Privacy Policy

1. Information We Collect

2. How We Use Information

We use the information we collect for the following purposes:

• Providing, operating, and improving the API and related Services;
• Processing registrations, activating accounts, managing subscriptions, and evaluating Data Grant applications;
• Billing, invoicing, and collections;
• Technical support and customer success activities;
• Monitoring API usage for compliance with the Terms of Service and Acceptable Use Policy, including detection of unauthorized data redistribution;
• Detecting, investigating, and preventing fraud, abuse, unauthorized access, and misappropriation of RED Atlas Data;
• Communicating with customers about service updates, policy changes, and commercial opportunities;
• Aggregating and anonymizing usage data for internal analytics, product development, and, in limited cases, marketing materials;
• Satisfying regulatory and legal obligations, including responding to valid legal process as described in Section 7;
• Enforcing RED Atlas's rights, including intellectual property rights, against unauthorized use of RED Atlas Data.

We do not sell customer account information or API usage data to third parties for advertising or marketing purposes. RED Atlas products and services are ad-free. RED Atlas does not allow advertisers to pay to have RED Atlas promote their products or services through the API or developer communications.

3. Property Intelligence Data and Third-Party Individuals

4. Information Sharing and Disclosure

We do not sell personal information. We may share information in the following circumstances:

• Service Providers: We engage third-party service providers (including cloud hosting, data enrichment, payment processing, and support providers) who process information on our behalf under data protection agreements with obligations no less protective than this Policy.
• API Customers: Account information is shared with the customer organization to which it belongs. API usage data is shared with authorized customer administrators.
• Legal Requirements: We may disclose information where required by valid legal process including subpoenas, court orders, and search warrants. Our handling of law enforcement requests is governed by the Law Enforcement Data Request Statement incorporated into the Terms of Service. Where permitted, we will provide prior notice to the affected customer.
• Business Transfers: In connection with a merger, acquisition, or asset sale, information may transfer to the acquiring entity subject to equivalent privacy protections.
• Protection of Rights: We may disclose information to protect the rights, property, safety, or legal interests of RED Atlas, our customers, or the public, including in connection with enforcement of RED Atlas's intellectual property rights against unauthorized data redistribution.

5. Data Retention

• Account and usage information: retained for the duration of the customer relationship and for up to three (3) years following termination, for legal, compliance, and business continuity purposes.
• API call logs: retained for up to twelve (12) months for operational and compliance purposes.
• Post-grant survey responses: retained for up to two (2) years.
• Property intelligence data: retained in accordance with data licensing agreements and applicable law.
• Technical marker and watermark detection logs: retained for up to five (5) years for intellectual property enforcement purposes.

We may retain anonymized or aggregated data for longer periods.

6. Security

We implement commercially reasonable technical and organizational security measures including encryption of data in transit (TLS 1.2+) and at rest, role-based access controls, multi-factor authentication for privileged access, audit logging, and regular security assessments. We are pursuing SOC 2 Type I certification. No security measure is perfect. In the event of a security incident affecting personal data, we will notify affected customers in accordance with applicable law and the Data Processing Agreement where applicable.

7. Law Enforcement Data Requests

RED Atlas will not disclose customer or user data in response to requests from law enforcement, governmental, or regulatory agencies except where required by valid and properly served legal process. RED Atlas reviews all such requests for legal sufficiency and challenges requests that exceed the relevant authority's legal powers. RED Atlas will attempt to notify affected customers before complying with legal process unless prohibited by law or where there are clear indications of unlawful conduct. In genuine emergencies involving imminent danger of death or serious physical injury, RED Atlas may disclose information without prior notice. For full details, see the Law Enforcement Data Request Statement in the Terms of Service.

8. Jurisdiction-Specific Rights

9. Customer Responsibilities

When API customers use our Services to access or process personal data, they act as independent data controllers for their own processing activities. Customers are responsible for: (a) having a valid legal basis for their processing; (b) providing required notices to individuals; (c) complying with applicable privacy law; (d) honoring data subject rights requests directed to them; and (e) ensuring their use of RED Atlas Data complies with the Acceptable Use Policy, including the prohibition on unauthorized redistribution and the contact data restrictions.

10. Changes to This Policy

We may update this Policy at any time. We will notify active API customers of material changes by email at least fourteen (14) days before they take effect. The current version is always at api.atlas.red. Continued use of the Services after the effective date constitutes acceptance.

11. Contact