Privacy Policy

Last updated: February 8, 2026

1. Introduction

Surpreme LLC ("we," "us," "our") operates Atlas, an AI website builder at atlas.surpreme.com. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service. We are committed to protecting your privacy and handling your data responsibly.

2. Information We Collect

Information you provide directly:

• Account information: name, email address, phone number
• Business information: business name, address, industry, services, hours, pricing details you input for website generation
• Payment information: processed securely through Stripe — we never store full credit card numbers on our servers
• Website content: text, images, logos, and other content you provide or upload
• Communications: messages you send us via email or support channels

Information collected automatically:

• Device and browser information: IP address, browser type, operating system, device type
• Usage data: pages visited, features used, session duration, click patterns
• Analytics data: collected via Google Analytics 4 (GA4) to understand how our Service is used
• Log data: server logs including access times, error logs, and request data

3. How We Use Your Information

We use your information to:

• Create and deliver your AI-generated website
• Process payments and manage your subscription
• Provide customer support and respond to inquiries
• Send transactional emails (payment confirmations, trial reminders, account updates)
• Improve our Service, AI models, and user experience
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

We do not sell your personal information to third parties. We do not use your business content to train AI models used by other customers.

4. Information Sharing

We share your information only in these circumstances:

• Payment processing: Stripe receives payment details to process your subscription
• Domain registration: Domain registrars receive necessary contact information for WHOIS records (with privacy protection where available)
• Analytics: Google Analytics receives anonymized usage data
• Email delivery: Our email service provider (SMTP2GO) processes transactional emails
• Hosting infrastructure: Google Cloud Platform hosts our servers and your website data
• Legal requirements: When required by law, court order, or government request
• Business transfers: In connection with a merger, acquisition, or sale of assets

5. Data Security

We implement reasonable security measures to protect your information, including:

• HTTPS encryption for all data in transit
• Encrypted database connections
• Regular security updates and monitoring
• Access controls limiting who can view your data
• Intrusion detection and prevention systems

No system is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security of your data.

6. Cookies & Tracking

We use cookies and similar technologies for:

• Essential cookies: Session management, authentication, and security
• Analytics cookies: Google Analytics 4 to understand usage patterns (you can opt out via Google's browser plugin)
• Functional cookies: Remembering your preferences and settings

We do not use third-party advertising cookies or retargeting pixels on our own platform. Your browser settings can control cookie behavior.

7. Your Rights

Depending on your location, you may have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data (subject to legal retention requirements)
• Portability: Request your data in a machine-readable format
• Opt-out: Unsubscribe from marketing emails (transactional emails cannot be opted out while your account is active)
• Restriction: Request we limit how we use your data

To exercise any of these rights, contact us at privacy@surpreme.com. We will respond within 30 days.

8. Data Retention

We retain your data for as long as your account is active. After cancellation:

• Account and website data: retained for 90 days, then permanently deleted
• Payment records: retained as required by law (typically 7 years for tax purposes)
• Server logs: retained for 90 days for security and debugging
• Analytics data: retained per Google Analytics default settings

You may request earlier deletion by contacting us.

9. Children's Privacy

Atlas is not intended for use by anyone under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete it promptly. If you believe a child has provided us with personal information, contact us at privacy@surpreme.com.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect and how it is used
• Right to delete your personal information
• Right to opt out of the sale of your personal information — we do not sell your data
• Right to non-discrimination for exercising your privacy rights

11. International Users

Atlas is operated from the United States. If you access the Service from outside the US, your data will be transferred to and processed in the United States. By using Atlas, you consent to this transfer. We take steps to ensure your data receives adequate protection regardless of where it is processed.

12. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or through the Service. The "Last updated" date at the top reflects the most recent revision.

13. Contact Us

For privacy-related questions or requests:
Surpreme LLC
Email: privacy@surpreme.com
Website: atlas.surpreme.com