Privacy Policy

When you use Atlas Job OS we collect:

• Account data — email address and hashed password (or OAuth provider token).
• CV / résumé text — extracted from documents you upload so Atlas can match jobs and draft outreach messages.
• Job search history — the searches Atlas runs on your behalf and the jobs it saves to your pipeline.
• Outreach messages — draft emails Atlas generates for your review before sending.
• Usage telemetry — token counts and cost metrics, used only for billing and service health. No message content is included.

• To operate the Atlas agent: run job searches, score matches against your CV, and draft outreach.
• To read job-related Gmail threads (recruiter replies, interview invites, application confirmations) so Atlas can track your pipeline. Atlas does not send mail on your behalf — outreach drafts are prepared in Atlas and you send them yourself from Gmail.
• To improve reliability: error logs and performance traces (via Sentry). These never include CV text or message bodies.
• We do not sell your data or use it to train AI models.

Your data is stored in a PostgreSQL database hosted on Microsoft Azure (West Europe region). CV text and agent memory files are stored as plain text files on the same server, accessible only to your user account.

• Account data is retained until you delete your account.
• Job search history and outreach drafts are retained until you delete them or close your account.
• CV text is replaced each time you upload a new CV.
• You can request full deletion at any time by emailing us.

• Google Sign-In (OAuth 2.0) — when you choose "Continue with Google" on the login or signup page, Atlas Job receives your name, email address, and profile picture from Google. We use this data only to create and identify your account. We request the minimum scopes possible (openid, email, profile) and never the ability to read, send, or modify any Google services on your behalf through this flow. Atlas does not store your Google password; authentication is handled entirely by Google. Your sign-in data is retained for as long as your Atlas Job account is active and is deleted within 30 days of account closure. You can revoke Atlas Job's access at any time via myaccount.google.com/permissions.
• Google Gmail API (metadata-only) — used only when you explicitly connect your Gmail account on the Integrations page. This is a separate, optional flow from Google Sign-In above. Atlas requests two scopes: gmail.metadata (read message headers — From, To, Subject, Date — plus the auto-generated snippet Google attaches to each message, used to detect recruiter replies, interview invites, and application status updates that match jobs in your Atlas pipeline) and gmail.labels (read your label list so Atlas can tag tracked threads with a dedicated "Atlas" label for your own inbox organisation). Atlas does not request gmail.readonly, gmail.send, gmail.compose, or gmail.modify — it cannot read full message bodies or attachments, and it cannot send, draft, delete, or alter any message in your mailbox. Gmail metadata is processed in-memory to extract job-related signals (sender, subject, snippet); only the matched metadata is persisted, never message bodies. You can disconnect Gmail at any time from Settings → Integrations, which immediately revokes Atlas's access and deletes the stored OAuth tokens. You can also revoke access independently at myaccount.google.com/permissions.
• Google Vertex AI (Gemini) — CV text and job context are sent to Gemini to power the Atlas agent. Data is processed under Google's standard API terms and is not used to train Google's models.
• Sentry — error monitoring. No personal data or message content is included in error reports.

Atlas Job OS publishes an optional companion browser extension. It is not required to use Atlas, and it does nothing until you sign in to your Atlas Job OS account and ask Atlas to run a job search. This section describes the extension specifically.

What the extension does

When you ask Atlas to search for jobs, the extension opens job-board pages (such as LinkedIn, Indeed, Reed, Adzuna, CV-Library, Glassdoor, Totaljobs and Google Jobs) in tabs it creates, reads the job listings on those pages, and sends the listing details to your Atlas account so Atlas can score them against your CV and add them to your pipeline. While the extension is driving a tab, it displays a visible on-page indicator reading "Atlas Job OS is browsing this page for you" so it is always clear when automation is active.

What the extension reads

• Job listing content — the title, company, location, salary and description text on job-board pages, read from the tabs the extension opened for your search.
• Page addresses of those tabs — the URLs of the job-board pages visited as part of a search, so listings can be de-duplicated and linked back to their source.
• Your Atlas session cookie — the extension reads your existing atlasjob.tech login cookie, and stores a short-lived connection token in the browser's local extension storage, purely to prove that requests to the Atlas backend are coming from you. It never reads cookies for any other website.
• Page screenshots — the extension can capture an image of a job-board page it opened, so Atlas can interpret listings that cannot be read from the page text alone. This uses the browser's debugger interface, which is why your browser may display a notification bar while a search is running.

What the extension does not do

• It does not monitor your general browsing. It only reads pages in the tabs it opened for a search you started, not your other tabs, and not your browsing history.
• It does not read your email, messages, or chats. Gmail access is a separate, optional feature of the Atlas web app and is not part of the extension.
• It does not read passwords, payment details, banking pages, or any form you fill in.
• It does not collect your location, and does not use the browser's geolocation.
• It contains no remotely-loaded or remotely-executed code. All of its code ships inside the extension package and is reviewed by the Chrome Web Store.
• It does not show ads, and includes no advertising or analytics trackers.

Why it asks for access to all websites

The extension requests permission for all sites because job boards span many different domains, and job listings routinely redirect to employer career sites and applicant-tracking systems that cannot be listed in advance. The permission is broad by necessity, but the extension only acts on pages opened as part of a search you initiated.

Where extension data goes and how long it is kept

Job listings captured by the extension are sent to your Atlas Job OS account and stored on Microsoft Azure under the same terms as the rest of your data — see 3. Data Storage and 4. Data Retention above. Extension data is never sold, never transferred to third parties for advertising, never used to determine creditworthiness or for lending purposes, and never used to train AI models. It is used solely to provide the job-search features you asked for.

You can remove the extension at any time from your browser's extensions page. Removing it stops all data collection by the extension immediately and does not affect your Atlas account.

You have the right to access, correct, export, or delete your personal data at any time. To exercise these rights, email us at Team@atlasjob.tech.

We use a single session cookie to keep you logged in. No third-party tracking or advertising cookies are used.

Questions about this policy? Team@atlasjob.tech