Privacy policy
Last updated: 23 October 2026
This policy explains what personal data Atlassia processes when you visit atlassia.de, use the Atlassia app (app.atlassia.de), open a catalog published with Atlassia (catalog.atlassia.de), or connect Atlassia to Claude. We keep this list short on purpose: most of what Atlassia does happens in your browser.
1. Who is responsible
Badii Boukalane, Milser Str. 65, 33729 Bielefeld, Germany
Email: contact@atlassia.de
For published catalogs, the company that published the catalog is responsible toward its visitors, and Atlassia processes that data on its behalf (see section 5).
2. This website (atlassia.de)
Hosting and server logs
The website is hosted by Vercel. When you open a page, Vercel's servers process technically necessary data: your IP address, the date and time, the requested page, and your browser's user agent. This is needed to deliver the page and keep it secure (Art. 6 (1) (f) GDPR). Logs are kept for one hour.
Visitor statistics
We use Vercel Web Analytics to count page views. It sets no cookies and stores nothing on your device. Visits are told apart by a value derived from the request, which is discarded after 24 hours, so you cannot be recognised across days. Legal basis: Art. 6 (1) (f) GDPR, our interest in knowing which pages are read.
Light or dark theme
If you switch the theme, your choice is kept in your browser's local storage so the next page uses it. It never leaves your device.
Fonts
The font is served from this website. No font service such as Google Fonts is contacted.
3. The Atlassia app (app.atlassia.de)
CAD files stay on your computer
CAD files (such as STEP), mesh files (such as STL or 3MF) and parts lists are read in your browser. They are not uploaded unless you save a project to your account or publish a catalog. Files you send to Atlassia through Claude are the one exception (see section 4).
Account
You sign in with your email address and a sign-in link we email to you. We store your email address, an account ID and sign-in times, to provide your account (Art. 6 (1) (b) GDPR). Sign-in is provided by Supabase; the sign-in emails are sent by Resend.
Saved projects and published catalogs
When you save a project to your account, we store the project data: parts list, part mappings, settings and notes. When you publish a catalog, we store what the catalog shows: display models, part numbers, descriptions, images and documents you add. Both are kept until you delete them or your account.
Export and deletion
In the app's account panel you can download any project with its parts list, models and attachments (Export), and delete projects, catalogs or your whole account. Deleting your account removes, in one step, your projects and their files, your catalogs (their links stop working), the quote requests and activity of those catalogs, your notification settings, connected apps, your beta access and the account itself. Backups kept by our hosting provider may still contain deleted data for a short period until they are overwritten.
Usage statistics
The app uses Vercel Web Analytics in the same way as this website: page views without cookies or storage on your device, told apart only by a value that is discarded after 24 hours. It also counts three anonymous events: a file was imported (its file type and how many files), a demo catalog was opened, and a screenshot was saved. Legal basis: Art. 6 (1) (f) GDPR, our interest in knowing which features are used.
Quote notifications
You choose how you hear about new quote requests. If you turn on email notifications, each new request is emailed to your sign-in address through Resend, with the customer's contact details and the requested parts. If you set a webhook (for example Slack or Microsoft Teams), each new request is sent to that address, and the provider of that service receives it. You choose and control that service.
4. The Claude connector
If you connect Atlassia to Claude, you sign in to Atlassia and allow Claude to read your projects, catalogs, quote requests and catalog activity. Claude cannot change, publish or delete your projects or catalogs.
The one thing the connector accepts is files for a new import. If you ask Claude to bring model files into Atlassia, Claude puts them into a private inbox in your account, either by uploading them or by giving us a public link that our server downloads. Claude may also pass where the files came from (page address, title, author, licence). The files stay in the inbox until you open the link Claude gives you, which imports them in your browser and deletes the inbox, and at most 24 hours: inboxes nobody opens are deleted automatically. Only you can open your inbox.
What Claude does with the answers is governed by your agreement with Anthropic. You can remove the connection at any time, in Claude or under Connected apps in your Atlassia account.
5. Published catalogs (catalog.atlassia.de and embeds)
Catalogs are published by Atlassia's customers. For their visitors, the publishing company is the controller and Atlassia acts as its processor (Art. 28 GDPR) under our data processing agreement. The publishing company's own privacy policy applies as well.
- Delivery and abuse protection. To deliver the catalog and to limit abuse (too many quote requests, passcode attempts or events), the IP address is processed. For rate limiting, a one-way hash of the IP address and the current hour is kept for at most one hour. IP addresses are not stored.
- Anonymous activity. The catalog counts how often it is opened and which parts are viewed, added to the quote basket or shown in AR. Only daily totals per catalog and part are stored: no cookies, no IP address, nothing that identifies a visitor. Totals are deleted after 400 days at the latest. Catalog pages use no web analytics service.
- On your device. The quote basket is kept in your browser's local storage so it survives a reload. If a catalog is protected with a passcode, the unlock is kept in session storage until the tab closes. Both are needed for features you use and never leave your device.
- Quote requests. If you send a quote request, we store your name and email address and, if you give them, your company, phone number, message and the requested parts, and pass them to the publishing company to answer you (Art. 6 (1) (b) GDPR). The publishing company may receive them by email, sent through Resend, or through its own notification service. Requests are kept until the publishing company deletes them, or deletes the catalog or its account.
6. Contact form and email
The contact form on this website and in the app sends us the topic you choose, your email address, your message, your name if you give it, and the page you sent it from. We store the message in our database and receive it by email through Resend, so that we can answer you (Art. 6 (1) (b) GDPR when it concerns using Atlassia, otherwise Art. 6 (1) (f) GDPR, our interest in answering enquiries). To limit abuse, the form uses the same rate limiting as published catalogs: a one-way hash of your IP address and the current hour, kept for at most one hour. If you email us directly, we use your address and message in the same way.
We delete messages when they are no longer needed to answer you, unless we must keep them by law.
7. Service providers and transfers
| Provider | For | Location |
|---|---|---|
| Vercel Inc. | Website and app hosting, API, web analytics | USA |
| Supabase Pte. Ltd. | Database, file storage, sign-in | EU (Ireland) |
| Upstash Inc. | Rate limiting (hashed IP and hour, one hour) | EU |
| Resend Inc. | Sending email: sign-in links, quote notifications a seller turned on, and contact-form messages to us | USA |
We have data processing agreements with each provider. Where data reaches the USA, the transfer relies on the EU-U.S. Data Privacy Framework or the EU Standard Contractual Clauses.
8. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interests (Art. 15–21 GDPR). With an account, you can export your projects and delete your account yourself in the app (section 3). For anything else, use the contact form or email contact@atlassia.de. For a published catalog, you can also contact the company that published it. You may complain to a data protection supervisory authority, for example the one where you live or the authority responsible for us: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Düsseldorf.
9. Changes
We update this policy when Atlassia changes how it handles data. The date at the top shows the current version.