Legal
Effective date: September 20, 2026
This policy explains what we collect, why we collect it, and how we handle it. We keep this simple. If you have questions, email atom@atomiclabs.tech.
Atomic Labs provides managed AI assistant services, custom automation, technical implementation, and related support for businesses and professionals.
This Privacy Policy applies to the Atomic Labs website, sales and onboarding communications, and the services we provide directly to prospects and clients. It covers information we collect from you, about you, or on your behalf in connection with operating our business and delivering our services.
For information received through Google APIs, the specific commitments in section 9A take precedence over broader statements elsewhere in this policy or our service agreements about use, sharing, service improvement, retention, or third-party responsibility.
Depending on how you interact with us, we may collect:
We collect information directly from you, automatically through website and service usage, from third-party services you connect or authorize, from payment and scheduling providers, and from business partners or representatives acting on your behalf.
We use information to:
Where applicable, we process personal information because it is necessary to perform a contract, respond to a request you made, pursue legitimate business interests, comply with legal obligations, protect our rights and security, or because you gave consent.
We do not sell your personal information. We may share information with:
When we provide services to clients, we may process data on the client's behalf. In many cases, Atomic Labs acts as a service provider or processor, and the client controls what data is submitted, which accounts are connected, and how the service is used. We treat client business information as confidential and use it only as needed to provide, secure, maintain, and support the services, subject to our agreements and applicable law.
If you authorize integrations with third-party tools such as email, chat, CRM, scheduling, analytics, advertising, payment, cloud, or other business systems, we may access, retrieve, store, process, transform, transmit, or display data from those systems as needed to provide the service. You are responsible for ensuring you have the authority to connect those accounts and share that data with us.
Atomic Labs connects Google accounts to provide requested assistant, productivity, administration, and reporting features. Connecting an account does not authorize unrelated access or use. We request only permissions needed for the features you enable, explain the data use when access is requested, and obtain the authorization and consent required for that connection. Some business connections use administrator-approved Google Workspace domain-wide delegation rather than an individual OAuth consent screen.
The data we access depends on the connected service, granted permissions, and task you request. Relevant categories include:
Not every integration is enabled for every client. API permission alone does not authorize sending a message, editing a file, changing an account, or launching a campaign; those actions remain subject to the workflows you approve.
Relevant Google data may be processed on the device or server running your assistant and by providers supporting the requested feature. We may retain account and connection records, retrieved content or excerpts, task history, logs, generated reports, summaries, and saved assistant context when needed for that feature. This means a copy can remain outside Google after a task ends. Retention and deletion are described below and in our Google deletion instructions.
Where a requested AI feature requires it and you consent, relevant content may be sent to an AI inference provider to generate an answer, summary, draft, or other requested output. Hosting, storage, communications, and integration providers may also process the data needed for that feature. We limit those transfers to the disclosed user-facing purpose and the applicable Google requirements; a provider's general terms do not expand the uses we permit. We remain responsible for compliance by our employees, agents, contractors, and successors.
Atomic Labs' use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its applicable Limited Use requirements. Information received through Google Workspace APIs will also adhere to the Google Workspace API User Data and Developer Policy.
For Google Workspace data and other Google data subject to Limited Use, these restrictions cover raw data and information derived from it, including summaries, aggregated information, and saved context:
You can remove an individual connection through your Google Account's linked-app settings. An administrator must remove or restrict a domain-wide delegated connection through the Workspace Admin console. Revocation stops access under that authorization but does not itself erase copies already retained. See our Data Deletion Instructions to request removal of those copies.
Before accessing an additional type of Google user data or using Google user data for a purpose not previously disclosed, we will explain the change and obtain the authorization and affirmative consent required by Google's policies before the new access or use begins. Continued use of our website or services is not a substitute for that consent.
If you authorize a Meta or Facebook connection, we may access and process account, ad account, campaign, ad set, ad, creative, reporting, performance, audience, and related business data made available through Meta APIs and permissions. We use that data only to provide, maintain, secure, analyze, automate, troubleshoot, report on, and improve the services you request. We do not sell Meta platform data.
We may use cookies, pixels, local storage, and similar technologies to understand how the website is used, keep the site secure, remember settings, and improve performance. Third-party tools embedded on the site, such as scheduling, video, analytics, and hosting services, may also place cookies or collect usage data under their own policies.
Our public website uses the Google tag for advertising measurement. Website-visit measurements are separate from data accessed through connected Google accounts. We do not send Google Workspace message or file contents to advertising tags. See how Google uses information from sites that use its services for information about Google's processing and available controls.
We retain information for as long as reasonably necessary to provide services, operate the business, maintain security, comply with legal obligations, resolve disputes, enforce agreements, and keep appropriate business and accounting records. Retention periods vary based on the type of information and the purpose for which it was collected.
After a service ends, we may delete, return, or de-identify client data, except where retention is reasonably necessary for backups, fraud prevention, security investigations, legal compliance, financial recordkeeping, dispute resolution, or enforcement of our agreements.
For Google data, we retain connection credentials only while needed for authorized access, and retrieved content, saved context, and derived outputs only while needed for the disclosed feature or an applicable, permitted retention requirement. We honor verified deletion requests. Revocation and deletion are distinct: removing a Google connection does not automatically remove saved reports, conversation history, or other retained copies. Deletion includes those copies and relevant derived records within our control, subject to narrow legal or necessary security exceptions. Backup copies, where present, are removed through the applicable backup deletion or rotation process and are not used to continue the disconnected feature. We will explain any remaining backup schedule or specific retention exception when responding to a request. De-identification is not a way to avoid Google's Limited Use restrictions.
If you want us to delete data associated with a connected third-party platform, including Google, Meta, or Facebook data, you can submit a request by contacting atom@atomiclabs.tech or visiting our Data Deletion Instructions page.
We use reasonable technical and organizational safeguards designed to protect information, which may include access controls, account permissions, authentication measures, logging, environment separation, managed infrastructure protections, and operational security practices appropriate to the nature of the service. That said, no method of transmission, storage, or security control is perfect, and we cannot guarantee absolute security.
If you access our services from outside the United States, your information may be transferred to and processed in the United States or other countries where we or our service providers operate. Those countries may have data protection laws that differ from those in your jurisdiction.
Depending on where you live, you may have rights to access, correct, delete, or restrict use of your personal information, or to object to certain processing. You may also have rights related to portability, withdrawal of consent, or appeal of a privacy decision. To make a request, contact atom@atomiclabs.tech. We may need to verify your identity before responding.
If you are a California resident, you may have additional rights under California law regarding access to, deletion of, and correction of personal information, subject to exceptions. We do not sell or share personal information for cross-context behavioral advertising as those terms are commonly used under California privacy law.
Our website and services are not directed to children under 13, and we do not knowingly collect personal information from children under 13.
Our website or services may link to or rely on third-party sites, applications, and services. Independent sites you visit operate under their own policies. Review those policies before using them. This does not remove our responsibility for data we disclose to our service providers or our obligations under the Google-data commitments in section 9A.
We may update this Privacy Policy from time to time. When we do, we will update the effective date on this page and provide any notice required by law. New access to or use of Google user data requires the disclosure, authorization, and consent described in section 9A before that access or use begins. Continued use does not supply that consent.
If you have questions about this Privacy Policy or how we handle data, contact atom@atomiclabs.tech.