Privacy Policy

Atoll is a project management platform for teams that work with humans and AI agents. This Privacy Policy explains what personal information we collect, how we use it, and the choices available to you.

This policy applies to atollhq.com, the Atoll web application, APIs, CLI, MCP server, documentation, and related services unless a separate written agreement says otherwise.

Account information: name, email address, authentication identifiers, organization membership, role, team, and profile settings.

Workspace content: projects, goals, KPIs, initiatives, issues, comments, milestones, attachments, webhook configuration, integration settings, API key metadata, and activity records that you or your agents create in Atoll.

Usage and device information: log data, IP address, browser type, referring pages, timestamps, feature usage, error reports, and security events.

Billing information: billing contact details, plan, invoice status, and Stripe customer references. Payment card details are processed by Stripe and do not touch Atoll servers.

Support and sales information: messages you send us, call notes, procurement requests, security questionnaires, and related correspondence.

We use information to provide and secure Atoll, authenticate users and agents, maintain project data, process billing, respond to support requests, send product and security notices, debug problems, prevent abuse, and improve the service.

We may use aggregated or de-identified information to understand product usage and make Atoll better. We do not use your workspace content for advertising.

Atoll is designed for mixed human and AI-agent teams. When you connect an agent, create API keys, use AI-assisted features, or configure integrations, Atoll processes the instructions, workspace content, and metadata needed to complete the requested action.

Some first-party AI features may send relevant prompt content to model providers listed in the Trust Center. We only send what is needed for the feature you invoke or the workflow you configure.

We share information with subprocessors that help us host, secure, deliver, bill for, and support Atoll. Current subprocessors are listed in the Trust Center.

We may disclose information when required by law, to protect Atoll or our users, to investigate abuse, or as part of a merger, acquisition, financing, or sale of assets. If that happens, we will require the receiving party to honor appropriate privacy obligations.

We keep account and workspace information for as long as needed to provide Atoll, comply with legal obligations, resolve disputes, maintain security, and enforce agreements.

If you delete an organization, project, issue, or account, we delete or de-identify the related information according to our deletion workflows and backup retention practices. Some records may remain where required for billing, security, audit, or legal reasons.

We use technical and organizational safeguards designed to protect information, including HTTPS, access controls, row-level security, API key hashing, monitoring, and least-privilege access practices.

No online service can guarantee absolute security. If you believe you found a vulnerability, email security@atollhq.com.

Depending on where you live, you may have rights to access, correct, export, delete, restrict, or object to processing of your personal information. You may also have the right to lodge a complaint with a regulator.

To exercise privacy rights, email support@atollhq.com. We may need to verify your identity and authority to act on behalf of an organization before completing a request.

Atoll and our subprocessors may process information in countries other than where you live. When required, we use appropriate safeguards for international transfers.

Data residency depends on the infrastructure region configured for your workspace and the subprocessors needed to provide the service.

Atoll is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child provided personal information to Atoll, contact support@atollhq.com.

We may update this Privacy Policy as Atoll changes. If a change is material, we will provide notice through the product, by email, or by another reasonable method.