Privacy Policy
Last updated: April 13, 2026
1. Who We Are
Atlas Suite ("we", "us", "our") operates the hospitality management platform at atlassuite.app. We provide hotel property management, revenue management, CRM, and distribution services to hotel operators ("Customers").
Contact: [email protected]
2. Data We Collect
Account Data
When you create an Atlas Suite account: name, email address, phone number, hotel property details, and billing information.
Operational Data
Data processed on behalf of our Customers: guest reservations, room availability, pricing, housekeeping tasks, and financial transactions. This data belongs to the Customer; Atlas Suite processes it as a data processor.
Analytics Data
Website usage: page views, click events, session identifiers, browser type, IP address (anonymized), referrer URL, and UTM parameters. We use Google Analytics 4 and our own analytics system.
Cookies
We use essential cookies for authentication and optional analytics cookies subject to your consent preferences.
3. How We Use Your Data
- Providing and maintaining the Atlas Suite platform
- Processing hotel reservations and guest communications
- Generating analytics and revenue management recommendations
- Sending transactional emails (booking confirmations, invoices)
- Improving our services through aggregated, anonymized analytics
- Complying with legal obligations
4. Data Sharing
We do not sell personal data. We share data only with:
- Sub-processors: Cloudflare (hosting, CDN), Supabase (database), Resend (transactional email), Google (analytics)
- Payment providers: As selected by the Customer
- Legal requirements: When required by law or valid legal process
5. Data Transfers
Data may be transferred to and processed in countries outside your jurisdiction, including Turkey, the European Union, and the United States. We ensure appropriate safeguards are in place, including standard contractual clauses where applicable.
6. Your Rights
Under KVKK (Turkish Data Protection Law)
Turkish citizens have the right to: learn whether personal data is processed, request information about processing, learn the purpose of processing, know third parties to whom data is transferred, request correction of incomplete or inaccurate data, request deletion or destruction, and object to automated processing.
Under GDPR (EU/EEA residents)
You have the right to: access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent.
To exercise these rights, contact us at [email protected].
7. Data Retention
Account data: retained while your account is active, deleted within 30 days of account closure. Operational data: retained according to Customer instructions and applicable legal requirements. Analytics data: retained for 26 months, then automatically deleted.
8. Children's Data
Atlas Suite is not directed at children under 18. We do not knowingly collect personal data from children.
9. Security
We implement industry-standard security measures including encryption in transit (TLS 1.3), encryption at rest (AES-256), row-level security (RLS) for multi-tenant data isolation, and regular security reviews.
10. Changes
We may update this policy from time to time. Material changes will be notified via email or platform notification at least 30 days before they take effect.