Privacy Notice
Last updated: 6 August 2026
1. Who we are
LLM Atlas is operated by Andree Hultgren (trading as LLM Atlas). We are the data controller for the personal data described here: we decide why and how it is processed.
2. What we collect and why
| Data | Purpose | Legal basis |
|---|---|---|
| Email address, name, login credentials | Creating and securing your account | Performance of a contract |
| Learning progress, XP, quiz answers | Providing the Service and saving your progress | Performance of a contract |
| AI tutor messages you send | Generating tutor answers, abuse prevention | Contract; legitimate interests |
| Subscription status | Granting the access you paid for | Performance of a contract |
| IP address, device and browser data, usage logs | Security, fraud prevention, debugging, improving the product | Legitimate interests |
| Support messages | Answering your questions | Legitimate interests |
We do not collect or store your card details. Payment data is collected and processed by Paddle as Merchant of Record.
3. Who we share data with
- Service providers / subprocessors — hosting, database and authentication infrastructure, and the AI model providers that power the tutor.
- Paddle.com, our Merchant of Record, for the sale of subscriptions, subscription management, payments, tax compliance and invoicing.
- Professional advisers — accountants and lawyers, where necessary.
- Authorities — where required by law or to defend legal claims.
We do not sell your personal data.
4. International transfers
Some of our providers are located outside the EEA/UK. Where data is transferred, we rely on adequacy decisions or EU Standard Contractual Clauses together with appropriate technical safeguards.
5. Retention
We keep account and progress data for as long as your account is active, and for up to 12 months after you delete it or it becomes inactive, after which it is deleted or anonymised. Tutor conversations and security logs are kept for up to 12 months. Records required for tax and accounting are kept for as long as the law requires.
6. Your rights
Under the GDPR you have the right to access your data, correct it, erase it, restrict or object to processing, receive it in a portable format, and withdraw consent where processing is based on consent. You can also complain to your supervisory authority (in Sweden, the Integritetsskyddsmyndigheten, IMY). We respond to requests within one month.
7. Security
We use appropriate technical and organisational measures to protect your data, including encryption in transit, hashed credentials, row-level access controls on our database, and least-privilege access to production systems.
8. Cookies and local storage
We use strictly necessary cookies and browser local storage to keep you signed in and to remember your progress. We do not use advertising cookies. Paddle may set cookies needed to complete checkout. You can clear or block cookies in your browser settings, though signing in will then not work.
9. Contact
For any privacy request, contact Andree Hultgren using the support address on your receipt or the contact details published on this site.