We built Atlora so your documents work for you and no one else. We don't sell your information, we don't share it for marketing, and every third-party provider in our pipeline operates under a Zero Data Retention agreement.
Effective June 6, 2026
Atlora is a Retrieval-Augmented Generation platform. You upload documents, we index them, and you ask questions grounded in your own content. To do that we collect only what the service needs to function — and we treat it as yours, not ours to monetize.
We do not sell your personal information. We do not share it with third parties for their own marketing. We do not use your uploaded documents to train AI models. This policy explains, in plain language, what we collect, how we use it, and the choices you have.
We use the information we collect for a narrow set of purposes:
We do not use your documents, questions, or answers to train machine-learning models — ours or anyone else's.
We do not sell your personal information, and we do not share it with third parties for their own purposes. The only parties who ever touch your data are the service providers we rely on to run Atlora — and only to the extent needed to deliver the service to you. We may disclose information if we are legally required to do so, and we will limit any such disclosure to what the law requires.
Delivering grounded answers means routing some content through third-party infrastructure and AI providers. We hold every such provider to the same standard:
Every third-party AI and infrastructure provider we use operates under a Zero Data Retention (ZDR) agreement. Your content is processed transiently to produce a result and is not retained by the provider, not logged for their own use, and never used to train their models.
We use these providers only as processors acting on our instructions, never as independent controllers of your data. When we add or change a provider, the same Zero Data Retention requirement applies before any of your content can reach it.
Your data is encrypted in transit and at rest, isolated per tenant, and reached only through short-lived credentials inside hardened, owned infrastructure. Security is engineered into every layer of the platform — you can read the full breakdown on our security page.
We retain your content for as long as your account is active, so the service works as you expect. You can delete documents and collections at any time, and deleting them removes the derived chunks and embeddings as well.
When you close your account, we delete your content within a commercially reasonable period, except where we are legally required to retain certain records. Routine operational backups are cycled out on a rolling basis.
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can exercise most of these directly in the app, or reach out to us and we'll help. We won't discriminate against you for exercising any of these rights.
We may update this policy as the service evolves. When we make material changes, we'll update the effective date above and, where appropriate, notify you. Your continued use of Atlora after an update means you accept the revised policy.
If you have any questions about this policy or how we handle your data, email us at [email protected] and we'll get back to you.