Atlas HiresAtlas Hires

Data Protection & Privacy Policy

Effective: April 2026 | Royal Atlas International FZ LLC

1. Introduction

Atlas Hires is committed to protecting the privacy and security of personal data. This policy outlines how we collect, process, store, and protect data in compliance with UAE Federal Decree-Law No. 45/2021 (PDPL), GDPR (for EEA users), and India's DPDP Act 2023.

2. Data We Collect

From Employers/Recruiters

  • Company name, registration details, contact information
  • User account details (name, email, phone)
  • Verification documents (company registration, trade license, RPSL)
  • Usage logs (searches, unlocks, uploads)

From Candidates

  • Personal information: name, date of birth, gender, nationality, address
  • Contact details: phone, email
  • Professional details: role, experience, education, skills, certifications
  • Maritime-specific: COC grade, CDC details, INDOS number, sea service records
  • Resume files (PDF, DOC, DOCX, HTML)

3. How We Use Data

PurposeLegal Basis
AI-powered resume extractionLegitimate interest / Contract
Matching candidates to jobsLegitimate interest
Enabling employer search & filtersContract performance
Account verification & fraud preventionLegal obligation
Platform analytics & improvementLegitimate interest
Credit billing & transactionsLegal obligation

4. AI Processing

  • We use Google Gemini AI to extract structured information from uploaded resumes.
  • No AI model is trained on user data. Resume content is processed per-request and not retained by the AI provider.
  • Users can request re-extraction or manual correction of AI-extracted data at any time.

5. Data Storage & Security

Storage

  • Self-hosted PostgreSQL on Google Cloud Platform
  • Google Cloud Storage for files, encrypted at rest
  • No third-party cloud databases

Security

  • TLS 1.2+ encryption in transit
  • Database not exposed to internet
  • JWT authentication, rate limiting
  • Passwords hashed with bcrypt
  • Organization-level data isolation

6. Data Sharing

We Do NOT

  • Sell personal data to third parties
  • Share data between competing employers
  • Allow scraping or bulk export
  • Provide data to advertisers

We Share With

  • Google Cloud — infrastructure hosting
  • Google Gemini AI — extraction only, no retention
  • Employers — only their unlocked/uploaded data
  • Law enforcement — only with valid court order

7. Data Retention

Data TypeRetention
Active accountsDuration + 2 years
Uploaded CVsDuration + 1 year
Applicant submissions2 years
Audit logs3 years
Financial records5 years
Deleted accountsPurged within 30 days

8. Your Rights

Access your data
Correct inaccurate data
Delete your data
Data portability
Object to processing
Withdraw consent

To exercise any right, email info@atlashires.com. Response within 30 days.

9. Breach Notification

In the event of a data breach, affected users will be notified within 72 hours. Relevant data protection authorities will be informed as required by law.

10. Contact

Data Protection Officer
Royal Atlas International FZ LLC
Email: info@atlashires.com
Website: atlashires.com

Last updated: April 2026

Back to Atlas Hires