Privacy Policy

Effective October 26, 2026. Nyraven LLC, United States.

What we never do

We do not sell your data. Not your account, not your maps, not to anyone.
No advertising, no outside analytics, no tracking scripts, and no cookies but our own. The one exception is the payment form, below.
We do not read your maps as a matter of course. Someone opens one when you ask us to look at a problem, or when a security incident makes it necessary, and only as far as that needs.
What you map is used only to run NyrAtlas and make it work better for you. It never leaves the service for anyone else's purposes.

Your name, email address and a hash of your password, so you can sign in and we can reach you. Never the password itself.
Everything you map and type into the app, and who changed what, when, because that is the product.
Where sign-ins came from, with the address and browser they used, and failed attempts, so an attacked account can be noticed and locked.
Messages you send through the contact form or to the support address, and our replies, so a conversation can be followed.
If an organization pays, the card's brand and last four digits, so its Billing tab can say which card is on file. The full card number goes to the payment processor and never to us.
Whether each email we sent you arrived or bounced, so we stop sending to an address that is dead.
A count of visitors to the public pages, made by us. Each visit is kept as a one-way hash of the address and browser that changes every day, so we can tell how many people came, but not who, and not whether the same person came back tomorrow.

Your free personal project is yours alone, unless you share it, and then it is view-only to the people you share it with.
A map in an organization is seen by everyone who holds a role in that organization, as far as the role allows. The organization's owner decides who is in it and what each role can do.
Nothing in our admin tools shows a map's contents. People who run the servers can reach the database, and do so only for the reasons in the first section.

Two, both ours and both needed: one keeps you signed in, one stops other sites submitting forms as you.
The payment form, when an organization subscribes, is drawn by the payment processor and sets its own cookies for fraud prevention while it is open. It is the only outside script on the site, and it loads only on that form.
Your light-or-dark choice stays in your own browser. It never leaves it.

A hosting provider in the United States runs the servers and holds the backups.
A payment processor takes card payments and keeps the card and the invoices.
An email delivery service sends verification, reset, invitation and notification mail, and receives mail to the support address. Mail to that address reaches it through the forwarder of the company our domain is registered with.
Each does only that one job and may not use your content for anything of its own. Nobody else gets anything, unless the law requires it, or unless Nyraven LLC itself is ever sold, in which case your data goes with the service under these same promises.

As long as your account exists. An enclosure keeps its last thirty saved versions.
Backups are kept for thirty days, so something deleted is gone from them within a month.
Sign-in and security records, email delivery records, support conversations and billing records outlive an account for a limited time, because they are how we notice an attack, answer a dispute, or keep the books.

Write to us through the Contact page, with or without an account, and we will send you a copy of your data, correct what is wrong in it, or delete your account.
Deleting your account removes your personal project and everything in it. Maps in an organization belong to that organization and stay with the people still in it.
We check it is you first, and answer within a few business days.

Everything is stored and handled in the United States. If you use NyrAtlas from somewhere else, your data comes here.
Everything travels encrypted between your browser and us. Two-factor authentication is there for anyone who wants it.
If we learn of a breach that affects you, we tell you as soon as we know what happened.
NyrAtlas is for working professionals, not children under thirteen. If we learn we hold a child's account, we remove it.
If this page changes in a way that matters, the date at the top changes and we email every account before the change takes effect.