Privacy Policy
Last updated 25 September 2026
Who is responsible
ISP Atlas is a trade name of matan works, registered in the Netherlands. We are the controller of the personal data described here. Contact: info@ispatlas.com.
What we collect and why
- Account: your email address and a hashed password, to give you access to your account.
- Usage: a short description of each search (for example product, speed and location) and the credits used, to count your credits and show your recent searches.
- Billing: name, billing address, VAT number and payment details are collected and stored by Stripe. We receive a customer reference and your subscription status.
- Session cookie: one strictly necessary cookie that keeps you signed in. We do not use tracking or advertising cookies.
The legal basis is the performance of our contract with you, and our legal duty to keep financial records.
What we do not collect
We do not receive your conversations with Claude, ChatGPT or other assistants. We only receive the questions the assistant sends to ISP Atlas.
Who processes data for us
- Railway: hosting and database, in the EU (Amsterdam region).
- Stripe: payments, invoices and VAT.
- Google Workspace: our mailbox.
- Resend: sending account emails such as password resets and notifications, from the EU (Ireland).
- Firecrawl: fetching public web pages and web search results. We send search terms and page addresses, not your personal data.
Some of these companies are based in the United States. Where data leaves the EU, they use the safeguards required by the GDPR, such as standard contractual clauses.
How long we keep it
Account and usage data are kept while your account exists and are deleted when you delete your account. Invoices and payment records are kept for 7 years because Dutch tax law requires this.
Your rights
You can ask to see, correct, export or delete your data, or object to how we use it. Email info@ispatlas.com; we reply within one month. You can also delete your account yourself in the dashboard. You may complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
