Privacy Policy
This Privacy Policy explains how RYZO ("we", "us") collects, uses, discloses, and protects information in connection with the ATLAS platform ("ATLAS", the "Service") at atlas.ryzosphere.com. By using the Service, you agree to the practices described here.
1. Information we collect
- Account & identity: your name, email address, and organization. If you register with a password, it is stored only as a secure cryptographic hash (scrypt) — never in plain text. If you sign in with Google or Apple, we receive basic profile information (name, email) from that provider.
- Product data you provide: projects and intake details, tasks, risks, contractor bids, messages, notifications, your public profile, and identifiers such as your RYZ ID. Some of this may include sensitive business or site information.
- Uploaded files: documents and images (e.g., avatars) you upload, stored in object storage. Designated sensitive intake fields are encrypted at rest.
- Connected accounts: if you connect Google Drive, we request a limited scope (
drive.file) that grants access only to the specific files you choose; we do not access your full Drive. - Usage & device data: basic technical logs (IP address, timestamps, actions) used to operate, secure, and audit the Service.
2. How we use your information
- To provide, operate, secure, and improve the Service and your account.
- To power KLOK — our AI assistant and agents — with your project context (see §3).
- To send you service and notification emails you've opted into or that are necessary to the Service.
- To maintain an audit and provenance record of governed actions.
- To comply with legal obligations and enforce our terms.
3. AI processing (important)
ATLAS uses third-party large-language-model (LLM) providers to power KLOK. When you use AI features, relevant project data and document text may be sent to these providers to generate a response. Providers may include OpenAI, Anthropic, xAI, Google (Gemini), OpenRouter, Mistral, and Perplexity, depending on configuration. We send only what is needed to fulfill your request and do not sell your data. We do not control these providers' independent practices; review their policies for details.
4. Sub-processors & third parties
| Provider | Purpose |
|---|---|
| Render | Application hosting |
| Neon (PostgreSQL) | Primary database |
| Backblaze B2 (S3-compatible) | Document & file storage |
| LLM providers (see §3) | AI features (KLOK) |
| Resend | Transactional email |
| Google / Apple | Optional single sign-on |
| Regrid, Dropbox Sign, Slack | Optional integrations (parcel data, e-signature, team notifications) — only if enabled |
5. How we share information
We do not sell your personal information. We share it only: (a) with the sub-processors above to operate the Service; (b) with other members of your organization/projects as required by the collaboration features you use; (c) when you direct us to (e.g., a shared deal-room link); and (d) if required by law or to protect rights and safety.
6. Cookies
We use a single first-party session cookie to keep you signed in. We do not currently use third-party advertising or analytics cookies. If that changes, we will update this policy and provide any legally required controls.
7. Data retention & security
We retain your information for as long as your account is active or as needed to provide the Service and meet legal obligations, then delete or anonymize it. We protect data with encryption in transit, hashed passwords, encryption of designated sensitive fields at rest, and access controls. No system is perfectly secure. [Specific retention periods pending counsel.]
8. Your rights
Depending on your location, you may have the right to access, correct, export, or delete your personal information, and to withdraw consent. You can edit much of your profile in-app; for other requests, contact us at the address below and we will respond within a reasonable time. Residents of the EEA/UK (GDPR) and California (CCPA/CPRA) may have additional rights. [Jurisdiction-specific disclosures pending counsel.]
9. Children
ATLAS is not directed to children and is intended for users 18 and older. We do not knowingly collect information from children.
10. Changes to this policy
We may update this policy. Material changes will be reflected by a new version number and effective date, and we may ask you to re-accept. Continued use after an update constitutes acceptance.
11. Contact
Questions or requests: privacy@ryzosphere.com.