Privacy Policy

Last updated: August 2026

This Privacy Policy explains how Controve ("we," "us," "our") handles information in connection with Atlas One (the "Platform"). It's written to comply with the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian data protection law.

The most important thing to know: Atlas One is delivered as a template/system that you duplicate into your own account. Once duplicated, we do not have access to, and do not store, the client records, invoices, expenses, GST figures, or any other business data you enter into your copy. That data lives on the platform your account is on (e.g., Notion) and is governed by that platform's own privacy practices, which we encourage you to review separately.

1. Information We Collect

We collect only what's needed to sell you the template, support you, and run our own marketing site:

Purchase and account information: name, email address, and payment details processed via secure payment gateways at checkout. We do not store full card details ourselves; our payment processor handles that under its own PCI-compliant systems.
Support communications: anything you send us via email or a support form, if you contact us with a question or issue.
Website usage data: standard analytics on our marketing site (pages viewed, referral source, device/browser type).
What we explicitly do not collect: the contents of your duplicated Atlas One workspace — your clients, invoices, receipts, expenses, GST figures, documents, or any other business data. We have no technical access to it once you've duplicated the template into your own account, because it never passes through our servers.

2. How We Use Your Information

To process your purchase and deliver access to the template
To send you important service communications (e.g., a template update, a change to these policies)
With your consent, to send product updates or marketing communications — you can opt out at any time
To understand aggregate usage of our marketing website, to improve it

3. Legal Basis for Processing

We process your name, email, and purchase information on the basis of contractual necessity (to deliver what you purchased) and, for any marketing communications, your explicit consent, which you can withdraw at any time.

4. Data Sharing

We do not sell your data. We share the limited data we hold only with:

Our payment processor, to complete your purchase
Service providers who help us run our own website/support systems (e.g., email delivery, hosting for our marketing site)
Law enforcement or regulators, only where legally required

We have no involvement in, and no visibility into, any sharing you choose to do within your own duplicated workspace — for example, if you invite your chartered accountant into your own Notion account. That sharing is entirely between you and the people you invite, using that platform's own sharing controls, and is your responsibility, not ours.

5. Your Business Data — Where It Actually Lives

Because we don't store it, most of the questions people ask a financial-tool provider about their business data have a different answer for Atlas One than they would for a typical SaaS product:

Security of your financial data: governed by the security practices of the platform your account is on (e.g., Notion's own security and compliance posture), not by us. Review that platform's own security documentation.
Backups: governed by that platform, not by us. We recommend you understand its backup/export options independently.
Deleting your data: since it's in your own account, you control deletion directly — there's nothing for us to delete on our end beyond your purchase/account records.
A breach of your business data: would be a breach of the underlying platform, not of Controve's systems, since we never held that data.

6. Data Retention

We retain your purchase and account information for as long as needed to provide support and comply with legal/tax record-keeping obligations for our own business, and delete or anonymize it thereafter.

7. Your Rights

For the limited data we do hold (your name, email, purchase history, support communications), you have the right under the DPDP Act to:

Access the data we hold about you
Correct inaccurate data
Request erasure (subject to our own legal retention requirements, e.g., invoicing records)
Withdraw consent to marketing communications
File a complaint with our Grievance Officer, and subsequently with the Data Protection Board of India if unresolved

For your business data inside your own duplicated workspace, exercise these rights directly with that platform, since we hold no copy of it.

8. Grievance Officer & Contact

To exercise these rights regarding data we do hold or for questions about this Policy, contact us at: hello@controve.com

9. Cookies and Tracking

Our marketing website uses standard functional cookies for session management and basic analytics. This does not extend to your duplicated workspace.

10. Children's Privacy

The Platform is not directed at individuals under 18. We do not knowingly collect data from minors.

11. Changes to This Policy

We may update this Policy periodically. Material changes will be communicated via email or site notice.