Privacy Policy

This policy explains what Atlyst ("we," "us") collects, how we use it, who else sees it, and the choices you have. The Service is operated by Atlyst; upon formation of Atlyst, LLC, this policy and the data described in it will transfer to Atlyst, LLC.

1. What we collect from you

• Account information: your email address and password. Passwords are handled by our authentication provider and stored only as a secure hash; we never see or store them in plain text. We give each account a handle (made from your name if you have given it to us, otherwise from your email address) that appears as the byline on anything you choose to publish.
• Things you create: channel lists, saved episodes, knowledge boards and pins, alert rules and the alerts they trigger, saved searches, and cards or white papers you write. Things you publish (such as a white paper you make public) are visible to others with your handle, if you choose to show it.
• Preferences: settings such as your Atlyst / My pick, your answers to the short first-run questions, checklist progress, and whether the daily alert email is on.
• Feature use: which areas of Atlyst you open and use (for example, "Ask" or "Alerts"), with a date and time. We do not record what you type into searches in this log. These records are deleted after 90 days, and you can delete yours at any time with "Delete my activity history" on the My Algorithm page.
• AI usage: a count of the AI requests your account makes, kept for 45 days so we can apply plan limits.
• Suggestions and help requests: what you write, the page you were on, and a screenshot if you attach one. These are emailed to the Atlyst team so we can respond.
• Service logs: our servers keep short-lived operational logs, which can include your email address next to an action (for example, a password reset), so we can find and fix problems.

2. How we use it

To run your account and your workspace, answer your questions, send the emails you ask for, keep the Service secure, and improve it. We do not sell personal information, we do not show ads, and we do not share your information with advertisers.

3. YouTube data and YouTube API Services

Atlyst uses YouTube API Services. By using Atlyst you agree to be bound by the YouTube Terms of Service, and Google's handling of data is described in the Google Privacy Policy.

What we obtain. Through the YouTube Data API we obtain public information about YouTube channels and videos: titles, descriptions, publish dates, durations, thumbnails, view, like and comment counts, subscriber counts, and public comments. Atlyst does not download, scrape or copy YouTube videos, audio or captions, and does not read YouTube's web pages. Videos play only in YouTube's own embedded player.

How we use and process it. We store this public information in our database (Supabase, in the United States) and use it to rank and organize channels and episodes, show trends over time, identify guests named in titles and descriptions, and answer your searches. Some public text, such as a video's title and description or a channel's description, is sent to Anthropic so its Claude model can sort it into subjects or pick out names. We refresh stored YouTube API data at least every 30 days, and delete what we cannot refresh.

Who it is shared with. YouTube API data is not sold, rented or shared with advertisers or data brokers. It is shown to Atlyst members inside the Service, always with a link back to YouTube, and it is processed only by the service providers in section 5, each limited to what it needs to run Atlyst.

When you play a video inside Atlyst, it plays in YouTube's own player, and YouTube may set its own cookies once you press play.

4. If you connect your YouTube account

The optional "Import YouTube" feature asks Google for permission to view your YouTube account (the read-only "youtube.readonly" permission). When you connect, we read your subscriptions, your playlists and the videos in them, and your liked videos, once, at that moment, so you can choose what to bring into Atlyst. Only the channels and episodes you pick are saved, to your lists. The rest of that read is not saved to your account.

• The access Google gives us is used during that single request and then discarded. We never store your Google password or your Google access or refresh tokens.
• Public information about the channels in that read (such as a channel's name and subscriber count, for channels with at least 5,000 subscribers) may be added to Atlyst's general catalog of public channels. It is not linked to you or your account.
• Atlyst's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use it for advertising, and we do not sell it or transfer it except as needed to provide the feature you asked for.
• You can revoke Atlyst's access at any time in your Google security settings.

5. Who sees your information

Inside Atlyst. Other members see only what you choose to publish, such as a public white paper with your handle. A small number of Atlyst staff can see account details (your email address, plan, sign-in dates and feature-use records) to run the Service, answer your requests and keep it secure. Staff do not read your private lists, cards or questions except when you ask us to help with them or the law requires it.

Outside Atlyst. We use a small number of service providers. Each receives only what it needs to do its job for us and may not use it for anything else:

• Vercel hosts the Service. Supabase provides our database, file storage, and sign-in. Both store data in the United States.
• Anthropic (Claude) generates answers and analysis. The questions you ask in Ask Atlyst and in help chat, the text of white papers you create, and public YouTube titles and descriptions being sorted (section 3) are sent to Anthropic to produce a response.
• Voyage AI turns search queries and questions into numbers so Atlyst can find conversations by meaning.
• Resend delivers our emails: password resets, and the daily alert email if you turn it on.
• Google provides the YouTube API, the embedded YouTube player, web fonts, and book information from Google Books. Open Library provides book covers. These are loaded by your browser, so those services see your browser's request (including your IP address).

We do not sell personal information or share it with advertisers. We may disclose information if the law requires it, and if Atlyst is ever sold or merged, this policy will continue to apply to the information transferred.

6. Cookies and local storage

Atlyst sets one cookie of its own: a short-lived security check (it expires after 10 minutes) while you connect your YouTube account. We use your browser's local storage to keep you signed in, remember your recent Ask conversation and view settings on that device, and store small conveniences like saved searches. YouTube's player may set cookies when you play a video (see section 3). We do not use advertising cookies or analytics trackers.

7. Affiliate links

Book and product links may be affiliate links (for example, through the Amazon Associates program). Clicking one shares no personal data from Atlyst with the retailer beyond the ordinary workings of the link itself.

8. Emails

We email you when you ask us to (a password reset) and, if you turn on "Email me my alerts," once a day on days your alert rules find something. You can turn the alert email off at any time on your Alerts page.

9. Data retention and deletion

Account data is kept while your account is active. Feature-use records are deleted after 90 days and AI usage counts after 45 days. Stored YouTube API data is refreshed or deleted within 30 days (section 3).

You can delete your account at any time with Delete account in the account menu. That removes your account, lists, cards, saved settings and activity records right away. You can also email us and we will remove it within 30 days. If you connected your YouTube account, you can revoke Atlyst's access at any time in your Google security settings; we keep no Google access tokens, so nothing further is read once access is revoked. Aggregated information that does not identify you may be kept.

10. Children

Atlyst is not directed at children under 13, and we do not knowingly collect personal information from them.

11. Changes

We will post updates to this policy on this page with a new effective date.

12. Contact

Privacy questions or deletion requests: hello@atlyst.ai.