Privacy Policy

1. Introduction

1.1  This Privacy Policy explains how Atlas Holdings ("Atlas Holdings," "we," "us," "our"), operating under the trading name NexoChart, collects, uses, discloses, and protects information when you use our website, application, and AI-powered chart analysis services (collectively, the "Service").

1.2  NexoChart is used by individuals around the world. We aim to meet the requirements of major privacy frameworks, including the EU/UK General Data Protection Regulation ("GDPR"), the UK GDPR, and the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA/CPRA"), as well as other applicable data protection laws. Sections 9 and 10 contain region-specific disclosures and rights.

1.3  By using NexoChart, you acknowledge this Privacy Policy. If you do not agree with it, please discontinue use of the Service.

2. Who We Are — Data Controller

2.1  Atlas Holdings (trading as NexoChart) is the controller (or, for CCPA purposes, the "business") responsible for your personal information described in this policy. Atlas Holdings is in the process of formal incorporation; until incorporation is complete, the individual(s) operating NexoChart under this trading name act as the responsible party. Contact details are provided in Section 14.

3. Information We Collect

We collect the following categories of information:

3.1  Account information. Name, email address, username, password (stored as a salted hash, not in plain text), and any profile information you choose to provide when you register.

3.2  Payment information. When you purchase a subscription, payment is processed by a third-party payment processor (see Section 7). We receive and store limited billing information such as your billing name, billing address, transaction amount, transaction date, subscription tier (monthly or lifetime), and a payment-processor-issued token or reference ID. We do not collect or store your full payment card number, card verification code (CVC/CVV), or bank account credentials — these are submitted directly to and held by our payment processor.

3.3  Uploaded content. Chart images, screenshots, or other files you upload to NexoChart for AI analysis ("Uploaded Content"). We store Uploaded Content in order to provide the Service, including to display your analysis history, allow you to revisit past analyses, and improve the reliability of our Service.

3.4  Market data interactions. Records of which financial instruments, tickers, timeframes, and live market data you view or request analysis on within the Service.

3.5  AI interaction data. The prompts, queries, and requests you submit to NexoChart's AI features, and the AI-generated Output returned to you, which we retain as part of your account history.

3.6  Usage and device data. IP address, browser type, device identifiers, operating system, referring/exit pages, timestamps, clickstream data, and general usage analytics, collected automatically through cookies and similar technologies (see Section 8).

3.7  Communications. Information you provide when you contact customer support, respond to surveys, or otherwise communicate with us.

3.8  Information we do not intentionally collect. We do not request or require government identification numbers, biometric data, precise geolocation beyond IP-derived approximate location, or health information. Do not upload or submit such information to NexoChart; if you do, it will be handled in accordance with this policy but we do not seek it out.

4. How We Use Your Information

We use the information described above for the following purposes:

4.1  To create and administer your account and provide the Service, including generating AI chart analysis from your Uploaded Content and from live market data you select.

4.2  To process payments, manage subscriptions (monthly and lifetime), and maintain billing records as required for accounting, tax, and fraud-prevention purposes.

4.3  To maintain your analysis history so you can review past Uploaded Content and Output.

4.4  To monitor, secure, debug, and improve the Service, including identifying technical issues and preventing fraud, abuse, or unauthorized access.

4.5  To communicate with you, including service notices, security alerts, billing notices, and — where you have not opted out — product updates or marketing communications.

4.6  To comply with legal obligations, respond to lawful requests from public authorities, and enforce our Terms of Service and this Privacy Policy.

4.7  AI model use of your data. We use Uploaded Content and AI interaction data to generate the Output you request. Where we use third-party AI infrastructure providers to power analysis (see Section 7), your Uploaded Content and prompts may be transmitted to those providers solely to generate your Output. We do not permit third-party AI providers to use your Uploaded Content to train their general-purpose models, except where a provider's standard terms state otherwise and we have disclosed this to you. We do not sell your Uploaded Content.

5. Data Retention

5.1  We retain account information for as long as your account is active, and for a reasonable period thereafter to comply with legal, tax, accounting, and dispute-resolution obligations.

5.2  We retain Uploaded Content and associated Output for as long as your account is active so that you can access your analysis history, unless you delete specific items yourself or request deletion of your account.

5.3  Following account deletion, we will delete or anonymize your personal information, including Uploaded Content, within a commercially reasonable period, except where retention is required for legal, tax, fraud-prevention, or dispute-resolution purposes.

5.4  Billing records are retained for the period required by applicable tax and accounting law, which may extend beyond account closure.

6. How We Share Your Information

We do not sell your personal information for money. We disclose information only as follows:

6.1  Service providers. With third-party vendors who perform services on our behalf, including payment processing, cloud hosting and storage, AI/LLM infrastructure providers used to generate Output, customer support tooling, analytics, and email delivery. These providers are contractually bound to use your information only to provide services to us and in accordance with this Privacy Policy.

6.2  Legal compliance and protection. Where required by law, regulation, legal process, or governmental request, or where we believe in good faith that disclosure is necessary to protect the rights, property, or safety of NexoChart, our users, or the public.

6.3  Business transfers. In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our business or assets, in which case personal information may be transferred as a business asset, subject to standard confidentiality arrangements.

6.4  With your consent. For any other purpose disclosed to you at the time we collect the information, or with your explicit consent.

6.5  Aggregated or de-identified data. We may share aggregated or de-identified information that cannot reasonably be used to identify you, including for research, benchmarking, or marketing purposes.

7. Third-Party Service Providers

We rely on the following categories of third-party providers, each of which processes data under its own privacy terms and applicable data processing agreements with us:

7.1  Payment processing — to process subscription payments and store limited billing/transaction data. We do not control, and are not responsible for, the privacy practices of payment processors beyond our contractual relationship with them.

7.2  Cloud hosting and storage — to host the Service and store account data and Uploaded Content securely.

7.3  AI/LLM infrastructure providers — to process your prompts and Uploaded Content and generate AI Output.

7.4  Market data providers — to supply live market data displayed within the Service. These providers may receive technical request data (e.g., which ticker/timeframe was requested) but do not receive your account or payment information through us.

7.5  Analytics and communications tooling — to understand product usage and to send transactional or, where permitted, marketing communications.

We will identify the specific providers in these categories upon reasonable request, and will update this section as our vendor relationships materially change.

8. Cookies and Tracking Technologies

8.1  We use cookies, local storage, and similar technologies to operate the Service (e.g., keeping you logged in), remember preferences, and understand usage through analytics.

8.2  Categories of cookies we may use:

• Strictly necessary — required for core functionality such as authentication and security; cannot be disabled without affecting the Service.
• Functional — remember preferences such as display settings.
• Analytics — help us understand how the Service is used in aggregate.

8.3  Where required by law (including under the EU/UK ePrivacy and GDPR framework), we will request your consent before placing non-essential cookies, and you may withdraw consent at any time through your cookie settings or browser controls. Disabling certain cookies may limit functionality.

9. Your Rights Under GDPR / UK GDPR (EEA and UK Users)

If you are located in the European Economic Area or the United Kingdom, you have the following rights regarding your personal data, subject to applicable legal exceptions:

9.1  Right of access — to obtain confirmation of whether we process your data and a copy of that data.

9.2  Right to rectification — to correct inaccurate or incomplete data.

9.3  Right to erasure ("right to be forgotten") — to request deletion of your personal data, including stored Uploaded Content, subject to Section 5.3.

9.4  Right to restrict processing — to request that we limit how we use your data in certain circumstances.

9.5  Right to data portability — to receive your data in a structured, commonly used, machine-readable format, and to have it transmitted to another controller where technically feasible.

9.6  Right to object — to object to processing based on legitimate interests, including for direct marketing purposes, at any time and free of charge.

9.7  Right to withdraw consent — where processing is based on consent, to withdraw it at any time without affecting the lawfulness of processing before withdrawal.

9.8  Right to lodge a complaint — with your local data protection supervisory authority, or with the UK Information Commissioner's Office, if you believe our processing infringes applicable data protection law.

Legal bases for processing. We process your data under the following legal bases as applicable: performance of a contract (providing the Service you subscribed to), legitimate interests (securing and improving the Service, preventing fraud), consent (e.g., non-essential cookies, marketing communications), and compliance with legal obligations (e.g., tax recordkeeping).

International transfers. Where we transfer personal data outside the EEA or UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or another lawful transfer mechanism.

To exercise any of these rights, contact us using the details in Section 14. We will respond within the timeframes required by applicable law.

10. Your Rights Under CCPA/CPRA (California Users)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

10.1  Right to know — what personal information we have collected, used, disclosed, and (if applicable) sold or shared about you.

10.2  Right to delete — request deletion of personal information we have collected from you, subject to certain exceptions.

10.3  Right to correct — request correction of inaccurate personal information.

10.4  Right to opt out of sale or sharing — we do not sell your personal information for monetary consideration and do not "share" it for cross-context behavioral advertising as defined under the CCPA/CPRA.

10.5  Right to limit use of sensitive personal information — we do not use sensitive personal information for purposes beyond those necessary to provide the Service.

10.6  Right to non-discrimination — we will not discriminate against you because you exercised any CCPA/CPRA right.

To exercise CCPA/CPRA rights, contact us using the details in Section 14.

11. Other Jurisdictions

11.1  We aim to apply the data protection principles described in this Policy globally, including data minimization, purpose limitation, and security. If your jurisdiction provides additional or different rights (for example, under Brazil's LGPD, Canada's PIPEDA, or other regional frameworks), contact us using the details in Section 14 and we will address your request in accordance with applicable local law.

12. Children's Privacy

12.1  NexoChart is not directed at, and is not intended for use by, individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected personal information from a person under 18, we will take steps to delete it promptly. If you believe a minor has provided us with personal information, please contact us using the details in Section 14.

13. Data Security

13.1  We implement technical and organizational measures designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction, including encryption of data in transit, access controls, and secure storage practices appropriate to the sensitivity of the data involved.

13.2  No method of transmission or storage is completely secure. We cannot guarantee absolute security, and you are responsible for maintaining the confidentiality of your account credentials and for notifying us promptly of any suspected unauthorized access to your account.

14. Contact Us and Exercising Your Rights

To exercise any rights described in this Policy, ask questions, or raise concerns, contact us at:

Email: support@nexochartai.com
Trading name: NexoChart, operated by Atlas Holdings

We will respond to verifiable requests within the timeframe required by applicable law (generally within 30 days under GDPR and 45 days under CCPA/CPRA, subject to permitted extensions).

15. Changes to This Privacy Policy

15.1  We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or legal requirements. We will update the "Last updated" date and, for material changes, provide notice through the Service or by email before the changes take effect. Continued use of NexoChart after changes take effect constitutes acceptance of the revised Policy.