Atlas 10 Contractor — Privacy Policy

Effective: June 29, 2026 · Last updated: August 14, 2026

Atlas 10 LLC, a Delaware limited liability company with its principal place of business at 3022 Roy Orr Blvd, Grand Prairie, TX 75050, United States (“Atlas 10”, “we”, “us”), is the controller of the personal data described here. We provide a contractor proposal and jobsite-management service via our web app (contractors.atlas10.com) and our iOS and Android mobile apps (collectively, the “Service”). This policy explains what we collect, why, who we share it with, and your choices.

1. Information you provide

• Account: name, email address, and a password. Accounts are created either by an invitation from an organization already using the Service, or after we approve a request for access — in both cases you set your own password from a link we email you. Authentication is handled by Google Firebase Authentication; your password is sent directly to Firebase and is never stored on our servers.
• Request for access: if you ask us for access from the sign-in screen, we store the name, email address, business name and any phone number or notes you submit, so we can contact you about it.
• Profile / membership: phone number (optional), job title, and role within a business.
• Your account identifier: when you sign in, Firebase issues an identifier for your account. Our apps send it with every request so we know which account is asking, and we store it alongside your profile. It is linked to you by design — that is what makes your data yours — and is never used for advertising or for tracking you across other companies’ apps or websites.
• Content you create: businesses, divisions, jobsites (including street addresses and GPS coordinates), projects, proposals, repair areas, bid items, and field photos (drone and ground photos). Photos may include the GPS location, altitude, and timestamp of where/when they were captured.
• Customer data you import: if you connect HubSpot, we import and store the contact and deal records you select — which may include your customers’ names, email addresses, phone numbers, and addresses, and their company details. See “Your responsibilities as a business user” below.

2. Information collected automatically

Standard server logs (IP address, request metadata, timestamps) for security and reliability. We do not use third-party advertising or cross-app tracking SDKs.

2a. Diagnostics, usage & performance data

We do not operate our own crash-reporting or product-analytics service. We do not collect crash logs or analytics about how you use the app for our own purposes.

Our maps provider does. The Mapbox SDK embedded in our mobile apps collects diagnostic, performance and usage data — including your device’s approximate and precise location, an identifier Mapbox generates, which map features you interact with, and performance metrics — and uses it both to provide the mapping itself and for Mapbox’s own analytics. Mapbox declares that this data is not linked to your identity and is not used for tracking you across other companies’ apps or websites. Mapbox’s own privacy policy governs what it does with that data.

If we later add our own crash-reporting or analytics SDK, we will update this policy, and the privacy disclosures in the App Store and Google Play listings, before any such collection begins.

3. Device permissions (mobile)

• Camera — to capture field photos. You can decline this in your OS settings; photo capture will be unavailable.
• Photo library — attaching existing photos uses your device’s system photo picker, which shares only the photos you select. The app never requests or receives access to your full photo library, so there is no permission to grant or decline.
• Location (“when in use”) — to show your position on the field map and to tag field photos. You can decline this in your OS settings; some features will be unavailable.

4. How we use information

To create and operate your account; provide the Service; store and display your content; send transactional emails (verification, invitations); render maps and geocode addresses; secure the Service; and comply with law.

5. Third parties who process data on our behalf (sub-processors)

We do not sell personal information and do not share it for advertising.

6. Where data is stored

Primary storage is Amazon Web Services in the United States (region us-east-2). If you access the Service from outside the U.S., you consent to processing in the U.S.

7. Security

Data is encrypted in transit (HTTPS). Stored HubSpot OAuth tokens are encrypted at rest (AES-256-GCM). Photo files are served via short-lived presigned URLs. No system is perfectly secure, but we take reasonable measures to protect your data.

8. Retention and deleting your account

We retain your data while your account is active and as needed to provide the Service or meet legal obligations.

You can permanently delete your account from within the app at any time — on mobile under Profile → Delete Account, and on the web under Settings → Profile. No request or email to us is required.

When you delete your account we immediately and permanently remove your profile — your name, email address, phone number and profile photo — along with any third-party integration credentials you connected through us, such as your HubSpot authorization. Your sign-in credentials are deleted from our authentication provider, so you will not be able to sign in again. Deletion cannot be undone, and rejoining requires a new invitation from your organization.

Work product created in the app — proposals, jobsites, photos, repair areas and the organization’s activity history — belongs to the organization that subscribes to the Service, not to the individual user, and is retained by that organization after you leave. Jobsites you managed become unassigned rather than being deleted. Where such a record names you as the person who prepared a document, or records an action you took, that name is retained as part of the organization’s business and audit records.

If you are the only administrator of your organization, deleting your account also closes the organization, because it cannot be left without an administrator. The app will ask you to confirm this by typing your organization’s name. When an organization is closed:

• Every other member loses access to it immediately. Their own accounts and sign-ins are not deleted — they keep them, and can delete them themselves at any time in the same way.
• The organization’s work product — proposals, jobsites, photos and repair areas — becomes permanently inaccessible to everyone, and closing an organization cannot be reversed. As with the rest of the Service, closed records are held in our systems under the retention practices described in this section rather than being immediately destroyed; see “Your rights” below to request erasure.

9. Your rights

Depending on your location (e.g., GDPR/UK GDPR, CCPA/CPRA), you may have rights to access, correct, delete, or export your personal data, and to object to certain processing. You can correct your profile and delete your account yourself from within the app (see Retention above). For anything else, email development@atlas10.com.

10. Your responsibilities as a business user

The Service lets you upload information about your own clients and customers (including via HubSpot). For that data, you are the data controller and we act as your processor. You represent that you have a lawful basis and any required consent to upload it, and you are responsible for honoring your customers’ privacy rights. A Data Processing Addendum is available on request.

11. Children

The Service is a business tool not directed to children and is intended for users 18+. We do not knowingly collect data from children.

12. Changes

We may update this policy; we will revise the “Last updated” date and, for material changes, provide notice in the app.

13. Contact

Atlas 10 LLC
3022 Roy Orr Blvd
Grand Prairie, TX 75050
United States
development@atlas10.com