AttoPrivacy
Local-first by design. Your family vault stays on your computer unless you choose to share.
Vault data
Project files live under ~/AttoVault/ on your machine. There is no Atto cloud vault. Optional family share is something you opt into and should sit behind access controls you configure.
What we process for checkout
Stripe handles payment. Our license Worker receives checkout session metadata (session id, buyer email when Stripe provides it) to issue a signed machine license and, if configured, email a claim link via Resend. We do not need your certificates or tree to sell the kit.
AI / MCP (optional)
AI helpers are optional. Strip-safe packs avoid full SSNs. MCP never silently Approves tree changes. Skip AI entirely if you prefer — the Mac kit still works.
No government data pipeline
Atto does not scrape Prenot@Mi, auto-download Antenati acts into your tree, or endorse government systems. Browser deep links only when you open them.