Privacy Policy

How we collect, use, and protect your information.

Last Updated: April 25, 2026

1. Introduction

Sage & Atlas Management Group ("Company," "we," "us," or "our") operates the Atlas-MPS platform ("Service"), a software-as-a-service solution for healthcare distribution management. This Privacy Policy describes how we collect, use, store, and disclose information when you access or use our Service, visit our website, or otherwise interact with us.

We are committed to protecting the privacy and security of your information, including any data that may be subject to healthcare regulations such as HIPAA. By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Service.

2. Information We Collect

We collect information in the following categories:

Personal Information

When you register for an account, request a demo, or contact us, we may collect:

  • Full name, job title, and professional role.
  • Email address and phone number.
  • Company or organization name and address.
  • Billing and payment information (processed through our secure payment providers).
  • Professional license or credential information, where applicable.

Usage Data

We automatically collect information about how you interact with the Service, including:

  • Pages visited, features used, and actions taken within the platform.
  • Date, time, and duration of sessions.
  • Search queries and navigation paths within the Service.
  • Error logs and performance data.

Device & Technical Information

We may collect information about the device and connection you use to access the Service, including:

  • IP address and approximate geographic location.
  • Browser type and version, operating system, and device type.
  • Screen resolution and language preferences.
  • Referring URL and access timestamps.

Customer Data

In the course of using the Service, you and your authorized users may input business data such as order records, customer information, inventory data, invoices, and related operational data ("Customer Data"). We process this data on your behalf and in accordance with your instructions as outlined in these Terms and any applicable data processing agreement.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Service Delivery: To provide, operate, and maintain the Atlas-MPS platform and its features.
  • Account Management: To create and manage your account, authenticate users, and process subscription payments.
  • Communication: To send you service-related notices, updates, security alerts, and support messages.
  • Improvement: To analyze usage patterns, diagnose technical issues, and improve the functionality and user experience of the Service.
  • Security: To detect, prevent, and respond to fraud, unauthorized access, and other security threats.
  • Compliance: To comply with applicable laws, regulations, and legal processes, including healthcare-related obligations.
  • Support: To respond to your inquiries, troubleshoot issues, and provide customer support.

We do not sell your personal information or Customer Data to third parties.

4. Data Sharing & Disclosure

We may share your information only in the following circumstances:

  • Service Providers: We engage trusted third-party vendors who perform services on our behalf, such as cloud hosting, email delivery, and analytics. These providers are contractually obligated to protect your information and use it only for the purposes we specify.
  • Legal Requirements: We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect the rights, property, or safety of our Company, users, or the public.
  • Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.
  • With Your Consent: We may share information with third parties when you have provided explicit consent to do so.

We do not share Customer Data with third parties for their own marketing or advertising purposes.

5. Data Security

We implement and maintain industry-standard administrative, technical, and physical safeguards designed to protect your information against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

  • Encryption of data in transit (TLS/SSL) and at rest.
  • Access controls and role-based permissions to limit data access to authorized personnel.
  • Regular security assessments, vulnerability scanning, and penetration testing.
  • Secure data centers with physical access controls and environmental protections.
  • Employee training on data protection and privacy practices.
  • Incident response procedures for timely detection and mitigation of security events.

While we strive to protect your information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, but we are committed to promptly addressing any security incidents that may occur.

6. HIPAA & Healthcare Data

Atlas-MPS is designed to support healthcare distribution workflows. To the extent that our Service processes Protected Health Information ("PHI") as defined by the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"), we operate as a Business Associate and adhere to the following practices:

  • We enter into Business Associate Agreements ("BAAs") with covered entities as required by HIPAA.
  • We implement safeguards consistent with the HIPAA Security Rule to protect electronic PHI ("ePHI").
  • We restrict the use and disclosure of PHI to purposes permitted by the BAA and applicable law.
  • We provide breach notification in accordance with the HIPAA Breach Notification Rule.
  • We conduct periodic risk assessments and maintain documentation of our compliance efforts.
  • Our personnel who may access PHI receive HIPAA training and are subject to confidentiality obligations.

If you are a healthcare provider or entity subject to HIPAA and wish to use the Service in connection with PHI, please contact us at support@sageandatlas.com to discuss a BAA and ensure compliance requirements are met before transmitting PHI through the Service.

7. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience with the Service. These technologies include:

  • Essential Cookies: Required for the Service to function properly, including session management, authentication, and security cookies. These cannot be disabled.
  • Analytics Cookies: Help us understand how users interact with the Service by collecting usage data in aggregate form. This data helps us improve performance and usability.
  • Preference Cookies: Store your settings and preferences, such as language and display options, to personalize your experience.

You can manage cookie preferences through your browser settings. Disabling certain cookies may limit the functionality of the Service. We do not use cookies for third-party advertising purposes.

8. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Specific retention practices include:

  • Account Data: Retained for the duration of your subscription and for a reasonable period afterward to facilitate account reactivation or address disputes.
  • Customer Data: Retained during your subscription. Upon termination, you may request an export of your Customer Data within thirty (30) days. After this period, Customer Data may be deleted from our active systems.
  • Usage & Analytics Data: Retained in aggregated or anonymized form for up to twenty-four (24) months for product improvement and analytics purposes.
  • Legal & Compliance Records: Retained as required by applicable law, including healthcare record retention requirements.

When information is no longer needed, we securely delete or anonymize it in accordance with our data disposal procedures.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

  • Access: You may request a copy of the personal information we hold about you.
  • Correction: You may request that we correct inaccurate or incomplete personal information.
  • Deletion: You may request that we delete your personal information, subject to legal retention requirements and legitimate business needs.
  • Portability: You may request a machine-readable copy of your personal information for transfer to another service provider.
  • Restriction: You may request that we restrict the processing of your personal information in certain circumstances.
  • Objection: You may object to the processing of your personal information for certain purposes.

To exercise any of these rights, please contact us at support@sageandatlas.com. We will respond to your request within thirty (30) days, or as required by applicable law. We may ask you to verify your identity before fulfilling your request.

10. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18, we will take steps to promptly delete that information. If you believe a child has provided us with personal information, please contact us at support@sageandatlas.com.

11. International Data Transfers

The Service is operated from the United States. If you access the Service from outside the United States, you acknowledge and consent to the transfer, storage, and processing of your information in the United States, where data protection laws may differ from those of your jurisdiction.

We implement appropriate safeguards for international data transfers as required by applicable law, including standard contractual clauses where necessary to ensure that your information receives an adequate level of protection regardless of where it is processed.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. If we make material changes, we will notify you by email or by posting a prominent notice within the Service at least thirty (30) days before the changes take effect.

We encourage you to review this Privacy Policy periodically. The "Last Updated" date at the top of this page indicates when this policy was last revised. Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Sage & Atlas Management Group
Email: support@sageandatlas.com

For general legal inquiries, you may also reach us at support@sageandatlas.com.