Privacy policy

What we collect

• A hash of your access code — never the code itself. We cannot read it back to you.
• An optional email address, only if you attach one for recovery and notifications.
• Account records: balances, deposits, cards and transactions, needed to operate the service and reconcile the pooled custodial account.
• Standard server logs (IP address, request time) kept briefly for rate limiting and abuse prevention.

What we share

Card issuance and payment processing run through licensed partners, who receive the data needed to issue and operate your card (for example the cardholder name you set). We do not sell personal data, and we run no advertising trackers.

What we store locally

A single session cookie keeps you logged in. It contains a signed random identifier — no personal data — and is deleted when you log out or after 30 days.

How long we keep things

Account and transaction records are kept as long as your account is open, and as required by our processing partners and applicable law afterwards. Server logs roll over within weeks.

Your choices

You can attach or remove your recovery email in Settings at any time. Closing your account closes your cards and settles any remaining balance; records required by law are retained after that.

Contact

Privacy questions: hello@atmoscard.com.