Privacy Policy

Who we are

ATOVault is a product of Bleauxhorn Ventures ("we", "us"). This policy explains what personal information we collect, why we collect it, and what we do with it. If you have questions about anything here, email [email protected].

Information we collect

• Account information. When you create an account we collect your email address, your name, and the organization name you provide. Authentication is handled by Amazon Cognito; we do not store your password, and because sign-in uses SRP, your password is never transmitted to our servers.
• Contact and waitlist submissions. If you contact us or join the waitlist, we collect what you send us (typically name, email, organization, and your message).
• Cloud configuration data. When you connect a cloud account, ATOVault reads configuration and compliance metadata about your environment (resource settings, policy findings, activity logs) to produce your compliance posture. This is data about your infrastructure, not the contents of your systems.
• Billing information. Payments are processed by Stripe. We store a Stripe customer identifier and your subscription status. We do not receive or store full card numbers.
• Operational logs. We record application and infrastructure logs (including request metadata and IP address) to run and secure the service.

How we use information

We use your information to provide the service, authenticate you, generate your compliance artifacts, process payments, respond to your inquiries, notify you about events you have subscribed to, and secure and improve the platform. We do not sell personal information, and we do not use your cloud configuration data to train models for other customers.

Sub-processors

We rely on a small set of providers to operate the service: Amazon Web Services (hosting, identity, storage, and the AI models used to draft compliance content) and Stripe (payments). Your cloud configuration data is processed within our AWS environment.

Data retention

We retain your account and compliance data for as long as your account is active. If you close your account, contact us and we will delete your data, except where we are required to retain records (for example, billing records) or where data exists in routine backups, which age out on their normal schedule.

Security

Data is encrypted in transit and at rest, tenants are isolated from one another, and access is controlled by role. See our Security page for details.

Your choices

You can access and correct your account information in the app, and you can ask us for a copy of your data or ask us to delete it by emailing [email protected]. You can revoke ATOVault's access to your cloud environment at any time by removing the IAM role you deployed.

Changes to this policy

If we make a material change, we will update the date above and, where appropriate, notify account holders by email.

Contact

Bleauxhorn Ventures, 1901 Manhattan Blvd, Bldg. D, Harvey, LA 70058.
[email protected]