← Back to the app

Privacy policy

Last updated: 4 November 2026. Draft, to be reviewed before payments open. The Italian version is the one that counts.

Who is responsible

Mattia Calabrese, Parma (Italy). Contact: info@atlasware.it.

What we collect and why

• Without an account: nothing. Everything you write (products, customers, practice sessions) stays in your browser's storage on your phone and never reaches us.
• With an account: your email and password. The account provider keeps the password only in encrypted form (hash). We need them to let you sign in (performance of the contract).
• With the Pro plan: a copy of your app data (products, playbooks, progress, customers you added) so you can find it on other phones. If you add data about your own customers, you are the controller of that data: add only what you need.
• Invites: if you sign up from a friend's link, we record who invited whom, when you created your account and on which days you did a practice call (and how many turns, not what you said), only to give the friend who invited you the promised month of Pro. To prevent abuse we also check that the email isn't a temporary one (a public list of domains and a DNS check of the domain), store the email in normalized form (lowercase, without "+tags" and, for Gmail, without dots) and a one-way fingerprint (not the value) of the connection and the device used.
• Shared scorecard: only if you tap "Share your scorecard". The link and the image contain your score, the objection title, your belt and your invite code (if you have an account), written inside the link itself: we store nothing on the server. The conversation never leaves your phone. Anyone with the link can see the scorecard.
• Roast my pitch: we read the public text of the page whose link you paste and send it to Claude (Anthropic) for the analysis. We only store the result, the site's domain and the language, for 30 days, so you can share it; we don't store text you paste. For daily limits we use a fingerprint of your connection that changes every day.
• Teams: if you join your manager's team (only after you agree), the manager sees the results of your practice sessions: date, type of session, score, minutes, the objections where you struggled and the coach's verdict. The conversations and what you say stay on your phone. If you leave the team, or the manager removes you, your results are deleted from the team. Whoever creates the team keeps their sales method, which reaches the team's sellers.
• Waiting list: if you sign up, we keep your email, the app language, your place in the list and, if you give them, who you are (founder, freelancer…), your product link, your company name and number of sellers, only to write to you when plans open (Pro or the business plan) and to recognise early members. You can ask to be removed at any time. Skip the line: everyone on the list gets a personal link; to count the friends who join from it we store who invited whom, your email in normalized form and a fingerprint (SHA-256, never the value) of your connection and device, to stop fake sign-ups. A friend counts once they confirm the same email by creating an account. The person who invited you only sees how many friends counted, never who they are.
• Payments: handled by Stripe. We never see or store your card details. We only learn whether your subscription is active and until when.
• Smart customer: if you have an account and use it, the text of each line of the role play and the profile of the simulated customer are sent to Anthropic to generate the reply. We count how many lines you use each month to apply the plan's limits.
• Prep the call: if you have an account and use it, the server reads the public page you point to (a business's website, at most 3 pages of the same site, respecting its robots.txt), or takes the text you paste, and sends it to Anthropic for the analysis together with your product card. We don't keep the text we read or the result: the result stays on your phone (and in your cloud space, if you save your data to the cloud). We don't read Google Maps listings. We count how many preps you run to apply the plan's limits.
• Day planner: your appointments file is read on your phone and is not sent anywhere. We only keep the time, the business name, who you meet and short notes, for 14 days, then they delete themselves (from your cloud space too, if you save your data to the cloud); phone numbers and emails in the file are not saved. If you ask for a debrief, Anthropic only receives your own account of the meeting (without the client's name, numbers, emails or links), the type of business and your product card; we don't keep it. We count how many debriefs you get per day to apply the plan's limits. You are responsible for your clients' data that you load: only load what you need.
• Find leads: if you have an account and use it, the server looks up businesses of the city and type you choose on OpenStreetMap (public data, © OpenStreetMap contributors, ODbL license: the city name goes to OpenStreetMap's search service, Nominatim) and reads the home page of their public websites, respecting their robots.txt, to check what's there (online booking, WhatsApp, languages, social). It sends Anthropic your product card, the list of businesses and short excerpts of their websites to pick 10. We don't keep the search or who ran it; we keep a temporary copy of the list for a few days by city and type of business, and of each website check, with no data about who searched. We count how many searches you run to apply the plan's limits. The businesses you save stay on your phone (and in your cloud space, if you save your data to the cloud): only the business's name, address, website and public phone number.
• Usage measurement: to understand whether the app works we count, without cookies and without third-party tools, six steps: first use without an account, account created, first role-play, role-play finished with a score, coming back after 7 days, joining the waitlist. For each step we only keep the step name, the day, the app language, the creator code that brought you here (if any) and a non-reversible fingerprint (a code computed with a secret key, never your email, your id, your IP address or your phone), used only to count each step once per person (legitimate interest in improving the service).
• Visit statistics: we use Cloudflare Web Analytics to know how many people visit the site, which site they come from, which device they use and which pages they view. It uses no cookies, collects no personal data and only shows us aggregate numbers.
• Emails about using the app: if you have an account with a confirmed email, we may send you at most three emails: a welcome, a reminder after 3 days if you haven't finished a role-play yet, and a notice 2 days before your Pro trial ends. We use your account email, sign-up date and app language, and we note which emails we sent so we don't repeat them. Every email has a link to stop receiving them (legitimate interest; you can object at any time).
• Voice: speech recognition is done by your browser (Google on Chrome, Apple on Safari) under their own rules. The app does not record or save your voice. The recorder in the Tools section saves only on your phone.

No ads, no profiling, no tracking cookies. The app only uses the browser's technical storage to work.

Who we share it with

• Cloudflare: hosts the app and the server.
• Supabase: accounts and Pro plan data, on servers in the European Union.
• Stripe: payments.
• Resend: only for the emails about using the app, when they are active; it receives your email address and the text of the email.
• OpenAI (natural voice): only if you use the natural voice. It receives the text of the lines to read and returns the audio. It does not receive your voice or your email.
• Anthropic (Claude), for the Day planner: only if you ask for an appointment debrief, it receives your account of it without names or contact details.
• Anthropic (Claude): only if you use the smart customer, "Prep the call" or "Find leads". It receives the text of the practice conversation to generate the customer's replies, or the text of the public page you pointed to, to prep your call, or the list of businesses found with short excerpts of their websites. It does not receive your voice, and we do not send your email.
• OpenStreetMap Foundation (Nominatim): only if you use "Find leads". It receives the name of the city you search for, from our server (not your IP address or your data). The list of businesses comes from a public OpenStreetMap service (Overpass), which only receives the area and the type of business.

They are data processors bound by GDPR-compliant contracts. If a transfer outside the EU is needed, it happens under the standard contractual clauses.

How long we keep it

As long as you have the account. If you delete it from your Profile, the account and the cloud data are deleted right away. Payment data stays with Stripe for as long as tax law requires.

Your rights

You can ask for access, correction, deletion, restriction and portability, and you can object to processing, by writing to info@atlasware.it. You can do a lot of this yourself: «Download my data» and «Delete account» in your Profile. You can also file a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it).