Privacy Policy

1. Who we are

Atmosteel is a project and detailing management platform for structural steel fabricators and detailers, made by Iron Skull Studios ("we", "us"). This policy covers the Atmosteel app at atmosteel.com and app.atmosteel.com.

Your company is the owner of the business data it puts into Atmosteel. We process that data on your company's behalf to run the service.

2. What we collect

Account details: your name, email address, company name, role and a bcrypt hash of your password. We never see or store your actual password.

Your company's content: drawings, models, specifications, submittals, RFIs, quotes, messages, notes, schedules and any other files or text you or your teammates add, including emails your company forwards to a job inbox.

Billing details: Stripe handles card payments. We store your Stripe customer and subscription IDs, not your card number.

Usage and technical data: sign-in times, IP address, browser type, the actions you take in the app, and an activity log of what Atmos (the AI assistant) was asked and did. We use this to run, secure and bill the service.

Data from connected services: if your company connects QuickBooks, Zoho or Google Drive, we read and write only what that feature needs.

3. How we use AI

Atmosteel uses AI to read drawings and documents, answer questions about your projects, draft RFIs and messages, compare quotes and flag risks.

To do this, the relevant parts of your company's documents and messages are sent to our AI providers, Anthropic (Claude) and OpenAI, through their business APIs. Neither provider uses API data to train its models by default. Scanned pages may be read with Amazon Textract.

Atmos only reads data your company can already see, using the same permission checks as the rest of the app. One company's files are never used to answer another company's questions.

AI output can be wrong. Atmos proposes changes, and nothing is saved until a person approves it.

4. Who processes your data

We use these service providers, and only for the purposes listed: Amazon Web Services (hosting, database, file storage, email delivery and scanned page reading, in the US, Ohio region); Cloudflare (secure network delivery); Stripe (payments); Anthropic and OpenAI (AI features). If your company turns them on: Intuit QuickBooks, Zoho and Google Drive.

When your company shares a job with a partner company, such as a fabricator sharing drawings with its detailer, that partner sees what was shared.

We do not sell your personal information, and we do not share it for advertising.

5. Cookies

Atmosteel uses only the cookies needed to keep you signed in and secure. We do not use advertising or third-party analytics cookies.

6. How long we keep data

We keep your company's data while its account is active. Files you delete go to the Recycle Bin, and emptying the bin or clearing a job removes the stored files too.

If a subscription ends, the company becomes read-only. Its owner gets reminder emails, and 90 days later its users, files and data are permanently deleted from the app and from file storage. Database backups roll off within 7 days after that.

7. Security

All traffic uses HTTPS. The database and stored files are encrypted at rest, file storage is not public, and downloads use short-lived signed links. Each company's data is kept separate, and every request is checked against your company before data is read or written. See our Trust page for details.

No system is perfectly secure. If a breach affects your data, we will notify you as required by law.

8. Your choices and rights

You can update your profile and email preferences in Settings. Company admins can export their data and manage team access.

Depending on where you live, you may have the right to access, correct, delete or get a copy of your personal information. Email us and we will help. If your company manages your account, we may pass your request to your company's admin.

9. Who Atmosteel is for

Atmosteel is a business tool and is not meant for anyone under 18. We do not knowingly collect information from children.

10. Changes to this policy

If we change this policy in a way that matters, we will update the date above and tell company owners by email or in the app before the change takes effect.