Your data stays yours.

The short version.

Atlora is a document platform. You upload files, we index them, and you ask questions answered from your own content. To do that we collect what the service needs to function — and we treat it as yours, not ours to monetize.

We do not sell your personal information. We do not share it with anyone for their own marketing. We do not use your documents to train AI models. We run no advertising, no ad networks, and no tracking. The only analytics we use is Cloudflare's cookieless page counter, which sets no identifier. The rest of this page is the detail behind those four sentences.

The company behind Atlora.

Atlora is operated by WellTimed, LLC, doing business as Atlora. On this page "Atlora," "we," and "us" mean WellTimed, LLC. We are the controller of the personal information described here, except where we process content on behalf of an organization that uses Atlora — in that case the organization is the controller and we act on its instructions.

Every Atlora account belongs to an organization. For a family plan, your household is the organization — the same boundaries of access, isolation, and encryption apply whether the organization is a firm or a family. When this page says "your organization," read it that way.

Your use of Atlora is also governed by our Terms of Service.

Information we collect.

Some of what we hold identifies you — a name, an email address, an IP address. We call that personal information. Some of it doesn't and can't reasonably be linked back to you, like counts and aggregate totals; that's non-personal information, and we treat it as outside this policy's restrictions.

• Account information — your name, email address, and organization details, used to create and secure your account. Authentication runs through our identity provider; we never store passwords ourselves.
• Your content — the documents you upload and the questions you ask, along with the text, embeddings, and answers derived from them. This content belongs to you.
• Billing information — your plan, your usage, and an identifier for your customer record at our payment processor. We never receive or store your card number.
• People you name — the email addresses of people you invite, including an Emergency Contact you choose for your household.
• What you tell us — anything you send in a support request in the app, including attachments, or in an email to us. Resolved support requests and their attachments are erased 180 days after they are resolved.

Information that reaches us from elsewhere.

• Your identity provider — when you sign in, our authentication provider returns your email address, name, and a user identifier. If you sign in through Google or another provider, what we receive depends on your settings there.
• Calendars you connect — if you connect a Google, Microsoft, or CalDAV calendar, Atlora writes your schedule into it: it adds, updates, and removes only the events Atlora created, in a separate Atlora calendar where the provider allows one. We read your account's email address to label the connection. We do not read your other events, and you can disconnect at any time.

What we record when you use Atlora.

• Log data — our servers record each request: the URL, your IP address, browser type, timestamps, and error details.
• Device data — the operating system and browser you use to reach us.
• Approximate location — inferred from your IP address, at roughly city level. We do not collect precise device location.
• Access and audit logs — we log who read or changed what, and when. These logs are how account owners investigate activity in their own organization, and how we investigate security incidents.
• Usage metrics — how often features are used, so we can bill accurately and decide what to improve.
• Email engagement — our email provider records when an email we send is opened. We use it to tell whether important account messages are reaching you.
• Page analytics — Cloudflare Web Analytics counts page views so we can see which parts of Atlora are used and where they are slow. It records the page, the referrer, your browser type, and your country. It sets no cookie and no identifier, and it cannot follow you across sites.

The cookies we set.

Every cookie Atlora sets is necessary for the service to work. We set no advertising cookies, no tracking cookies, and no analytics cookies — the one analytics tool we use, Cloudflare's page counter, works without a cookie.

• Session and sign-in — keeps you signed in between requests, and lets us renew your session without asking you to log in again.
• Security — a token that lets us verify a request genuinely came from you and not from another site acting in your name.
• Flow state — short-lived cookies that remember where you are in signup, or hold the state of a calendar connection while you authorize it. These expire on their own.

Because these cookies are strictly necessary, blocking them in your browser will break sign-in. We have no consent banner because there is nothing optional to consent to.

How we use your information.

We use what we collect for a narrow set of purposes:

• To provide the service — indexing your documents and answering your questions from your own content, with citations.
• To operate, secure, and improve the platform, and to diagnose and fix problems.
• To detect and prevent fraud, abuse, and unauthorized access.
• To bill you accurately and communicate with you about your account.
• To comply with our legal obligations.

We do not use your documents, your questions, or the answers you receive to train machine-learning models — ours or anyone else's.

The sensitive documents you keep here.

Most services tell you not to upload sensitive information. We can't — holding it is the point. A household or legal records platform that excluded the sensitive documents would be holding nothing worth holding. So we say plainly what you may be storing with us:

• Government identifiers — Social Security numbers, passport and licence numbers.
• Medical and health records.
• Financial account information.
• Records about members of your household, including your children.

We treat this material as the most sensitive thing we hold. Files are encrypted under a key belonging to your organization before they're stored, designated sensitive fields are tokenized rather than kept in the clear, and access is scoped to your organization. The security section below describes exactly what is and isn't encrypted.

We don't sell or share your data.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising — not for money and not for anything else. We run no advertising anywhere in Atlora, we are not part of any ad network, and we have no tracking product embedded in the service. The only analytics we use is Cloudflare's cookieless page counter, described under "Collected automatically".

There are six situations in which your information reaches someone else:

• Service providers — the companies listed below, who process data only to help us run Atlora and only on our instructions.
• Other people in your organization — if you belong to an organization, owners and administrators of that organization can see activity records for its members, including what was accessed and when. That's how an account owner investigates activity in a workspace they're responsible for. If you'd rather your activity not be visible to an administrator, don't join their organization.
• Your Emergency Contact — if you set up Emergency Access, the person you choose can read and download the documents you flag for them, and only those, once the kit you printed is used and the waiting period passes without you cancelling it.
• Services you connect — a calendar you connect receives the schedule events Atlora writes to it, and an AI assistant you connect to Atlora receives the content it asks for on your behalf. What those services do with it is governed by their own policies.
• Legal process — we may disclose information where the law requires it, or to protect the rights, property, or safety of our users or of Atlora. We limit any such disclosure to what is actually required, and we'll notify you unless we're legally barred from doing so.
• A company transaction — if Atlora is merged, acquired, or sells assets, your information may transfer to the acquiring entity, which remains bound by this policy or gives you notice before anything changes.

Anything else requires your consent.

Where your data goes.

Every third party that touches your data is another place it can be exposed, so we keep that list deliberately short. Atlora runs on hardware we own and operate in a U.S. data center. The application, the database, the search index, and your files all live there, not in a public cloud.

Your data leaves our infrastructure only for the purposes below. Each provider processes data only to deliver its piece of the service, only on our instructions, and never for its own purposes. This list was last reviewed on October 9, 2026.

• Sign-in — WorkOS handles authentication, single sign-on, and multi-factor authentication, so Atlora never stores your password.
• Backups — files are encrypted under your organization's key before they leave our facility, with keys that never leave hardware we control. Encrypted copies are then replicated to two independent providers, iDrive and Oracle Cloud Infrastructure, neither of which can read them. Our database is never copied to a cloud provider.
• AI answers — Anthropic, OpenAI, Groq, and Cerebras generate answers from your question and the passages we retrieve. The next section covers exactly what is sent and what they may do with it.
• Search indexing — Cohere turns your document text into the numeric representations retrieval uses, and reorders search results.
• Web search — Brave Search finds public web pages when a question needs them. It receives search queries only, never your documents.
• Network edge — Cloudflare sits in front of Atlora as a proxy and firewall, and runs the cookieless page analytics described above. Your requests pass through it on the way to our servers; your files and database do not live there.
• Payments — Stripe processes payments. Your card details go to Stripe directly; we only ever hold an identifier for your customer record there.
• Email — Postmark delivers account and notification email, and SparkPost delivers it if Postmark is unavailable.

Every provider on this list holds a SOC 2 attestation. When we add or change a provider, it has to meet that bar and the standard described in the next section before any of your content reaches it.

What happens when you ask a question.

Answering a question means sending the relevant passages from your documents to an AI provider, along with your question. Only the passages needed for that answer go — never your whole library, and never your account details.

Web search. Some questions are better answered with public information, and Atlora can search the web to find it. When that happens, your question text is sent to our search provider to find relevant pages, and we then fetch those pages. Your documents are never sent to the search provider — the question is. If that isn't acceptable for the work you do, avoid asking questions that call for web results.

How we protect your data.

Traffic between you and Atlora is encrypted in transit, and everything we store is encrypted at rest. Files you upload and your chat history carry a second layer of encryption under a key belonging to your organization. Access runs on short-lived credentials, and every read and change made through an account is logged.

Your data is isolated per organization: queries are scoped to the organization that owns the content, and nothing crosses that boundary. You can read the fuller breakdown on our security page.

We assume any single safeguard can fail, and layer them so one failure does not expose your data. If we discover a breach affecting your personal information, we'll notify you and the relevant regulators without undue delay, as the law requires — and because access is logged, we can tell you precisely what was affected rather than guess.

Where your data is stored.

We store and process your information in the United States. Atlora is a US service, offered to customers in the United States.

Atlora is reachable only from the United States. Our network edge refuses connections from outside the country before they reach our servers. If you travel abroad, you cannot sign in until you return, and that includes cancelling an Emergency Access request. An Emergency Contact outside the United States cannot accept an invitation, use an Emergency Kit, or sign in.

Keeping it only as long as needed.

We keep your content for as long as your account is active, so the service works as you expect. You can delete documents and collections yourself at any time, and deleting them removes the derived index entries and embeddings along with them.

To delete your entire account and everything in it, use the delete option in your account settings. Your account is suspended immediately and permanently deleted after 30 days — signing in during that window lets you change your mind. After that it cannot be recovered. We keep only what we're legally required to keep: billing and tax records, and the minimum needed to resolve a dispute or meet a legal obligation. Routine operational backups cycle out on a rolling basis, so a deleted item may persist in a backup briefly before it ages out. You can also email privacy@atlora.ai and we'll do it for you.

Your rights & choices.

Wherever you live, you can ask us what personal information we hold about you, ask us to correct it, and ask us to delete it. You can edit your profile directly in the app; for anything else, email privacy@atlora.ai and we'll handle it within the time the law allows — no more than 45 days.

If you're in California, Texas, Virginia, Colorado, or another US state with a privacy law, you have the right to know what we collect and why, to get a copy, to correct it, to delete it, and to opt out of sale or targeted advertising — which for us is automatic, because we do neither. You can use an authorized agent to make a request on your behalf. If we turn a request down, you can appeal by replying to our decision, and we'll respond to the appeal in writing.

We won't discriminate against you for exercising any of these rights — no degraded service, no different price.

We honor Global Privacy Control signals. We don't act on Do Not Track headers, because there's nothing for them to switch off: we run no cross-site tracking.

Atlora is for adults.

You must be 18 to hold an Atlora account, and the service isn't directed to children. Consistent with the Children's Online Privacy Protection Act, we don't knowingly collect personal information from anyone under 13. If we learn we have, we'll delete it promptly and close any account involved. If you're a parent or guardian and believe a child has given us information, email privacy@atlora.ai.

The email we send you.

Every email Atlora sends is about your account: a sign-in link, a confirmation, an invoice, a notification you asked for. We send no newsletters, no product announcements, and no promotional email — there is no marketing list to be on and nothing to unsubscribe from. If that changes, we'll ask you to opt in first rather than adding you and offering an exit.

Our email provider records when a message is opened, which is how we tell whether account mail is reaching you. Blocking remote images in your mail client stops that.

Links and connections.

Atlora links to and connects with other services — a calendar you authorize, an AI assistant you connect, a payment page, a web page cited in an answer. What those services do with your information is governed by their own policies, not this one. Review them before you connect.

Updates to this policy.

We'll update this policy as the service evolves. When we make a material change, we'll revise the effective date at the top and, where it matters, tell you directly. Continuing to use Atlora after an update means you accept the revised policy.

Questions? Reach out.

For anything about this policy, your information, or a request to access or delete it, email privacy@atlora.ai and we'll get back to you. Atlora is operated by WellTimed, LLC.