Legal
Terms of Service, Privacy Policy, Accuracy Disclaimer, and Data Attribution for ATLAS-3D.
Version 1.0 · Effective [EFFECTIVE DATE]
Before publishing: every [BRACKETED] value below must be replaced with your real details, and this document must be reviewed by a qualified lawyer in your jurisdiction. It was drafted to match what the software actually does, but it is not legal advice and has not been reviewed by a lawyer.
Terms of Service
1. Who we are
ATLAS-3D (the "Service") is operated by [LEGAL ENTITY NAME], [COMPANY NUMBER], registered at [REGISTERED ADDRESS] ("we", "us"). Contact: [CONTACT EMAIL].
2. Acceptance
By accessing or using the Service you agree to these Terms. If you do not agree, do not use the Service. If you use the Service on behalf of an organisation, you confirm you are authorised to bind that organisation.
3. What the Service is — and is not
The Service generates indicative three-dimensional reconstructions and estimates of places, derived from public open data and satellite imagery. It is a visualisation and screening tool.
The Service is not a land survey, a valuation, an engineering assessment, a flood risk assessment, a structural analysis, an environmental impact assessment, a legal boundary determination, or professional advice of any kind. It must not be used as the basis for any decision that requires professional certification. See the Accuracy Disclaimer, which forms part of these Terms.
4. Permitted use
Subject to these Terms, you may use the Service for lawful purposes. You must not:
- use the Service in breach of the terms of any upstream data provider listed under Attribution;
- place automated, bulk, or scripted load on the Service or, through it, on the public third-party services it depends on;
- present outputs of the Service as survey-grade, certified, or authoritative;
- remove, obscure, or falsify attribution or provenance labelling in exported material;
- attempt to circumvent access controls, or use the Service to infringe the rights of others.
5. Your own API keys
The Service lets you optionally supply your own third-party API keys (for example Mapillary, OpenWeather, or dados.gov.br). Those keys are used only in your browser, are sent directly from your browser to the relevant provider, and are never transmitted to or stored by us. You remain solely responsible for your use of those keys and for complying with each provider's terms and any charges they incur.
6. Third-party data and availability
The Service depends on public third-party data sources and services that we do not control and do not pay for. They may change, rate-limit, degrade, or disappear without notice. We give no guarantee of availability, continuity, or uninterrupted operation, and we may modify or discontinue any part of the Service at any time.
7. Intellectual property
The Service's software, interface, and presentation are owned by us or our licensors. Underlying geographic data remains the property of its respective sources and is licensed under their own terms, which continue to apply to anything you export — see Attribution. Nothing in these Terms transfers ownership of third-party data to you.
8. No warranty
The Service is provided "as is" and "as available", without warranties of any kind, express or implied, including any implied warranty of merchantability, fitness for a particular purpose, accuracy, or non-infringement, to the fullest extent permitted by law.
9. Limitation of liability
To the fullest extent permitted by law, we are not liable for any indirect, incidental, special, consequential, or exemplary loss, nor for loss of profit, revenue, data, goodwill, or business opportunity, arising from or connected to your use of, or reliance on, the Service or its outputs. Our total aggregate liability arising out of or relating to the Service is limited to the greater of [AMOUNT, e.g. GBP 100] or the total amount you paid us for the Service in the [12] months before the claim arose.
Nothing in these Terms excludes or limits liability that cannot lawfully be excluded or limited, including liability for death or personal injury caused by negligence, or for fraud.
10. Indemnity
You agree to indemnify us against claims, losses, and reasonable costs arising from your breach of these Terms, your misuse of the Service, or your use of its outputs in breach of section 3 or 4.
11. Changes
We may update these Terms. Material changes will be reflected in the version and effective date above. Continued use after a change constitutes acceptance.
12. Governing law
These Terms are governed by the laws of [JURISDICTION], and the courts of [JURISDICTION] have exclusive jurisdiction, without affecting any mandatory consumer protections available to you locally.
Privacy Policy
The short version: there is no account, no tracking, no advertising, and no analytics. We hold essentially nothing about you. The detail below is complete and describes the software as actually built.
1. Controller
[LEGAL ENTITY NAME], [REGISTERED ADDRESS]. Data protection contact: [CONTACT EMAIL]. [APPOINT AN EU/UK REPRESENTATIVE IF REQUIRED — see risk register]
2. What we do not do
- No user accounts, sign-up, or login.
- No advertising, no advertising identifiers, no profiling.
- No analytics or product-telemetry service of any kind.
- No cookies are set by the Service.
- We do not sell, rent, or share personal data.
3. Data stored in your own browser
This stays on your device, is readable only by this site, is never transmitted to us, and can be erased at any time by clearing your browser's site data.
| Key | Store | Purpose | Lifetime |
|---|---|---|---|
atlas3dIntroSeen | sessionStorage | Remembers you have already seen the intro so it is not replayed. | Until the tab closes |
atlas3dZones | localStorage | Zone snapshots you explicitly save (coordinates, statistics, scores) so you can compare them. Capped at the 24 most recent. | Until you clear it |
Neither contains identifiers about you. Because they are not used for tracking and are limited to functionality you requested, no consent banner is presented.
4. Server logs
The Service is hosted on Railway. Like any web host, it processes standard request logs — IP address, timestamp, requested URL, user agent — for security, abuse prevention, and reliability. Where GDPR applies, our legal basis is legitimate interest (Article 6(1)(f)) in operating a secure service. Retention: [RETENTION PERIOD — confirm against Railway's settings].
5. Third parties your browser contacts directly
The Service runs in your browser and requests data straight from public providers. Those requests do not pass through us, and we never receive their contents — but each provider will see your IP address and the coordinates or place you are looking at, and each has its own privacy policy. Requests are only made for features you actually use.
| Provider | Used for |
|---|---|
OpenStreetMap — Nominatim, and Overpass mirrors (overpass-api.de,
overpass.kumi.systems, overpass.private.coffee,
maps.mail.ru) | Place search and map data |
Esri (server.arcgisonline.com) | Satellite imagery tiles |
OSRM (router.project-osrm.org) | Route calculation |
| Open-Meteo | Current weather and the historical climate archive |
| OpenWeather | Weather and air quality — only if you supply a key |
| NASA GIBS | Night-lights and historic satellite imagery |
| RainViewer | Precipitation radar frames |
IBGE (servicodados.ibge.gov.br, geoservicos.ibge.gov.br) |
Brazilian municipal boundaries, census and geoscience layers |
| Open-Elevation / OpenTopoData | Terrain elevation for the flood layer |
| Mapillary | Street-level photos — only if you supply a token |
| dados.gov.br | Open-data catalogue search — only if you supply a key |
| unpkg, cdnjs | JavaScript libraries and icon fonts |
If you would rather not contact a provider, do not use the feature that calls it. Fonts are self-hosted, so no font provider is contacted.
6. Your API keys
Keys you enter are held only in the page's form fields for the lifetime of that tab. They are never written to storage, never logged, and never sent to us — only directly to the provider they belong to.
7. Your rights
Where GDPR or UK GDPR applies, you have rights of access, rectification, erasure, restriction, objection, and portability, and may complain to your supervisory authority. Where the CCPA/CPRA applies, you have rights to know, delete, correct, and opt out of sale or sharing — we do not sell or share personal information. Because we hold no account data, in practice the only personal data we process is in server logs; a request should include enough detail (such as approximate time and IP) for us to locate the relevant entries. Contact [CONTACT EMAIL].
8. International transfers
Our hosting region is [REGION — currently US West on Railway]. The third-party providers above operate globally, and requests from your browser go directly to them.
9. Children
The Service is not directed at children under [13/16] and we do not knowingly collect their personal data.
10. Changes
Changes appear here with an updated version and effective date.
Accuracy Disclaimer
Every figure the Service produces is an estimate derived from public data, not a measurement of the real world. Do not use it as the sole basis for any financial, engineering, safety, planning, insurance, or legal decision.
Building heights and geometry
Heights come from several sources of differing reliability, and the Service labels which one was used for each building: an explicit OpenStreetMap tag; a LiDAR survey (São Paulo areas); a height inferred from the length of the building's shadow in satellite imagery; a count of window rows in oblique photography; or a typology-based estimate from the building's footprint and surroundings. The latter three are inferences, not measurements, and can be substantially wrong for individual buildings. Footprints not present in the source data may be detected from imagery and extruded at a neighbourhood median height; these are clearly marked as synthetic infill and are not real records of real buildings.
Simulated infrastructure layers
Where no open data exists for a planner layer in a given area, the Service may generate a plausible estimate from the road network, buildings, and terrain, badged "simulated" in the interface. Simulated layers are illustrative only. They do not represent real pipes, cables, drains, poles, or masts, and must never be used for excavation, utility location, or any engineering purpose. Always obtain authoritative utility records before breaking ground.
Site scores, solar, flood and carbon figures
Site scores are heuristics computed from the data in the captured zone using published, disclosed formulas and stated assumptions. Solar figures are indicative roof-area yield estimates, not a feasibility study or a generation guarantee. The flood layer visualises a uniform water level over sampled public terrain data; it is not a flood risk assessment and models neither drainage, defences, nor hydrology. Carbon figures are rough estimates and do not represent verified, issued, or tradable carbon credits under any standard or registry.
Crime data
Where shown, crime information comes from a limited third-party sample. Its per-incident coordinates are placeholders rather than true locations, its coverage is uneven and concentrated in particular regions, and it is historical. It is aggregated to municipality level for illustration only. It must not be read as a statement about the safety, character, or reputation of any specific place, street, property, or person.
Imagery, currency, and boundaries
Satellite and street-level imagery may be months or years old and may not reflect current conditions. Administrative boundaries are for orientation only and carry no legal weight regarding property lines, ownership, or jurisdiction.
Exported material
Dossiers, postcards, 3D models and CityJSON exports carry these same limitations and remain subject to the licences of their underlying data. If you share an export, keep its provenance and disclaimer intact.
Data Attribution & Licences
The Service is built on open data and open source. These licences bind us and, where you export material, they bind you too.
| Source | Used for | Licence / terms |
|---|---|---|
| © OpenStreetMap contributors | Buildings, roads, land use, points of interest | ODbL 1.0 — attribution and share-alike apply to derived databases |
| Microsoft Global ML Building Footprints | Gap-filling footprints | ODbL 1.0 |
| Esri World Imagery | Satellite basemap and rooftop texture | Esri terms of use — [CONFIRM COMMERCIAL ENTITLEMENT] |
| NASA GIBS / VIIRS / MODIS | Night lights, historic imagery | Public domain, attribution requested |
| IBGE | Brazilian boundaries, population, geoscience | Open government data |
| Open-Meteo & ERA5 | Weather and climate archive | CC BY 4.0 / Copernicus terms |
| OSRM, Nominatim | Routing and geocoding | Public demo services, subject to usage policies |
| RainViewer | Precipitation radar | Provider terms |
| Open-Elevation, OpenTopoData (SRTM) | Terrain | Provider terms / public domain |
| Mapillary | Street-level facade photos | CC BY-SA, via your own token |
| PMSP 2017 LiDAR | Measured heights in São Paulo | Open municipal data |
| crimebrasil.com.br | Crime sample | Third-party public API — see disclaimer |
| three.js, Leaflet | Rendering and 2D mapping | MIT / BSD-2-Clause |
| Font Awesome Free | Interface icons | CC BY 4.0 |
| Big Shoulders Display | Display typeface | SIL Open Font License 1.1 |
| 3D vehicle models | Traffic | [CONFIRM PROVENANCE AND LICENCE OF EACH MODEL] |
If you believe any material here is used incorrectly or without proper licence, contact [CONTACT EMAIL] and we will investigate promptly.