1. What Information We Collect and How

We collect information from the point that you access the website, and throughout your continued use of the Services through all points of your interaction with us. We may also collect information about you from our business partners, including referral partners and resellers, and third parties that help us with sales and marketing efforts.

a. Your Content

"Content" includes all information, data, and other content, in any form or medium, that is collected, downloaded, or otherwise received, directly or indirectly, from you (or on your behalf) by or through use of the Services. You own and control the nature of Your Content, subject to any restrictions in our Terms of Service.

b. Customer Information

"Customer Information" consists of information related to your access or use of our Services, the creation of accounts, or that otherwise identifies you as a customer or end user of the Services. Customer Information includes:

• Personal Identifiers. This includes your name, mailing address, email address, postal code, telephone number, and other similar identifiers.
• Customer Identifiers. This includes username and password, payment information, company name, job title, business email address, and department.
• Protected Characteristics. This includes age and gender.
• Analytics. This includes information about products or services purchased, obtained or considered, browsing history, log and analytics data, information about the device(s) used to access the Services, IP address, domain server, search history and information regarding your interaction with our Services, and other usage data.

c. Automatically Collected Information

We collect information about how you use the Services and your actions on the Services, including your IP addresses, browser types, operating systems, ISPs, platform types, device types, and mobile device identifiers such as make and model, and mobile carrier. We may also use tools, including third-party tools, to collect analytics data. Some of this information is collected through the use of cookies and other tracking technologies, such as web beacons, pixels, session replay scripts, and similar technologies.

2. How We Use the Information We Collect

a. Your Content

a.1 Use of Your Content

Notwithstanding anything to the contrary in this Privacy Policy, we will not use or access your Content except: to provide, maintain, improve, or optimize use of the Services; where you (or the organization through which you have an account) explicitly approve access; in response to lawful requests by law enforcement or government authorities; where necessary to ensure the stability and security of the Services; and where necessary to protect the rights, privacy, safety, or property of you, us, or others.

a.2 Managing Your Content

You may access, correct, amend, or delete Content within the Services. You own all Content you upload provided you have lawful title thereto. Content you delete may be retained in archived or backup copies in order to enable you to use certain features. You may request to permanently delete your Content from ATLAS by contacting us at support@graphiteatlas.com.

b. Other Information

b.1 Use of and Disclosure of Other Information

We may use and disclose the information that we collect for a variety of purposes, depending upon how you use the Services:

Customer Service

We may use your information to respond to requests or inquiries, provide customer support or technical assistance, provide updates on products, or create, manage, or administer your account. We may disclose your information to our affiliates and vendors in the context of rendering customer support.

Marketing

We may use your information to provide information about products you may be interested in, monitor the performance of our advertisements and marketing efforts, communicate with you about your engagement with our Services, or measure interest in and engagement with our Services. We may disclose your information to vendors that help us with marketing and email campaigns.

Providing and Improving our Services

We may use your information to derive market insights, improve the Services, perform business analysis or research, product customization, secure the Services and our systems, detect security incidents and protect against malicious, deceptive, fraudulent, or illegal activity. We may disclose your information to vendors that help us provide you with aspects of the Services, such as data storage, hosting, and payment processing.

Legal

We may use your information for auditing, establishing or defending legal claims, complying with applicable laws or responding to lawful requests, protecting our rights and property, detecting or preventing fraud, or reducing credit risk. We may disclose your information as necessary to comply with applicable law, including governmental requests and law enforcement requests.

b.2 Managing Other Information

If you wish to stop receiving communications or to opt out of use of your information for marketing purposes, please click "Unsubscribe" in those communications. You may also contact us at support@graphiteatlas.com to opt out.

3. Retention of Information

We store your personal information for no longer than necessary for the purposes for which it was collected, including for the purposes of satisfying any legal or reporting requirements, and in accordance with our legal obligations and legitimate business interests.

4. Information from Children

Our Services are not intended for use by children under the age of 18 and we do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will take reasonable steps to delete such information from our files as soon as is practicable. If you learn that your child has provided us with personal information without your consent, you may contact us at support@graphiteatlas.com.

5. Changes to Privacy Policy

Any information that we collect is subject to the Privacy Policy in effect at the time such information is collected. We may, however, revise the Privacy Policy from time to time. The current version will always be posted to our Privacy Policy page.

6. Contact Us

If you have any questions about our privacy practices, including this policy, you may contact us at support@graphiteatlas.com. If you wish to exercise any of your rights under the country and state specific privacy regimes listed below, please send us an email with your name, location, and Organization.

7. State and Country Specific Disclosures

By virtue of your residence in a specific country or state you may have additional privacy protections and rights based on enacted legislation. Please note that if the exercise of certain rights may limit our ability to process personal information, we may no longer be able to provide you our Services or engage with you in the same manner.

7.1 EEA, UK, Swiss-Specific Disclosures

Residents of the European Economic Area, Switzerland, and the United Kingdom have rights under the General Data Protection Regulation ("GDPR"). Such rights include: (i) right of access; (ii) right of portability; (iii) right to rectification; (iv) right to erasure; (v) right to restriction; (vi) right to withdraw consent; and (vii) right to object. You also have the right to lodge a complaint to your local data protection authority.

7.2 California-Specific Disclosures

Residents of the State of California have rights with regards to their data as included in the California Consumer Privacy Act of 2018, as amended ("CCPA"). Under the CCPA as a California resident, you may be able to exercise the following rights:

• The right to know any or all information relating to your personal information we have collected and disclosed in the last 12 months
• The right to request deletion of personal information we have collected from you, subject to certain exceptions
• The right to request correction of inaccurate personal information
• The right to opt out of sales of personal information or sharing to third parties

7.3 Disclosures to Residents of Other U.S. States

Individual residents of Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia have certain rights with respect to their personal data:

• Right to Access. You have the right to access and obtain a copy of your personal data.
• Right to Request Deletion. You have the right to request that we delete personal data provided by or obtained about you.
• Right to Correct. You have the right to correct inaccuracies in your personal data. (Note: This right does not apply to residents of Iowa and Utah.)
• Right to Opt-Out. You may ask us not to use or disclose your personal data for targeted advertising or analytics purposes.
• Right to Appeal. You may appeal a refusal to take action on a request by contacting us. (Note: This right does not apply to residents of Utah.)

7.4 Canada-Specific Disclosures

If you live in Canada, you have the following rights:

• Right to Access. You can ask us to: (i) confirm that we have personal information about you, and (ii) provide you a copy of that information.
• Right to Correct. You can ask us to correct any inaccurate or incomplete personal information that we have about you.