Privacy policy.
Plain English. No tricks. We collect the minimum we need to deliver what you bought and tell you when new bibles drop.
Last updated: 27 April 2026.
1. Who we are
Atlas Prompts ("we", "us", "our") is a UK-based publisher of digital products. For the purposes of UK GDPR and the Data Protection Act 2018, we are the data controller for personal data collected through atlasprompts.ai. You can reach our privacy contact at hello@atlasprompts.ai.
2. What we collect
- Email address — when you subscribe to the newsletter, request the free model, or contact us.
- Name & purchase details — when you buy a bible. Payment is processed by Gumroad/Stripe; we do not store card numbers.
- Basic analytics — anonymous, aggregated visit data (page views, referrer, country). No cross-site tracking, no advertising pixels.
- Support correspondence — the contents of any email you send us.
3. Why we use it
- To deliver the product you purchased (legitimate interest / contract).
- To send the newsletter or free model you signed up for (consent).
- To answer your support emails (legitimate interest).
- To improve the site and detect abuse (legitimate interest).
4. Who we share it with
We share data only with the processors we need to run the business:
- Gumroad / Stripe — payment processing and product delivery.
- Email service provider — newsletter and transactional email.
- Hosting provider — to serve the website.
We do not sell your data. Ever. We do not share it with advertisers.
5. How long we keep it
- Email subscribers: until you unsubscribe.
- Customers: for as long as needed to fulfil tax obligations (typically 6 years in the UK).
- Support emails: 24 months after the last reply.
6. Your rights
Under UK GDPR you have the right to: access your data, correct it, delete it, restrict processing, object to processing, port it, and withdraw consent at any time. To exercise any of these, email hello@atlasprompts.ai. We respond within one working day and complete most requests within 30 days.
You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk).
7. Cookies
We use a single first-party cookie to remember basic preferences (e.g. that you've dismissed a banner). We do not use advertising or cross-site tracking cookies. If we ever add analytics that are non-essential, we will ask for consent first.
8. International transfers
Some of our processors (e.g. Gumroad, Stripe) are based outside the UK. Where data leaves the UK, transfers are protected by standard contractual clauses or equivalent safeguards.
9. Security
We use HTTPS site-wide, strong passwords, two-factor authentication on every admin account, and the principle of least privilege for staff access. No system is perfectly secure — if we ever discover a breach affecting you, we will notify you within 72 hours, as required.
10. Changes to this policy
If we change this policy, we update the "last updated" date at the top. Material changes will also be announced by email to subscribers and customers.