Skip to content

Privacy Policy

Last updated: April 4, 2026

1. Introduction

Atlas Project Ops (“Company,” “we,” “us”) operates The Eddie System simulation platform. This Privacy Policy explains how we collect, use, and protect your personal information.

2. Information We Collect

2.1 Information you provide

  • Account information: email address, name (optional), profile photo (optional)
  • Simulation responses: your decisions, written answers, and deliverables during simulations
  • Payment information: processed securely by Stripe — we do not store credit card numbers
  • Uploaded documents: project artifacts you attach to completion reports

2.2 Information collected automatically

  • Usage data: pages visited, simulation progress, features used
  • Device information: browser type, operating system, screen resolution
  • Performance data: page load times, error reports (via Sentry)
  • Analytics: aggregated usage statistics (via Vercel Analytics and PostHog)
  • Session recordings: anonymized replays of how you interact with the platform (via PostHog) — used to improve usability

3. How We Use Your Information

  • Provide the service: authenticate you, track simulation progress, generate reports
  • AI evaluation: your freeform responses may be sent to Anthropic's Claude API for quality assessment and personalized feedback. Anthropic does not use this data to train their models.
  • Improve the platform: analyze usage patterns to improve simulations and user experience
  • Communication: send magic link emails, subscription confirmations, and important account updates
  • Payment processing: manage subscriptions via Stripe

4. AI Usage Disclosure

This platform uses AI (Anthropic Claude) for the following purposes:

  • Evaluating freeform simulation responses on Hard difficulty mode
  • Generating personalized comparison feedback between your answers and model answers

When AI evaluation is used, your response text and the simulation context are sent to Anthropic's API. We do not send your email, name, or other personal identifiers to the AI service. Anthropic's data usage policy applies to API interactions.

5. Data Sharing

We do not sell your personal information. We share data only with:

  • Stripe: payment processing (PCI-compliant)
  • Anthropic: AI evaluation of simulation responses (anonymized)
  • Sentry: error tracking and performance monitoring
  • Vercel: hosting and analytics
  • Supabase: database hosting
  • PostHog: product analytics and session recording to improve platform usability
  • Skool: community platform access (if your subscription includes community)

6. Data Retention

We retain your account and simulation data for as long as your account is active. After account deletion, data is permanently removed within 30 days. Anonymized, aggregated analytics data may be retained indefinitely.

7. Your Rights (GDPR / CCPA)

You have the right to:

  • Access: request a copy of all data we hold about you
  • Rectification: correct inaccurate personal information
  • Erasure: request deletion of your account and all associated data
  • Portability: receive your data in a structured, machine-readable format (JSON export)
  • Restriction: request we limit processing of your data
  • Objection: object to processing based on legitimate interests

To exercise any of these rights, contact support@eddierizvi.com. We will respond within 30 days.

8. Cookies

We use essential cookies only:

  • Session cookie (tes_session): HttpOnly, Secure, SameSite=Lax — authenticates your session. Expires after 7 days.
  • Theme preference (tes-theme): localStorage — stores your UI theme choice. No personal data.
  • Analytics cookies (ph_*): PostHog uses localStorage and cookies to track anonymous usage patterns and link sessions to identified users. No advertising data is collected.

We do not use advertising cookies or third-party tracking cookies. Vercel Analytics uses privacy-friendly, cookieless analytics. PostHog analytics are used solely to improve the platform experience.

9. Security

We implement industry-standard security measures including: HTTPS encryption, security headers (CSP, HSTS), rate limiting, CSRF protection, session hardening with cryptographic tokens, and row-level database security. Payment data is handled entirely by Stripe and never touches our servers.

10. Children

The Platform is not intended for users under 16 years of age. We do not knowingly collect data from children.

11. Changes to This Policy

We may update this policy periodically. Material changes will be communicated via email. The “Last updated” date at the top reflects the most recent revision.

12. Contact

Privacy questions or data requests: support@eddierizvi.com