Privacy Policy

1. Introduction

EntityAtlas ("we," "us," or "our") operates this website and application (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the Service. By accessing or using the Service, you agree to the collection and use of information in accordance with this policy.

This Service is intended for use by residents of the United States only. We do not represent that the Service is appropriate or available for use in other jurisdictions.

2. Information We Collect

We may collect the following categories of information:

• Account information: Email address and password (stored via Supabase Auth). Passwords are hashed and never stored in plaintext.
• Profile data: Information you voluntarily provide, such as your name and account preferences.
• Entity and business data: Business names, entity types, EINs, addresses, and other information you enter when using the dashboard features.
• Payment information: Subscription and billing data is processed by Stripe. We do not store full payment card details on our servers. Stripe's privacy policy governs the handling of payment data.
• Usage data: Log data including your IP address, browser type, pages visited, and timestamps, collected automatically when you use the Service.

3. How We Use Your Information

• To provide, operate, and maintain the Service
• To authenticate your identity and manage your account
• To process subscription payments via Stripe
• To respond to your inquiries and provide customer support
• To send transactional emails such as password reset notifications
• To monitor and analyze usage patterns to improve the Service
• To detect, prevent, and address technical issues or fraudulent activity
• To comply with applicable legal obligations

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4. Third-Party Service Providers

We use the following third-party services to operate the Service. Each is governed by its own privacy policy:

• Supabase — Authentication, database, and storage infrastructure. Data is stored on Supabase-managed servers.
• Stripe — Payment processing and subscription management. Stripe may collect and store billing information subject to their own privacy policy.
• Vercel — Web hosting and deployment infrastructure.

We are not responsible for the privacy practices of these third parties and encourage you to review their respective privacy policies.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data by contacting us. We may retain certain information as required by law or for legitimate business purposes such as fraud prevention.

6. Data Security

We implement commercially reasonable technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted connections (HTTPS/TLS), hashed password storage, and access controls. No method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights and Choices

Depending on your jurisdiction, you may have rights including:

• The right to access the personal information we hold about you
• The right to request correction of inaccurate information
• The right to request deletion of your personal information
• The right to opt out of certain processing activities

To exercise these rights, contact us at the address listed in Section 10.

8. Cookies and Tracking

We use session cookies and similar technologies to manage authentication state. These are necessary for the Service to function. We do not use third-party advertising cookies or cross-site tracking technologies.

9. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us and we will take steps to delete it.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us through the account dashboard or by visiting the contact information provided within the Service.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page. Continued use of the Service after changes are posted constitutes acceptance of the updated policy.