Privacy Policy

Last updated: September 23, 2026

This Privacy Policy explains how Faculty Atlas collects, uses, discloses, and protects personal information when people visit or use the Service, purchase credits, contact us, or appear in faculty records. Please read it alongside our Terms of Service. We will provide notice of material changes as described in Section 13.

1. Data controller

We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our service. Privacy requests can be sent to privacy@faculty-atlas.com.

2. Personal information we collect

Information from account holders and visitors

• Account and sign-in information: name, email address, profile image if supplied, email-verification status, and a password hash if you use password sign-in. If an enabled Google or GitHub sign-in option is used, we receive basic account information and authentication tokens from that provider.
• Purchases and credits: credit purchases, transaction identifiers, amounts, currencies, payment status, credit balances, and credit use. Waffo Pancake/Creem processes card details for purchases; we do not store full card numbers on our servers.
• Support and requests: ticket subjects, messages, attachments, and information submitted with refund, hard-bounce, or privacy requests.
• Technical and activity information: IP address, browser or device information, session identifiers, language preference, referral source where available, and records of requests or feature use needed to operate and protect the Service.
• Analytics information: if an analytics service is enabled, it may receive information about visits and interactions as described in Section 4.

Information about faculty members

We collect publicly available professional information from official university pages, which may include a faculty member's name, institution, school or department, title, institutional email address, phone number, profile URL, source URL, and the date a record was checked or updated. We may also keep opt-out and suppression information so that a removed contact does not appear in future generated lists. Public availability does not remove a person's privacy rights.

We do not ask users to provide sensitive personal information in support tickets or attachments unless it is needed for a specific request.

3. How and why we use information

We use the data we collect to:

• Provide, maintain, and improve the service.
• Process transactions and send related confirmations.
• Send technical notices, security alerts, and support messages.
• Respond to your questions, feedback, and support requests.
• Detect, prevent, and address fraud and abuse.

4. Cookies and analytics

The Service uses cookies or similar technologies for sign-in sessions and language preferences. These support core functions. We may also record a referral source when you create an account. You can manage cookies in your browser, although blocking necessary cookies may prevent sign-in or other features from working.

We may use Google Analytics or Plausible Analytics, as well as Google AdSense, Crisp or Tawk.to services. Those services may collect information through their own scripts or cookies. Where required by law, we will obtain consent before using non-essential tracking and provide a way to withdraw it.

5. Sharing and disclosure

We disclose information only as needed for the purposes described here:

• Faculty contact data: paying users may unlock and download selected publicly available professional contact details. We license this data for permitted use under our Terms. In some jurisdictions, this disclosure may be considered a sale or sharing of personal information. Faculty members can request removal and suppression through the contact in Section 14.
• Payment processor: Waffo Pancake/Creem processes checkout and card information and sends us transaction details needed to provide credits and handle payments. We do not store full card numbers on our servers.
• Service providers: hosting, storage, authentication, email delivery, support, and any enabled analytics providers may process information to operate the Service, subject to appropriate contractual safeguards.
• Legal and safety reasons: we may disclose information when required by law or reasonably necessary to protect rights, prevent fraud, or address security incidents.
• Business changes: information may be transferred as part of a merger, acquisition, or similar transaction, subject to applicable notice and protection requirements.

We do not sell account holders' account, purchase, or support information.

6. Security

We use safeguards such as HTTPS in transit, hashed passwords, access controls, and restricted access to payment and account records. Waffo Pancake/Creem handles full payment card details for its checkout. No system is completely secure. If a breach requires notification, we will notify affected people and regulators within the period required by applicable law.

7. Retention

We retain information only for the applicable period below, or longer when a specific legal obligation, dispute, or fraud investigation requires it. At the end of a period, we delete or de-identify the information unless a lawful exception applies.

8. Your privacy rights

Depending on where you live, you may ask to access, correct, delete, or receive a copy of your personal information; restrict or object to processing; withdraw consent where processing relies on consent; or opt out of the sale or sharing of personal information. Faculty members may specifically request removal from future lists and permanent suppression of their contact details. These rights can be subject to legal exceptions, including the need to retain transaction records or a minimal suppression record.

Send a request to the privacy contact in Section 14. We may need to verify your identity before acting. We will respond within 30 days, or within another period required by applicable law, and explain if more time is lawfully needed. You may also complain to the data-protection authority in your jurisdiction.

9. Communications and opt-out

We send necessary account, billing, security, and service notices. If we offer optional marketing communications, we will obtain consent where required and provide an unsubscribe method. Opting out of marketing does not stop essential service notices. Faculty members may opt out of future list inclusion through Section 14; this is separate from marketing-message preferences.

10. International transfers

If personal information is transferred across borders, we will use safeguards required by applicable law, such as an adequacy decision or contractual protections, where relevant.

11. Children's privacy

The Service is intended for adults aged 18 or older. We do not knowingly collect account information from children under 18. If you believe a child has created an account, contact us so we can investigate and take appropriate action.

12. Third-party services and links

The Service may link to university pages, Waffo Pancake/Creem checkout, or other third-party services. Their own privacy notices govern information they collect directly from you. Review those notices when using their services.

13. Policy changes

We will post updates here and change the date at the top of this page. For material changes, we will give at least 15 days' advance notice by email or an in-product notice where practicable, unless a shorter period is required for legal or security reasons.

14. Contact

For privacy questions or rights requests, including faculty opt-out and suppression requests, contact privacy@faculty-atlas.com. Account holders can also use the support portal.