Privacy Policy

Last updated: September 10, 2026

This Privacy Policy explains how Atomic Software, Inc. (“Atomic,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you:

• Visit atomic.dev or another website that links to this Privacy Policy;

• Communicate or interact with us;

• Register for an Atomic event, workshop, demonstration, or mailing list;

• Evaluate, purchase, or use Atomic products and services; or

• Apply for employment with Atomic.

We refer to these activities collectively as the “Services.”

“Personal information” means information that identifies, relates to, describes, or could reasonably be linked to an individual. It includes “personal data” as defined under the European Union General Data Protection Regulation (“EU GDPR”) and United Kingdom GDPR (“UK GDPR”), and “personal information” as defined under applicable United States state privacy laws.

This Privacy Policy describes the personal information Atomic processes as a controller or business. When Atomic processes personal information on behalf of a customer under a data processing agreement or similar terms, the customer controls that information and Atomic acts as its processor or service provider. In those circumstances, you should direct privacy requests to the applicable customer.

1. Personal Information We Collect

The personal information we collect depends on how you interact with Atomic.

1.1 Information You Provide to Us

We may collect information you provide directly, including:

• Name;

• Business email address;

• Telephone number;

• Company, job title, and professional information;

• Account or profile information, if account-based Services are offered;

• Communications, questions, feedback, and support requests;

• Event, workshop, webinar, and demonstration registrations;

• Marketing and communication preferences;

• Transaction, subscription, and billing information;

• Information submitted during a customer, partner, or vendor relationship; and

• Information provided when applying for employment with Atomic.

Payment-card information may be collected and processed directly by a payment-services provider. Atomic may receive limited transaction information, such as payment status and billing details, without receiving complete payment-card numbers.

1.2 Information Collected Automatically

When you visit our Website, we and our service providers may automatically collect:

• Internet Protocol address;

• Browser type and version;

• Device type and operating system;

• Pages visited;

• Date and time of a visit;

• Time spent on pages;

• Referring website or source;

• Links and Website features used;

• Approximate location derived from an IP address;

• Screen size and browser language;

• Campaign-attribution information, including UTM parameters;

• Unique or pseudonymous visitor identifiers; and

• Performance, error, security, and diagnostic information.

We collect some of this information using cookies, browser storage, scripts, tags, and similar technologies. Additional information is available in our Cookie Policy.

1.3 Information About Product Use

Atomic may collect information concerning the installation, configuration, access, and use of its Services, such as:

• Account and organization identifiers;

• Authentication and access records;

• Product configuration information;

• Feature usage;

• Operational logs;

• Support and troubleshooting information;

• Security and audit events; and

• Information needed to provide, secure, and improve the Services.

The Atomic command-line interface does not require an account and does not transmit telemetry by default. If you enable an optional feature, integration, hosted service, or diagnostic function that transmits information to Atomic, we will process that information to provide the requested functionality and as otherwise described at the time of collection.

1.4 Customer Content and Software-Development Data

Depending on the Services and features a customer chooses to use, Atomic may process information associated with software-development activity, including:

• Repository and project information;

• Source-code metadata;

• Names, usernames, and email addresses in contribution records;

• Change, commit, patch, branch, and review metadata;

• Prompts, intents, acceptance criteria, tasks, decisions, and supporting evidence;

• Agent, model, tool, and session identifiers;

• Provenance and attestation records; and

• Support materials or diagnostic files a customer chooses to provide.

Some of this information may contain personal information about users, contributors, reviewers, employees, contractors, or other individuals.

When Atomic processes this information on behalf of a customer, the customer is responsible for determining what information is submitted and for providing appropriate notices and obtaining any legally required permissions. Atomic processes the information according to the customer’s instructions, applicable contractual terms, and any data processing agreement between Atomic and the customer.

1.5 Information Obtained From Other Sources

We may receive personal information from:

• Your employer or organization;

• Business partners and event organizers;

• Public professional profiles and business-information sources;

• Service providers;

• Referral sources;

• Social-media platforms when you interact with Atomic;

• Integrations you choose to connect to the Services; and

• Other third parties when permitted by law.

2. How We Use Personal Information

We may use personal information to:

• Provide, operate, maintain, and secure the Services;

• Create and administer accounts and customer relationships;

• Process transactions and manage subscriptions;

• Respond to inquiries and provide support;

• Diagnose technical issues;

• Authenticate users and manage permissions;

• Provide integrations and features requested by customers;

• Monitor performance, reliability, and security;

• Detect and prevent fraud, misuse, security incidents, and unlawful activity;

• Understand how our Website and Services are used;

• Improve and develop our products, Services, and customer experience;

• Communicate about product updates, security notices, and administrative matters;

• Send marketing communications, where permitted by law;

• Organize demonstrations, events, workshops, and webinars;

• Evaluate prospective customers, partners, vendors, and employees;

• Protect our legal rights and enforce our agreements;

• Comply with legal and regulatory obligations;

• Conduct corporate transactions; and

• Accomplish another purpose disclosed when the information is collected or with your consent.

Atomic does not use customer source code or private customer content to train general-purpose artificial-intelligence models unless the customer has expressly agreed to that use.

3. Cookies and Website Analytics

Atomic uses cookies and similar technologies for Website delivery, performance measurement, analytics, and marketing attribution.

Our current Website uses services including:

• Google Analytics 4, to understand Website traffic and usage;

• Attrifast, to measure referral sources, campaign attribution, and Website engagement; and

• Netlify, to host, deliver, secure, and monitor the performance of the Website.

Where required by law, we obtain consent before using nonessential cookies. You may manage your choices through the cookie-preference controls on our Website.

For more information, including the cookies currently used and their typical durations, please review our Cookie Policy.

4. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients:

Service Providers

We use service providers for hosting, cloud infrastructure, Website analytics, attribution, communications, security, customer support, payments, professional services, and business operations. These providers may process personal information only for the services they provide to Atomic and subject to appropriate contractual restrictions.

Your Organization

If you use the Services through an employer or another organization, authorized administrators may have access to account, usage, activity, provenance, and related information associated with that organization.

Integrations and Services You Select

If you connect Atomic to another platform or service, we may disclose information to that provider as necessary to establish and operate the integration. The third party’s use of information is governed by its own terms and privacy practices.

Professional Advisers

We may disclose information to lawyers, accountants, auditors, insurers, financial advisers, and other professional advisers when reasonably necessary.

Legal and Safety Disclosures

We may disclose personal information when we reasonably believe disclosure is necessary to:

• Comply with applicable law, regulation, legal process, or a valid governmental request;

• Protect the rights, property, or safety of Atomic, our users, or others;

• Investigate or prevent fraud, security incidents, or suspected wrongdoing;

• Enforce our agreements and policies; or

• Establish, exercise, or defend legal claims.

Business Transactions

Personal information may be disclosed or transferred in connection with a financing, merger, acquisition, reorganization, sale of assets, bankruptcy, or similar corporate transaction. Where required, we will provide notice before personal information becomes subject to a materially different privacy policy.

With Your Direction or Consent

We may disclose personal information for another purpose when you direct us to do so or provide consent.

5. Sales, Sharing, and Targeted Advertising

Atomic does not sell personal information for money.

We may disclose identifiers and Website-activity information to analytics or attribution providers. Depending on the technology used and the law that applies, certain disclosures may be considered “sharing,” “targeted advertising,” or a “sale” under some United States state privacy laws, even when no money is exchanged.

Where required, you may opt out through our Website’s privacy-preference controls or by contacting us using the information below. Atomic will also recognize browser-based opt-out preference signals, such as Global Privacy Control, where required by applicable law.

We do not knowingly sell or share the personal information of individuals under 16 years old.

6. Marketing Communications

We may send information about Atomic products, events, workshops, and company developments where permitted by law.

You can unsubscribe from marketing email at any time by selecting the unsubscribe link in the message or contacting us. Even if you unsubscribe from marketing, we may continue sending transactional, security, support, or other nonpromotional communications relating to your use of the Services.

7. Retention of Personal Information

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

• Provide and support the Services;

• Maintain customer and business relationships;

• Fulfill contractual commitments;

• Protect the security and integrity of the Services;

• Comply with legal, accounting, tax, and regulatory requirements;

• Resolve disputes; and

• Establish, exercise, or defend legal claims.

Retention periods depend on the type of information, the purpose for which it was collected, contractual requirements, customer instructions, and applicable law.

Customer content processed on behalf of an organization is retained and deleted according to the applicable agreement and the organization’s instructions. Some software-development records may form part of an immutable or cryptographically linked history. When individual modification is not technically possible without compromising that history, Atomic will address deletion or correction requests in accordance with the applicable agreement, technical requirements, and law.

Information may remain temporarily in secured backups until those backups are overwritten through normal retention cycles. When information is no longer required, we delete it, deidentify it, or aggregate it.

8. Security

Atomic uses reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

No system, storage method, or Internet transmission is completely secure. Therefore, we cannot guarantee absolute security.

If you believe your interaction with Atomic is no longer secure, please contact us promptly.

9. International Data Transfers

Atomic is based in the United States. We and our service providers may process personal information in the United States and other countries that may have privacy laws different from those in your country.

When required, we use recognized safeguards for international transfers, such as:

• Adequacy decisions;

• European Commission Standard Contractual Clauses;

• The UK International Data Transfer Agreement or UK Addendum; and

• Additional contractual, technical, and organizational safeguards.

You may contact us for more information about safeguards used for applicable international transfers.

10. Your Privacy Rights

Depending on where you live, you may have the right to:

• Know whether we process your personal information;

• Request access to personal information;

• Request correction of inaccurate information;

• Request deletion of personal information;

• Request restriction of processing;

• Object to certain processing;

• Obtain a portable copy of information;

• Opt out of the sale or sharing of personal information;

• Opt out of targeted advertising;

• Opt out of certain profiling;

• Withdraw consent without affecting processing performed before withdrawal; and

• Appeal a decision concerning a privacy request.

You may exercise applicable rights by contacting us using the information in the “Contact Us” section.

We may need to verify your identity before completing a request. You may also use an authorized agent where permitted by law. We will not discriminate against you for exercising a privacy right.

Some rights are subject to exceptions. For example, we may retain information when necessary to comply with law, complete a transaction, maintain security, or establish or defend legal claims.

11. Additional Information for Individuals in the EEA, United Kingdom, and Switzerland

If you are located in the European Economic Area, United Kingdom, or Switzerland, Atomic processes personal data under one or more of the following legal bases:

• Contract: Processing is necessary to enter into or perform a contract with you.

• Legitimate interests: Processing is necessary for our legitimate interests, such as operating, securing, improving, and promoting the Services, provided those interests are not overridden by your rights.

• Consent: You have consented to the processing, such as certain uses of cookies or marketing communications.

• Legal obligation: Processing is necessary to comply with a legal requirement.

• Protection of rights: Processing is necessary to establish, exercise, or defend legal claims or protect an individual’s vital interests.

You may lodge a complaint with the data-protection authority where you live or work or where you believe a violation occurred. UK residents may contact the UK Information Commissioner’s Office.

Atomic is not required to appoint an EU or UK representative or data-protection officer unless applicable law requires it. If such a representative or officer is appointed, we will publish the relevant contact information.

12. Additional Information for United States Residents

Depending on the state where you reside and whether the applicable law applies to Atomic, you may have additional rights described in Section 10.

During the preceding 12 months, Atomic may have collected the following categories of personal information:

Atomic does not use or disclose sensitive personal information to infer characteristics about individuals.

California residents may request information concerning:

• Categories and specific pieces of personal information collected;

• Sources of personal information;

• Business or commercial purposes for collection, use, or disclosure;

• Categories of recipients;

• Correction or deletion of personal information; and

• Applicable sales or sharing of personal information.

If Atomic denies an appealable privacy request, residents of states that provide an appeal right may appeal by replying to the denial or contacting us.

13. Children’s Privacy

The Services are intended for businesses and software professionals and are not directed to children under 16. Atomic does not knowingly collect personal information from children under 16.

If you believe a child has provided personal information to Atomic, please contact us so that we can take appropriate action.

14. Third-Party Websites and Services

Our Services may contain links to websites or services that Atomic does not operate. This Privacy Policy does not govern the privacy practices of those third parties.

We encourage you to review the privacy policy of any third-party website or service before providing personal information.

15. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes to our practices, Services, or legal obligations.

We will post the updated policy and revise the “Last updated” date. If a change materially affects how we use previously collected personal information, we will provide additional notice when required by law.

16. Contact Us

If you have questions about this Privacy Policy or wish to exercise a privacy right, contact:

Atomic Software, Inc.
Email: sales@atomic.dev

If your request concerns information Atomic processes on behalf of your employer or another Atomic customer, please contact that organization first.