ATLAS PROFESSIONS

Atlas Outreach privacy notice

Effective October 14, 2026. Section 8, Website visitors, added November 14, 2026.

1. Application and operator

Atlas Outreach is an Atlas Professions campaign-management tool within the authenticated Atlas Command website. It stages lead sheets, prepares website observations and email copy, reviews campaign scope, sends authorized email through a connected Gmail account, and tracks receipts and replies. Contact: admin@atlasprofessions.com.

This notice covers the separate Outreach Gmail connection and campaign system, not every J.A.R.V.I.S. integration. The existing admin inbox/calendar connection is separate.

2. Information accessed and stored

Google account information verifies that the intended sender is connected. Gmail send permission is used for approved campaign messages, follow-ups, configured outcome alerts and separately approved responses. Gmail read permission retrieves mailbox messages and full saved campaign threads to identify replies, opt-outs and delivery reports and maintain correct threading. Bounded delivery-report fields may be retrieved separately when Gmail stores them as attachment bodies; arbitrary file attachments are not downloaded by this monitor.

OAuth access and refresh credentials are stored on the server so the owner need not sign in for each cycle. Atlas does not receive the Google password. Credentials have restricted server file permissions; the Outreach token file is not application-level encrypted.

Stored campaign records include uploaded CSV files; operator-supplied lead names, business contact and website details; website observations; rendered email subjects and bodies; settings; approval scope and decisions; lead states; send attempts; Gmail message/thread identifiers; inbound outcome identifiers and timestamps; failures; and suppressions. Inbound outcome records store identifiers, classifications and timing rather than every received message body. Gmail retains underlying messages according to the account owner's settings.

3. Use of information

Information validates and deduplicates leads, renders reviewed messages, enforces limits and approval scope, sends eligible touches, threads follow-ups, stops further contact after recognized replies or suppressions, presents operational counts, and supports investigation of uncertain sends.

Uploading a sheet or connecting Gmail does not authorize a campaign. Launch requires review of recipients, copy and settings. Responses to received replies require separate approval. A configured alert address receives short outcome notifications, not the full conversation body.

4. Processing and sharing

Google processes authentication and Gmail requests and delivers sent messages to recipients. DigitalOcean hosts the application, campaign database and backups. Supabase stores shared Atlas approval/audit records. The operator-hosted n8n workflow service schedules the existing engine; it is not another sender.

The deterministic Outreach engine does not call an AI model to send campaigns. J.A.R.V.I.S. is a conversational interface: text supplied to it may be stored in chat history and processed by its configured AI provider. Information pasted into chat is not confined to the campaign database.

Atlas Professions will not sell Google user data, use it for advertising targeting, or use it to train a generalized AI model. Uses and transfers of Google API data are limited to the disclosed user-facing functions and permitted purposes under the Google API Services User Data Policy, including its Limited Use requirements. This is not a claim of Google verification or certification.

5. Access and security

Campaign pages and APIs require authentication. OAuth uses an expiring one-use state and PKCE, verifies the sender, and keeps credentials out of browser responses. Send receipts are recorded; uncertain claims remain for reconciliation instead of automatic retry. No system guarantees absolute security.

6. Retention, archival and deletion

Archiving removes a sheet from active operation but keeps send history and deduplication records. Archiving is not deletion. Campaign records, uploads, shared approval/chat records and backups remain until an authorized administrator removes them; the application has no automatic expiry policy. Minimal suppression records may remain to honor an opt-out and prevent future contact. There is no immediate or automatic deletion promise.

Request access, correction or deletion at admin@atlasprofessions.com. The operator verifies the requester's authority before exposing or changing records. There is no self-service account/data deletion control. Removing campaign records does not delete messages in Gmail or recipients' mailboxes.

7. Your choices

The mailbox owner can revoke access through Google Account third-party connections. Revocation prevents further authorized Gmail access but does not erase stored records automatically. Operators can pause campaigns and request deletion. A send already in flight may finish after a pause. Recipients can request no further contact; recognized opt-outs and structured hard-bounce evidence create suppressions, while ambiguous evidence is held for review. Automatic classification does not cover every possible message format.

8. Website visitors

When you visit atlasprofessions.com, the site keeps a record of how its pages are used: which pages you open, the buttons and links you click, how far you scroll, how long a page stays open, the size of your window, and where the visit came from (for example a Google ad and the search words, a search engine, or one of our emails).

To recognize a return visit, the site keeps a random identifier in your browser's local storage. A second random identifier lasts only while the tab is open. Neither contains your name or contact details. If you use another device or browser, or clear this site's data, you are counted as a new visitor.

If you send us a form, we link it to the visit it came from, so we can see which page and which ad brought you.

Your choice: the first time you visit, the site shows a short notice about cookies and similar tools, with Accept and Decline buttons and a link to this section. Your choice is kept in your browser, and you can change it at any time with the Privacy choices link at the bottom of each page. Each choice is also kept with that visit as our record of your consent. Until you choose, the site keeps only the basic visit record described above.

If you accept: on our public pages, the site records how the pointer moves, where you click or tap, and how you scroll, so we can watch how pages are used and improve them. It never records what you type, what you paste, or the contents of any form field; for a form, we see only that a field was selected. A recording lasts at most about ten minutes per visit and is deleted after 90 days.

Where we never record: even if you accept, we do not record visitors we locate in California, Connecticut, Delaware, Florida, Illinois, Maryland, Massachusetts, Michigan, Montana, Nevada, New Hampshire, Oregon, Pennsylvania or Washington, or when we cannot tell where a visit comes from. Your location is worked out on our server from your IP address and is not stored. There, the site keeps only a few anonymous snapshots of how a page was used: how far it was scrolled, and where on the page the pointer rested and taps landed, as positions on the page, with the screen size rounded. A snapshot carries no identifier, no time of day and nothing that links it to you or to your visit.

If you decline: nothing is recorded. The site keeps only basic visit stats, which is the visit record described above (it still uses the random identifiers, so it is not anonymous), plus the same anonymous snapshots. If your browser sends a Global Privacy Control or Do Not Track signal, we treat that as declining, and no snapshots are kept either.

Counting people, not programs: to keep our numbers honest, the site notes whether a visit showed signs of a person, such as a real click, tap, key press or pointer movement, or a choice on the notice, and how soon after the page loaded that happened. It never notes which key was pressed. The page also reports signs of an automated browser, and our server notes whether a visit comes from a data-center network; neither is stored as anything more than a yes or no. Visits from search-engine and ad-checking crawlers, automated browsers and data-center networks are not counted as people.

Mailing list: our forms include a box for our mailing list (occasional tips and updates). The box is ticked to start with; untick it if you do not want these emails. If you send a form with the box ticked, we add your email address to the list and keep a record of when, on which form, the exact wording shown, and that the box was ticked to start with. Every email we send to the list has an unsubscribe link that works at once, without signing in, and you can also reply with the word unsubscribe. When you unsubscribe, we keep your address marked as unsubscribed so we never email it from the list again.

Cookies and similar storage: the site sets no advertising cookies of its own. It uses your browser's local and session storage for the identifiers above and to remember the source of your visit. The Google tag, which measures our Google Ads, may set Google's own cookies; Google's privacy policy covers what Google collects.

We use visit records only to run and improve our own site and ads, and we do not sell them. IP location and network data by DB-IP.

9. Changes

Material changes to data access, use, storage or sharing will be reflected in this notice and, where required, presented for renewed consent before the changed use begins.