Privacy policy
Last updated 15 October 2026. AtlasSchema is run by AtlasAiDev (contact@atlasaidev.com).
In short
- We keep what is needed to check the websites you add, and nothing to sell or advertise with.
- The free page check stores nothing.
- Google Search Console is optional, read only, and follows Google’s Limited Use rules.
- You can delete a website or your whole account at any time, in the dashboard.
1. What AtlasSchema is
AtlasSchema checks the structured data (schema.org JSON-LD) of websites you add, shows what to fix, and watches for changes. This policy explains what data it keeps, why, and how to delete it.
2. Data we keep
- Your account: email address, name (optional), a one-way hash of your password (scrypt; we cannot read the password), your plan, your email preferences, and the sign-in sessions of your browsers (stored as hashes).
- Websites you add and their results: the addresses of the pages we check, their titles and language, the structured data found on them, the check results, and (on plans that include it) earlier versions of that structured data. These are pages of public websites.
- WordPress connector: if you connect the Atlas Schema plugin with a key, it sends the address, title and structured data of your published pages. The key is stored only as a hash.
- Team workspaces: who belongs to a workspace and their role, invitations (email address and role), and an activity log of changes (who added a website, invited someone, and so on).
- Usage: how many pages were checked, per day, website and language, to apply your plan’s monthly limit and show you your usage.
- Emails we send: sign-in codes, security notices, invitations, and the alerts and weekly reports you chose.
- The free page check (without an account) reads the page you enter and shows the result; it does not store the address or the result. To prevent abuse we count checks per visitor address for one hour.
3. Google Search Console data
Connecting Google Search Console is optional. If you connect it, you sign in on Google’s page and grant these permissions:
openidandemail: to know which Google account you connected (we store that account’s email address to show it to you).https://www.googleapis.com/auth/webmasters.readonly: read-only access to Search Console, used for two things only: listing the Search Console properties your Google account can see, so you can choose the one that matches your website; and asking Google’s URL Inspection API about pages of the websites you added, to show Google’s indexing and rich result verdict next to our check.
We store a refresh token, encrypted (AES-256-GCM), so checks can run on schedule, and the inspection results (verdict, coverage state and rich result items) with each page. We never change anything in Search Console and never access other Google data.
Limited Use. AtlasSchema’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: we use Google user data only to provide the features described above that you can see in your dashboard; we do not sell it; we do not use or transfer it for advertising, credit-worthiness or lending; we do not use it to develop or train artificial intelligence or machine learning models; we do not transfer it to others except as needed to provide the service (our hosting provider), to comply with law, or as part of a merger with your notice; and no person reads it unless you ask us to (for support), it is needed for security, or the law requires it.
You can disconnect Google at any time on any website page in the dashboard (“Disconnect Google”): we revoke the access at Google and delete the stored token. Deleting your account does the same. You can also remove access at myaccount.google.com/permissions.
4. Why we use the data
Only to run the service you use: check your websites, show results and history, send the emails you chose, keep your account secure, and answer your support questions. We do not sell personal data and do not use it for advertising.
5. Who else processes it
Our hosting provider (servers and database), Cloudflare (which carries the traffic to our servers and protects them from attacks), and our email delivery provider (to send the emails). They process the data only on our behalf. When we check a website, our crawler, AtlasSchemaBot, visits its public pages and respects its robots.txt.
6. How long we keep it
- Account, websites and results: until you delete them or your account.
- History of structured data: for the number of days your plan includes (older versions are removed automatically).
- Google token and inspection results: until you disconnect Google or delete the website or your account.
- Usage totals: kept as daily numbers, without the content of any page.
- Backups, where kept, are overwritten within 30 days, so deleted data leaves them by then.
7. Your choices and rights
- Turn alerts and weekly reports off on your Account page in the dashboard.
- Delete a website (its pages, results and history go with it) on its page.
- Delete your account on the Account page (“Delete my account”): your account, websites, results, history, workspace and the Google connection are deleted at once, and the Google access is revoked.
- Ask for a copy of your data, a correction, or anything else about your data: write to contact@atlasaidev.com.
8. Cookies and statistics
The dashboard uses one essential cookie to keep you signed in. It is secure, can’t be read by scripts, and ends when you sign out or the session expires.
This website counts visits with our own statistics, which use no cookies and keep only daily totals (which pages were visited, from which kind of source), not who visited. If we ever add Google Analytics, its cookies are set only after you click Accept on the cookie bar, and your choice is remembered in your browser and can be changed at any time from the link at the bottom of every page. We never allow advertising cookies.
Only for our own staff: signing in to the dashboard as staff sets a cookie so that our own visits are left out of the statistics.
9. Security
Connections use HTTPS; passwords are hashed; Google tokens and the Google client secret are encrypted; API keys and sessions are stored as hashes; access to the servers is limited to the people who run them.
10. Children
AtlasSchema is a business tool and is not meant for children under 16.
11. Changes
If this policy changes in a way that matters, we update the date above and tell account holders by email before the change applies.
12. Contact
AtlasAiDev — contact@atlasaidev.com.