Version 1.3 — effective November 4, 2026. This policy applies to atlasglobal.group and the client area at portal.atlasglobal.group. The company responsible for your data is Global Atlas Group LLC, 30 N Gould St Ste N, Sheridan, WY 82801, USA. Contact: info@atlasglobal.group.
1. What changed in version 1.3
- We use audience analytics (Google Analytics 4), advertising measurement (Google Ads) and advertising tools (Meta Pixel) only with your consent. Until you choose, none of them is loaded.
- We explain server-side events (Google enhanced and offline conversions and Meta Conversions API), which, when enabled, also require your consent.
- We created the Cookie Policy, a four-category cookie notice and consent receipts.
- We added legal bases by purpose, named recipients, international transfers, retention criteria and the full list of rights.
We announce this update on the site, on the privacy page, and by email to customers with an account, at least 10 days before enabling new purposes. Changes that only reduce data collection take effect immediately.
The previous version remains available as Privacy Policy v1.0 (Portuguese).
2. Data we process and its sources
| Type | Examples | Source |
|---|---|---|
| Identity and contact | Name, email, phone, address | You, during registration or contact |
| Company information | Company name, state, members, managers, addresses, ownership interests | You, in your order |
| Documents | Documents you submit for a specific service | You, through the secure client area |
| Payment | Amount, status and last four card digits | Stripe (Atlas does not receive the full card number) |
| Access and security | Login, access date and time, IP address, security logs | Your use of the client area |
| Support | WhatsApp messages and emails with Atlas | You |
| Cookie-free statistics | Page views, traffic sources and device types, in aggregate | Cloudflare Web Analytics |
| Consent preferences | Random receipt identifier, date and time, policy versions, category choices, Global Privacy Control signal, language and page | Your browser when you choose in the cookie notice |
| Browsing and advertising (only with consent) | Pages visited, clicks, cookie and ad-click identifiers (gclid, fbclid), events such as registration and purchase and, when server-side transmission is enabled, email and phone transformed using SHA-256 hashing | Your browser and the client area |
3. Purposes and legal bases
| Purpose | Data | Legal basis (Brazilian LGPD) |
|---|---|---|
| Provide the contracted service (company formation, EIN, registered agent, service setup) | Identity, company, documents, payment | Contract performance and preliminary procedures (Article 7, V) |
| Billing, refunds and tax obligations | Payment, identity | Contract performance and legal obligation (Article 7, II and V) |
| Account security and fraud prevention | Access and security, payment | Legitimate interest and legal obligation. |
| Support and notices about orders and company deadlines | Contact, support | Contract performance (Article 7, V) |
| Aggregated, cookie-free site statistics | Cookie-free statistics | Legitimate interest. |
| Record your choice and demonstrate consent | Consent preferences | Legal obligation and establishment, exercise or defense of rights, including the duty to demonstrate consent. |
| Audience analytics | Browsing (Google Analytics 4) | Consent (Article 7, I) |
| Advertising measurement and customer matching | Browsing, conversion events, click identifiers and, for server-side transmission, hashed email and phone | Specific consent (Article 7, I and paragraph 5, and Article 8) |
| Personalized advertising (audiences and remarketing) | Browsing and events | Specific consent (Article 7, I and paragraph 5, and Article 8) |
Purchasing a service never depends on accepting analytics, measurement or advertising.
4. Who we share data with
| Recipient | Role | Purpose |
|---|---|---|
| Northwest Registered Agent | Service provider | Company formation and registered agent services |
| State authorities (Wyoming, Florida, Delaware) and the IRS | Authorities | Company formation and EIN. Some information, such as manager names and addresses, becomes public by law |
| Stripe | Payment processor | Payments, refunds and fraud prevention |
| Supabase | Infrastructure provider | Client-area authentication and database |
| Resend | Infrastructure provider | Access emails and notices |
| Cloudflare | Infrastructure provider | Hosting, security and cookie-free statistics |
| Google (Google Analytics 4, Google Ads, enhanced and offline conversions) | Advertising and analytics platform | Only with consent: audience analytics, measurement and advertising. Google acts as an independent controller for analytics and advertising. For enhanced conversions it acts under the data processing terms Atlas accepted in its account. |
| Meta (Meta Pixel and Conversions API) | Advertising platform | Only with consent for measurement and personalized advertising. Meta acts as an independent controller for advertising and measurement, under the Meta Business Tools Terms in force on the activation date. |
| Authorities | — | When required by law or court order |
We do not sell personal data for money. Use of advertising tools, which happens only with your consent, may be considered 'sharing' for advertising under some U.S. state laws. You can decline in 'Cookie preferences' or by using the Global Privacy Control signal.
5. Advertising, measurement and server-side transmission
With your permission for advertising measurement, we share information with Google and Meta about actions on our site and in the client area, such as registration and purchase and, when server-side transmission is enabled, versions of your email and phone transformed using SHA-256 hashing. These identifiers enable matching to platform accounts and remain personal data. We use this sharing to measure results and improve campaigns. Personalized advertising depends on its corresponding preference.
- Server-side transmission (Google enhanced and offline conversions and Meta Conversions API) only occurs for people who consented, and consent is checked before every transmission, including after payment and during retries.
- If you withdraw consent, future transmissions stop.
- We do not import historical customer records based on the cookie notice.
- We never send documents, SSNs, ITINs, CPFs, passports, passwords, card data or immigration-status information in events, URLs or parameters.
- Audience creation (remarketing and customer lists) only occurs with the Personalized advertising category.
You may change your choices at any time using Cookie preferences in the footer of every page.
6. Cookies, Global Privacy Control and Do Not Track
The cookie notice has four categories: Necessary, Audience analytics, Ad measurement and customer matching, and Personalized advertising. Optional categories start off. The full list is in the Cookie Policy.
We treat Global Privacy Control as refusal of advertising measurement and personalized advertising. We do not respond differently to the older Do Not Track signal; your cookie-notice choices and Global Privacy Control are respected.
7. International transfers
- How: Global Atlas Group LLC is a U.S. company and collects your data directly in the United States, then shares it with the recipients in Who we share data with.
- United States (Cloudflare, Stripe, Google, Meta, Resend). Some of these providers may process data in other countries where they operate.
- Purposes and duration: as described in Purposes and legal bases and How long we keep data.
- Atlas is a U.S. company and collects data directly in the United States, so you send it yourself. When we share data with providers, we use data processing agreements and the safeguards each provider offers, including standard contractual clauses where applicable.
- Responsibilities, security and rights: as described in this policy.
- Copies of clauses: you may request applicable clauses at info@atlasglobal.group; we respond within 15 days, subject to protection of trade secrets.
8. How long we keep data
| Category | Criterion |
|---|---|
| Company and tax documents, financial records | While you are a customer and afterward as required by legal and tax obligations; financial and company records for up to 7 years |
| Documents submitted for a specific service | Deleted when no longer needed for the service |
| Support | While the account is active and for up to 5 years afterward, to handle requests and defend rights. |
| Security logs | Up to 12 months, or longer if an investigation or legal obligation requires it. |
| Consent receipt | While the consent is valid and for up to 5 years afterward, to be able to demonstrate it. |
| atlas_consent cookie | 6 months; then we ask again |
| Campaign source in the client area | 90 days |
| Advertising and analytics events | At Atlas, while consent is active. In Google Analytics 4, 14 months. In advertising accounts, per each platform's default. |
At the end of the retention period, data is deleted or anonymized.
9. Your rights
- Confirmation that we process your data and access to it
- Correction of incomplete, inaccurate or outdated data
- Anonymization, blocking or deletion of unnecessary, excessive or unlawfully processed data
- Portability under applicable regulations
- Deletion of data processed with consent, subject to legal retention exceptions
- Information about who we share data with
- Information about the possibility of not consenting and its consequences
- Withdrawal of consent, free of charge and through a simple process
- Objection to unlawful processing
- Review of decisions based solely on automated processing
- Petition to the Brazilian National Data Protection Authority (ANPD)
To exercise your rights, email info@atlasglobal.group. We respond within 15 days. Privacy and data protection contact: Global Atlas Group LLC Privacy Team, at info@atlasglobal.group.
Residents of California and other states with privacy laws may request access, correction, deletion and opt-out of advertising use through the same channel. We do not discriminate against anyone exercising these rights.
10. Security
We use encrypted connections (HTTPS), login with a second authentication factor, privately stored documents and internal access restricted to people who need it to provide the service. No measure is infallible; if a relevant incident occurs, we will notify affected parties as required by law.
11. Minors
Our services are not intended for people under 18, and we do not target advertising at children or adolescents.
12. Changes, effective date and contact
This is version 1.3, effective November 4, 2026. Material changes will be announced before taking effect, and the effective date will always appear at the top of this page.
Contact: info@atlasglobal.group, comercial@atlasglobal.group and WhatsApp +1 (307) 763-9992 (abre em nova aba).