How Atlas OS handles information about you, in plain English.
The short version. Atlas is the software your employer uses to run their venue. Most of what we hold about you is your employment record — your shifts, your hours, your pay and the documents that prove you may work. Your employer decides what goes in it, and questions about your record go to your manager first, or to [email protected]. Your employer must keep that record for seven years, because the law requires it. We do not sell anything about you, we do not advertise, and there is no tracking in this product.
Atlas OS is operated by Buyvendi Pty Ltd (ABN 81 142 015 334), of Sydney, Australia. Contact us at [email protected].
This distinction matters more than anything else on this page, so it comes first.
If you are a member of staff at a venue that uses Atlas, your employer is the record-keeper. They decide what to record about you, they are responsible for its accuracy, and Australian workplace law requires them — not us — to keep employment records. We hold and process that information on their behalf, under our agreement with them.
In practice: if your hours or your pay are wrong, your manager fixes them. If you want your account closed, your venue processes it. We can help them, and we will pass on anything you send us, but we do not change an employer's records on our own initiative.
These are visible only to people at your venue who can already see pay figures, and are never sent to any third party by Atlas.
You can upload these yourself from the app, or your manager can add them. They are files you give us — usually a photo or a PDF — and they can contain passport and visa details.
To run the product your employer is paying for: building rosters, recording hours, working out what shifts cost, tracking stock and invoices, keeping food safety records, and telling you when a roster is published or a certificate is about to expire.
We also use it to keep the service secure, to fix faults, and to answer you when you contact support.
We use other companies to run Atlas. They act on our instructions and may only use the information to provide their service to us.
| What they do | Who, today | What reaches them |
|---|---|---|
| Hosting and file storage | Cloudflare | Everything the product serves, plus uploaded files and web request logs |
| Database and sign-in | Supabase | Your account and employment records |
| Email delivery | Resend | Your email address and the contents of the email, such as a roster or an invitation |
| Reading invoices automatically | Anthropic | The invoice document itself. Supplier invoices are business records, but a delivery docket can carry a driver's name |
| Roster suggestions | Anthropic | Staff names and shift times, when a manager asks for a suggested roster |
| Roster messages by WhatsApp | Meta | Your name and mobile number, and the message, where your venue turns this on |
| Subscription billing | Stripe | Your venue's billing contact and payment details. No staff records |
| Local weather on the dashboard | Open-Meteo | The venue's coordinates only. Nothing about any person |
When you open Atlas in a browser, your browser also loads fonts and code libraries from Google Fonts, cdnjs, unpkg, jsDelivr and rsms.me. Those services see your IP address, as they would for any website using them. They receive nothing else about you.
Our database is hosted in Australia, in Amazon Web Services' Sydney region. Cloudflare stores and serves uploaded files from its global network, so copies of them may sit in several countries. Anthropic, Resend, Meta and Stripe process information overseas, including in the United States.
So the database itself is in Australia, but uploaded files and some processing still happen overseas. By using Atlas your employer accepts that. Wherever it is held, it stays subject to the Australian Privacy Principles and to the commitments on this page.
Employment records: seven years. The Fair Work Act requires an employer to keep records of hours worked, pay, superannuation and leave for seven years after employment ends. Your name and date of birth stay attached to those records, because a payroll record with no name is not a record of anything — and because it is your own evidence of what you worked and what you were paid.
Everything else: removed when your account is closed. Contact details, address, emergency contact, photo, availability, notification settings, sign-in and any registered devices.
We keep an internal note of when an account was closed and by whom, so we can show a deletion request was actioned.
In the app, go to Me → Close my account. Your venue's admins are notified and one of them processes it. You can also email [email protected] and we will pass the request on.
Because a person at your venue carries it out rather than an automatic process, it is not instant. When it is done, your contact details and sign-in are removed and you will no longer be able to log in. Your employment record stays, for the seven years described above, and is then deleted.
You can see your own hours, pay, documents and settings in the app at any time.
To ask for a copy of everything, or to correct something that is wrong, speak to your employer first — they hold the record and can change it. If that does not resolve it, email [email protected] and we will help. We will respond within 30 days.
Everything travels over an encrypted connection. Uploaded files are stored privately and are served only to people at your venue who are allowed to see them. Access is limited by role: a colleague cannot read your documents, and a manager who runs the roster cannot see your bank details.
No system is perfectly secure. If a breach ever affected you, we would notify you and the Office of the Australian Information Commissioner as the Notifiable Data Breaches scheme requires.
Atlas is used by people in employment. If your venue employs staff under 18, their records are entered by their employer and handled exactly as everyone else's are.
This policy is governed by the Australian Privacy Principles in the Privacy Act 1988 (Cth).
If you are unhappy with how we have handled your information, email [email protected] with the word "Privacy" in the subject and we will respond within 30 days. If you are still not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
If we change this policy we will update the date below. If a change materially affects how we handle your information, we will tell your venue.
This policy explains what happens to information. What the venue and Buyvendi owe each other — the subscription, data ownership, fees and liability — is in our terms of service.
Effective 24 August 2026. Buyvendi Pty Ltd, ABN 81 142 015 334.