What the product stores
When you sign in with Google, Inward Atlas receives the account identifiers and basic profile details Google makes available for authentication, such as your name, email address and profile image.
The cloud account stores completed report outputs, optional report-quality ratings, usage-credit assignment and consumption, referral status and credit-ledger entries, and subscription state. A quality rating contains only whether the expansion helped and, if selected, one predefined reason; it has no free-text field. Item-level assessment answers are not included in the cloud report record.
Data that can stay on your device
The saved-results library can use browser storage. Optional in-progress assessment resume data uses session storage. Data in these browser stores remains on that browser unless you explicitly use an available cloud feature.
Service providers
- Google provides the identity information used for sign-in.
- Supabase provides authentication sessions, the hosted database and account-linked report storage.
- Dodo Payments processes checkout and payment lifecycle data. Inward Atlas does not receive your full payment-card details.
- When AI-assisted report expansion is enabled, DeepSeek receives a minimized report-facts package containing the assessment identifier, evidence level, result shorthand, dimension scores and fixed methodological limits. It does not receive your name, email address, Google identifier, profile image, Supabase user ID or item-level assessment answers. The accepted generated narrative and its model/version metadata are saved with your private cloud report.
- Privacy-reviewed analytics may be enabled later. Assessment answers, report text and personal scores are excluded from the implemented analytics event contract.
AI-assisted report expansion
Scoring is performed by deterministic Inward Atlas code before any AI request. The model is used only to expand the language around stored report facts and is not permitted to change scores, calculate a diagnosis or invent population comparisons. Generated output is structurally validated before it is saved.
The original scored report remains available when AI expansion is disabled, unavailable or rejected by validation. Reopening or printing a completed expansion uses the saved version and does not silently send the report to the model again.
Invitations and referrals
An invite link contains a random referral code, not your email address or assessment result. When someone opens it, a strictly necessary referral cookie can remain for up to 30 days so a new-account registration can be attributed. The inviter sees aggregate pending and completed counts, not the invitee's identity, email address or report.
A reward is issued only after the invited new account completes its first valid assessment. Registration or sign-in alone does not trigger a reward. Self-referrals, duplicate attribution, existing accounts and abusive activity do not qualify.
Data retention
Assessment reports and their linked quality ratings are retained until you delete the report individually or delete your account. Payment transaction records are retained without their application-account link when required by applicable tax and financial-reporting law. If your completed referral already earned another user a credit, that user's amount and ledger timestamp may remain as a detached credit-ledger entry, without the deleted referral attribution or a link to your account. Anonymized, aggregated usage data may be retained indefinitely.
Access, export and deletion
Signed-in users can export account data and delete individual cloud reports from their personal center. Full account deletion is available from account settings; it removes your profile, cloud reports, direct invitation records and your credit history. The confirmation also clears reports saved locally by Inward Atlas in that browser. Payment records required by law and detached credit-ledger entries described above are retained separately.
For a privacy request, email support@inwardatlas.com.
Legal basis and jurisdiction
Where those legal bases apply, Inward Atlas processes personal data to perform the service contract and for legitimate interests such as security, abuse prevention and product reliability. Other legal bases or mandatory rights may apply in your jurisdiction. Supabase, Google, Dodo Payments and DeepSeek may process data across borders under their own infrastructure and contractual arrangements. For questions about cross-border handling, contact us at the address above.
Effective date: September 10, 2026.