Privacy policy
Effective September 7, 2026
Project Chorus is a marketing content and publishing workspace operated by The Atlara Firm LLC. This policy explains how we handle information when you visit Chorus, use its editorial dashboard, or authorize a supported integration.
Information we process
Content you provide: drafts, captions, images, source facts, destination links, brand selections, board IDs, and publication schedules.
Integration information: account identifiers and access credentials used to connect authorized social accounts. Where a connection supports renewal, this may include refresh tokens. We process these only for integrations you enable.
Operational records: content revisions, approval and scheduling events, publication status, remote post IDs, and error references.
Technical information: hosting and service providers may process IP addresses, browser and request information, timestamps, and security logs. Chorus uses an essential signed session cookie for dashboard authentication, lasting up to eight hours.
How we use information
We use this information to authenticate editors, prepare and store content, route it to the selected brand and account, publish scheduled content when enabled, diagnose failures, prevent unauthorized use, and respond to support or deletion requests. When Drive import is used, Chorus reads selected source files for the authorized workflow.
Sharing and public content
Vercel provides application hosting and Supabase provides database and image storage. Enabled integrations send the information needed for their function to the selected services, including X, Instagram/Meta, Pinterest, or Google Drive. These providers handle information under their own terms and privacy policies. We may also disclose information when legally required or necessary to address fraud or security incidents.
Finished images uploaded through Chorus are stored at public URLs so publishing platforms can retrieve them, including before a post is published. Do not upload confidential material as a finished creative. Published posts are visible according to the destination platform's settings. Private drafts and credentials are not intentionally made public.
We do not sell personal information or use connected-account data for advertising targeting. Chorus does not currently include advertising trackers. If an editor uses a separate AI editing service to prepare content, that service's processing is governed by its own terms; this policy does not imply that every Chorus draft is sent to an AI service.
Retention and security
Content and workflow records are retained while needed to operate the workspace unless deletion is requested. There is currently no automatic draft-expiration schedule. Credentials are retained while needed for an enabled connection, and should be removed or revoked when that connection ends. Hosting logs and backups follow the relevant provider's retention settings; deleted records may remain in backups until those backups expire.
Chorus restricts dashboard access and uses HTTPS for hosted traffic. No storage or transmission method is completely secure. Authorized workspace operators can access the brands managed in that workspace.
Your choices and requests
You can revoke social or Google access in the relevant provider's account settings. Revocation does not automatically delete Chorus records or posts already published. To request access, correction, or deletion of information, follow our data deletion and contact instructions. Rights may vary by jurisdiction.
Other information
Chorus is intended for authorized business editors and is not directed to children under 13. Providers may process information in the United States and other countries where they operate. We will update this page and its effective date when our practices change.
Contact
Contact The Atlara Firm LLC using our contact form. Identify your message as a Chorus privacy request.