Last updated: October 23, 2026
ChatAtlas ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you use our application for archiving and organizing AI conversations.
By using ChatAtlas, you agree to the practices described in this policy.
Account Information: When you create an account, we collect your email address and, if using a third-party sign-in provider (e.g. Google), your name and profile picture as provided by that service.
Conversation Data: Any AI conversation files you upload, import, or sync into ChatAtlas — including the conversation title, message content (your prompts and the model's responses), timestamps, and the platform the conversation came from — are stored securely and are accessible only to you. We do not read, analyze, or share your conversation content.
Third-party API Keys: If you choose to connect AI platform accounts (e.g. OpenAI, Anthropic) for auto-sync, the API keys you provide are stored locally in your browser's local storage and are never transmitted to our servers. If you provide an OpenRouter API key for BYOK AI features, it is encrypted at rest in our database using pgcrypto and only decrypted server-side when you invoke an AI feature.
Billing Information: If you upgrade to a paid plan, payment is processed by Stripe. We store only your Stripe customer ID, subscription ID, plan status, and renewal/cancellation dates — we never receive or store your card number or billing address.
The optional ChatAtlas Chrome extension (the "Extension") is the only ChatAtlas component that interacts with third-party AI websites on your behalf. This section describes exactly what data the Extension collects and how it is handled. The Extension does not collect or transmit any data until you have installed it, signed into ChatAtlas inside the popup, and visited a supported AI conversation page.
What it accesses: When you are actively viewing a conversation on a supported site (chatgpt.com / chat.openai.com, claude.ai, gemini.google.com, www.perplexity.ai, grok.com, chat.deepseek.com), the Extension reads the conversation's content from the page — specifically the conversation title, the platform-provided conversation ID, the role of each message (user or assistant), and the textual message content. It does not read passwords, payment information, browsing history of unrelated tabs, cookies of unrelated sites, or any content outside the conversation area of the supported AI sites listed above.
When data is collected: Collection happens only on the supported AI sites listed above, only while you are signed into ChatAtlas in the Extension popup, and only on pages that contain an AI conversation. Before signing in for the first time, you must affirmatively agree to data collection via a consent checkbox in the Extension popup. If "Auto-Sync" is enabled (it is off by default and can be turned on at any time from the Extension popup), the conversation is sent to your private ChatAtlas library when you open or update it. If Auto-Sync is disabled, the Extension does not send anything until you click "Sync this chat" manually.
How it is transmitted: Captured conversations are sent over HTTPS directly from your browser to our backend at chatatlas.pro (hosted on Supabase). The transmission carries your ChatAtlas authentication token so the data is associated with your account and no other user can access it.
How it is stored: Conversations captured by the Extension are stored in the same private, row-level-security-protected database as the rest of your ChatAtlas library. Only you, when authenticated, can read or modify them. We do not view your conversation content, and we do not share it with any third party (see "Data Sharing and Disclosure" below).
What is stored locally in your browser: The Extension uses Chrome's local storage to remember your sign-in session (so you don't have to sign in on every page), your Auto-Sync preference, and a small set of one-time UI flags (e.g. whether the first-sync onboarding toast has been shown). No conversation content is stored in Chrome local storage.
Sync diagnostics: To keep syncing reliable, the Extension reports minimal diagnostic events to your ChatAtlas account when a sync succeeds or fails — limited to the platform name (e.g. "chatgpt"), a status code (e.g. success, or an error type such as "page could not be read"), and the Extension version. These diagnostics never include conversation content, titles, or message text, are visible only to us for the purpose of detecting and fixing sync breakage, and are automatically deleted after 30 days.
Your controls: You must affirmatively consent to data collection before signing in for the first time (via a checkbox in the Extension popup). After that, you may at any time (1) leave Auto-Sync off (the default) or enable it from the Extension popup, (2) toggle Auto-Sync off to stop automatic capture, (3) sign out of the Extension to stop all data collection, (4) uninstall the Extension to remove all locally stored data and revoke its site access, or (5) delete any synced conversation — or your entire account and all associated data — from the ChatAtlas web app or by emailing us.
Limited Use: ChatAtlas's use of information collected by the Extension is limited to providing the user-facing features described on its Chrome Web Store listing and in the Extension's interface — archiving, organizing, searching, summarizing, and continuing your AI conversations. We do not use this data for advertising, do not sell it, and do not transfer it to third parties except as required to operate the service (e.g. storage by Supabase) or as required by law.
On the Pro plan you can connect Claude, or another AI app that supports MCP connectors, to your ChatAtlas archive at https://chatatlas.pro/mcp. You connect it yourself: the app sends you to a ChatAtlas sign-in page, shows what it will be able to do, and connects only if you choose Allow.
What it can access: Your own saved conversations, read-only: it can search them, list them, read them and see your recent topics. It cannot change, move, share or delete anything, and it cannot see your password, billing details or API keys, or anyone else's chats.
When it's used: Only when you ask the connected app something that calls for your archive. What it reads is sent to that app as part of your conversation with it, and from then on is handled under that app's own privacy policy (for Claude, Anthropic's).
What we keep: The sign-in grant (which app you connected and when), so the connection keeps working. We don't keep a copy of what the app asked or what it read; searches by meaning only add to a daily count for the usage limit. Searches by meaning send the search words to OpenAI to match them, as described below.
Your controls: Disconnect any app at any time in Settings → Connected apps, or remove the connector in the app itself. Either one ends its access.
We use the information we collect to:
Your data is stored using Supabase, a secure cloud database platform. All data is encrypted in transit (TLS) and at rest. Each user's data is isolated through row-level security policies — no other user can access your conversations.
While we take reasonable steps to protect your data, no method of electronic storage is 100% secure. We encourage you to use a strong, unique password for your account.
Certain features — such as AI summarization and semantic search — send relevant conversation content to OpenAI's API to generate results. This processing is initiated by you and is governed by OpenAI's Privacy Policy. We do not retain the content sent to OpenAI beyond what is necessary to return results to you.
Authentication services are provided by Supabase Auth, which may use Google OAuth. Use of Google sign-in is subject to Google's Privacy Policy.
ChatAtlas's use of information received from Google APIs, and of any user data collected by the ChatAtlas Chrome extension, will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. Specifically:
We do not sell, trade, or share your personal information or conversation data with third parties, except:
You have the right to:
To request account deletion or a data export, contact us at the address below.
ChatAtlas uses session cookies strictly necessary for authentication, plus a first-party cookie and browser local storage used by our product analytics (see "Product Analytics" above) to distinguish returning visitors. We do not use third-party tracking or advertising cookies. You can disable cookies in your browser settings, but doing so may affect the functionality of the app.
ChatAtlas is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Continued use of ChatAtlas after changes are posted constitutes your acceptance of the updated policy.
If you have questions or concerns about this Privacy Policy or your data, email us at customer.service@chatatlas.pro. To request account deletion, a data export, or to report a privacy concern, that same address is the fastest path to our team.