’s own hosted pages. We never see or store your card number, expiration date, or billing address — Stripe handles that directly. We store only your Stripe customer/subscription IDs and your subscription status (active, canceled, etc.) so we know what plan you’re on.

Usage and analytics data.We record page views and clicks on links that lead away from atlasconcierge.app (for example, to a store or booking partner), tied either to your account or to an anonymous identifier stored in a cookie if you’re not signed in. We use this to understand which parts of the app are actually useful and whether our store/partner links are getting used — not to build an advertising profile of you.

• To generate the recommendations, research, and plans you ask for.
• To create and maintain your account, and to save your plans if you’re signed in.
• To process payments and manage subscriptions through Stripe.
• To enforce free-tier usage limits and prevent abuse.
• To understand usage patterns and improve the app.
• To communicate with you about your account, such as verification and password-reset emails.
• To comply with legal obligations and enforce our terms.

We do not sell your personal information, and we do not use what you tell our AI agents to build advertising profiles or target ads at you.

Atlas Concierge is built on real, live third-party services rather than invented data — that’s a deliberate design choice so we never make up a flight, a listing, or a store recommendation. That means the details you provide are shared with the specific services needed to research your request:

• Anthropic (Claude AI) processes the full text of what you tell us — your event/trip description, location, dates, budget, and similar details — to generate recommendations. This is the core of how every journey works.
• Duffel (flight search), for origin/ destination airports, dates, and passenger count.
• Viator and GetYourGuide, for destination and activity searches.
• Google Places/Geocoding, to resolve a location you type into real nearby businesses and venues.
• RentCast, for real estate search criteria (location, price range, bedrooms/bathrooms, etc.).
• Unsplash, for style-reference imagery based on outfit keywords.
• CJ Affiliate, Rakuten Advertising, Impact.com, and FlexOffers, our affiliate networks — when you click through to a retailer or partner we’ve linked, these networks track that click so we can earn a commission at no extra cost to you. Impact.com’s tag also runs on every page for attribution purposes.
• Travelpayouts, a travel-affiliate attribution script that runs on every page.
• Stripe, for payment processing and subscription billing.
• Amazon Web Services, our hosting provider — for authentication (Cognito), database storage (Aurora), application hosting, and transactional email (SES). AWS is a data processor for essentially everything we store.
• Public data sources with no personal information sent to them, such as the FBI Crime Data API, U.S. Census/BEA, and the Urban Institute Education Data Portal (used only with a city, state, or ZIP-level query, never anything tied to you personally).

We do not sell your information to data brokers or advertisers. We only share what a given service genuinely needs to do its job.

We use a small number of cookies:

• A session cookie that keeps you signed in, set by our authentication system.
• An anonymous identifier cookie (no personal information in it) used to apply free-tier usage limits and attribute analytics when you’re not signed in.
• Third-party cookies from our affiliate-attribution scripts (Impact.com, Travelpayouts, GetYourGuide) and from affiliate networks when you click through to a partner site. We don’t control what these third parties collect once you’re on their scripts or sites — their own privacy policies govern that.

We don’t currently show a cookie-consent banner. If you’re in a jurisdiction that requires one (for example, the EU/UK), please be aware of the above before continuing to use the site, and contact us with any concerns.

We keep your account and plan data for as long as your account is active, so you can come back and see your past plans. If you ask us to delete your account, we permanently delete your account record along with your saved preferences, plans, and subscription record. Anonymized usage records (page views, link clicks) may persist after deletion but are disconnected from your identity at that point.

To request deletion, email us at the address below. We don’t yet have a self-service “delete my account” button in the app — we process these requests manually, and we aim to complete them promptly.

Atlas Concierge is not directed to, and is not intended for use by, children under 13, and we do not knowingly collect account information directly from a child under 13.

Some journeys let an adult account holder enter information about a child as part of planning for that child — for example, a child’s age when packing for a family trip, choosing outfits, or planning an event. That information is provided by the adult using the account, about a family member, in service of a specific request — it is not information we collect from a child directly, and we don’t use it for any purpose beyond generating the requested recommendation.

We use industry-standard safeguards: encrypted connections (HTTPS) everywhere, passwords handled entirely by Amazon Cognito (we never see them), and secrets/API keys stored in AWS Secrets Manager rather than in code. No system is perfectly secure, and we can’t guarantee absolute security — but we design with data minimization and least-privilege access as defaults, not afterthoughts.

Our servers and database are hosted in the United States (AWS us-east-1, Northern Virginia). If you use Atlas Concierge from outside the United States, your information will be transferred to and processed in the United States. Some of the third-party services listed above operate internationally (for example, Duffel in the UK and GetYourGuide in Germany) and may process data in their own regions.

• Access and correction. You can view and update your saved preferences and plans directly in the app.
• Deletion. Email us to request deletion of your account and associated data (see above).
• Marketing.We don’t currently send marketing email. Transactional emails (verification, password reset) are necessary to operate your account.
• Depending on where you live, you may have additional rights under laws like the California Consumer Privacy Act (CCPA) or the EU/UK General Data Protection Regulation (GDPR), including the right to know what we hold about you and to object to certain processing. Contact us to exercise any of these rights, and we’ll respond as required by applicable law.

If we make a material change to how we handle your information, we’ll update the effective date at the top of this page. We encourage you to check back periodically.

Questions, concerns, or requests about this policy or your data can be sent to james.a.watson72@jwventuresai.com.

JW Ventures LLC · Kentucky, United States