Privacy

We’re Atlas, a product of Luminexa Studio. This page describes what we collect, how it’s used, and the guarantees we make about your data. We try to write it in plain language. If anything is unclear, email us at privacy@luminexa.tech.

What Atlas collects

• Account info: your email address, display name, and (if you signed up via Google) the avatar Google provides.
• Photos you upload: stored in private S3 buckets in AWS US-East-1. Only your account can access them.
• Photo metadata: EXIF data we read for location, time taken, and camera info. Used to drop pins on your globe.
• Trip details: stops, dates, notes, and attached documents you add to trips you create.
• Face vectors: AWS Rekognition computes a mathematical fingerprint of each face it detects so you can group photos by person. Vectors are stored in your private face collection and never shared across accounts.
• Operational logs: standard request logs (IP, user agent, timestamps) for debugging and abuse prevention. Retained 30 days then deleted.

What Atlas does not collect

• We do not sell or rent your data to anyone.
• We do not use your photos to train any AI model — ours or anyone else’s.
• We do not run third-party advertising or analytics trackers that profile users across the web.
• We do not read your photo content for any reason other than generating thumbnails, detecting faces (so you can find them later), and reverse-geocoding GPS pins.

Sharing

When you share an album, only the people you explicitly invite can view its photos. We don’t expose your library to search engines or public links unless you create one yourself. Revoking a share takes effect immediately.

Where your data lives

All photos and database rows live in AWS US-East-1 (Northern Virginia). We use Postgres (Neon Serverless) for metadata and S3 for photo bytes. CloudFront serves photos from edge locations close to viewers.

Your rights

• Export: two-click ZIP of all your photos at original resolution plus a JSON of your trips, tags, and notes. Available from your profile settings.
• Delete:delete your account anytime. Photos and metadata are removed within 30 days. Soft-deleted photos go to S3 Glacier first, then expire; we keep that 90-day window so “Recently Deleted” can recover anything you change your mind about.
• Correct: edit your name, email, location guesses, and photo captions at any time.

Cookies

Atlas uses one cookie to keep you signed in (the auth session token). We do not use third-party cookies and we do not run a cookie consent banner because we don’t collect anything that requires one.

Children

Atlas is not intended for children under 13. If you believe a child has created an Atlas account, please email us and we’ll delete it.

Changes

We’ll update this page when we add features or partners. Material changes will be sent to your account email at least 14 days before they take effect.

Contact

Questions, requests, or concerns? Email privacy@luminexa.tech.