Last updated July 5, 2026. We update this page as Atlas grows; changes that matter are announced in the product.
Atlas VMS ("Atlas") is operated by Finlay Consulting Group, based in Ontario, Canada. This policy explains what information Atlas collects, why, and what your choices are. Questions go to jonathan.m.finlay@gmail.com.
Atlas shows businesses what each of their vendors really earns or costs them. You put in your vendor and client information, or connect systems that already hold it, and Atlas does the math.
Your account. Your name and email address, handled by our sign-in provider, Clerk. We do not see or store your password.
Your business data. What you enter into Atlas: vendors, costs, charges, client counts, notes, renewal dates, and documents you upload, for example contracts and invoices.
Your clients' details. If you add client records, they can include a client's name, business name, email, and phone number. You are responsible for having the right to put that information into Atlas. We use it only to run Atlas for you, and we never contact your clients.
Data from systems you connect. If you connect QuickBooks, Atlas reads vendor spending from your books. Reading is all it ever does; Atlas never writes to your books. If you connect HubSpot, Atlas reads company names and domains, and only ever creates a record there when you explicitly click to publish one. You can disconnect either at any time and your figures stay in Atlas, editable by hand.
Technical basics. Sign-in session cookies, which Atlas needs to work, and standard server logs that include IP addresses. Atlas has no advertising trackers and no third-party analytics.
• To run Atlas: compute your numbers, show your dashboard, and keep your organization's members in sync.
• To generate reports you ask for. See the AI section below.
• To keep an audit trail of actions in your organization, so changes are accountable.
• To secure the service and to help you if you ask for support.
We do not sell your information. We do not show ads. We do not use your data to market to your clients.
When you click to generate a vendor report, Atlas sends that vendor's figures to Anthropic, a US company, whose AI writes the plain-language analysis. Anthropic's API terms state that data sent this way is not used to train their models. The report is stored in your Atlas organization so you do not pay to regenerate it.
If you turn on renewal deadline emails in Settings, Atlas sends you a short reminder when an agreement or cancellation window is coming up. Each turn-on and turn-off is recorded with its date, every email has a one-click unsubscribe that takes effect immediately, and these emails only ever go to you, never to your clients.
If the owner or an admin turns on benchmark sharing in Settings, Atlas adds anonymous figures to industry medians: cost per client, revenue per client, and margin percentage, grouped by vendor billing type and your industry. What never goes in: your company name, vendor names, client names, or any dollar totals. Your company is replaced by a scrambled code that cannot be traced back. Nobody sees any median until at least 20 companies in an industry take part. Turn sharing off and your entries are removed the same day.
Atlas's database and your uploaded documents are stored in Canada. Some of the companies that help run Atlas process data in the United States:
• Supabase: database and document storage. All Atlas data you enter or connect. Canada (ca-central-1).
• Vercel: runs the Atlas application. Data passing through the app while you use it. United States.
• Clerk: sign-in and accounts. Your name, email, and session. United States.
• Anthropic: writes the AI vendor reports you request. The vendor figures sent for that one report. United States.
• Intuit (QuickBooks): only if you connect it. Vendor spending from your QuickBooks file. United States.
• HubSpot: only if you connect it. Company names and domains from your CRM. United States.
• Resend: delivers the notification emails you choose to receive. Your email address and the deadline lines in each message. United States.
• Google Fonts: delivers the typeface. Your device's IP address when fonts load. United States.
We add or change providers only for running Atlas, and this list stays current on this page.
Atlas can give you a calendar feed of renewal dates. That feed link contains a private code. Anyone who has the link can see the renewal dates in it, so treat the link like a password. Contact us if you need it changed.
Your data stays as long as your organization is active. Deleting a vendor or client removes it from your working data. Owners can clear an organization's vendor and client data from Settings. To delete your account or your whole organization, contact us and we complete it within 30 days. Disconnecting QuickBooks or HubSpot deletes the stored connection tokens right away. Benchmark entries are deleted the same day you turn sharing off.
Connections to Atlas are encrypted in transit. Data is encrypted at rest. The keys that connect to your QuickBooks or HubSpot are additionally encrypted at the application level. Access inside Atlas is role-based, organizations are isolated from each other, and actions are recorded in an audit trail.
You can see and correct almost everything Atlas holds about you directly in the product. You can ask us for a copy of your information, ask us to correct it, or ask us to delete it. Canadian privacy law (PIPEDA) applies, and you can complain to the Office of the Privacy Commissioner of Canada.
Atlas is a business tool and is not for anyone under 18.
If we change this policy in a way that matters, we tell you in the product or by email before the change takes effect.
Finlay Consulting Group, Ontario, Canada · jonathan.m.finlay@gmail.com · Privacy · Terms