Legal

Privacy Policy

Last updated 26 October 2026

1. Who we are

Unflatline ("we", "us") is an Atarus Security company. Contact: hello@unflatline.com.

2. What we collect

  • Information you give us. Name, email, company, app URL, repository link, project details, budget and timeline, and anything you write in messages.
  • Waitlist signups. Email, first name, chosen products, platform, optional comment.
  • Partner applications. Name, work email, agency, volumes, description.
  • Information about your app. Public pages and code we scan for the Diagnostic, and any access you grant for paid work. Findings and reports we produce about your app are your confidential information.
  • Technical data. Our hosting provider (Cloudflare) processes IP addresses and request logs to deliver and protect the site. We run no analytics or tracking scripts. We store form submitters' IP addresses only as salted one-way hashes, for spam prevention.
  • Payment data. Payments are handled by our payment provider (Stripe). We do not see or store full card numbers.

We ask that you do not send passwords or secret keys through our forms or by email.

3. How we use it

  • To respond to your request and deliver your Diagnostic
  • To scope, quote and deliver paid work
  • To send invoices and project communications
  • To send waitlist updates about products you chose
  • To keep our site secure and working
  • To meet legal obligations

We do not sell your personal information. We do not use your code or app data for any purpose other than your project.

4. Who we share it with

Only service providers who help us run the studio, such as email, hosting, payment processing and project tools. They may use your data only to provide their service to us. Atarus Security, our affiliate, may support delivery, for example testers working on Ship Safe, Resurrection and Guardian reviews, under confidentiality. We may disclose information if the law requires it. Our current providers are Cloudflare (hosting, email routing and database) and Stripe (payments).

5. AI tools

AI-augmented engineering. We use AI tools, including Claude, to draft and review work. A senior human reviews every change. We do not send secrets, credentials or customer data to AI tools. Content from your project may be processed by those tools to deliver your project, on settings that limit training wherever the tool allows.

6. How long we keep it

  • Intake form data: 24 months after submission
  • Project code and working copies: deleted when the fix window ends. This is 14 days after a Revival Sprint handover, 30 days after a Resurrection, 7 days after a Facelift or Pre-Sale Revival.
  • Partner applications: 24 months after submission
  • Waitlist emails: until you unsubscribe
  • Invoices and accounting records: as long as the law requires

7. Security

We protect data with access controls and encryption in transit. No system is perfectly secure. Report concerns to security@unflatline.com.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal information, and to object to or restrict certain uses. Email hello@unflatline.com and we will respond within 30 days.

9. Cookies

This site sets no cookies of its own and uses no analytics or advertising cookies. If an anti-spam check is shown on our forms, Cloudflare Turnstile may process limited technical data to tell people from bots.

10. Children

Our services are for businesses and adults. We do not knowingly collect information from children under 16.

11. International transfers

We may process data in countries other than your own, including the United States, through the providers listed above.

12. Changes

If we change this policy, we post the new version here with a new date.

13. Contact

hello@unflatline.com. Security reports: security@unflatline.com.