GDPR Compliance

1. Overview

The General Data Protection Regulation (GDPR) is a comprehensive data protection law in the European Union (EU) that regulates how personal data of EU residents is collected, processed, and stored. Atlas is committed to high standards of information security and compliance with the GDPR for all users.

2. Data Processor vs. Data Controller

Under the GDPR, roles are defined to determine responsibilities regarding personal data processing:

• Data Controller: You, the user, act as the controller of the personal information contained in the resumes and job descriptions you submit.
• Data Processor: Atlas serves as the processor. We process the files and details you submit strictly to analyze resume scores, formatting, and ATS keywords.
• Infrastructure Partner: Puter.js handles authentication and decentralized user storage. Because your files are hosted in your own account sandbox, you maintain control of the storage environment.

3. Your Data Rights Under GDPR

The GDPR grants European citizens specific rights regarding their personal data. Atlas ensures these rights are supported for all users:

• Right of Access (Article 15): You have the right to request access to and receive copies of all personal data we process. All resumes and AI feedback are visible in your dashboard at any time.
• Right to Rectification (Article 16): You have the right to modify or correct any inaccurate data. You can re-upload resumes or change job description metrics anytime.
• Right to Erasure / "Right to be Forgotten" (Article 17): You have the right to delete your personal data. We facilitate this directly in the app. Navigating to the /wipe path allows you to delete all uploaded files and keys permanently with a single click.
• Right to Data Portability (Article 20): You can copy and paste your AI reviews and optimization suggestions directly from our web pages to transfer them to other applications.
• Right to Restrict Processing (Article 18) & Right to Object (Article 21): You can choose not to upload data or stop using our service at any point.

4. Lawful Basis for Processing

We process your personal data under the following lawful bases:

• Performance of a Contract: Processing is necessary to provide the resume analysis and dashboard metrics you request when using the service.
• Consent: When you upload a resume or input data, you consent to our processing of that data for ATS and optimization analysis.

5. Data Retention

We store your data only as long as your account exists or as necessary to provide you with the services. Because data is stored in your Puter.js sandbox, it will persist until you delete it or wipe your application storage via the /wipe route.

6. International Data Transfers

All cloud computations and data transfers are protected under strict security baselines. Since storage and AI integrations are managed through Puter.js and serverless cloud services, data is securely stored and processed in compliance with standard contractual clauses (SCCs) where international transfers occur.

7. Contact Our Data Protection Team

For questions regarding our GDPR compliance, data processing practices, or to exercise any of your data rights, please contact our team.