Privacy Policy

When you use Atlas Job OS we collect:

• Account data — email address and hashed password (or OAuth provider token).
• CV / résumé text — extracted from documents you upload so Atlas can match jobs and draft outreach messages.
• Job search history — the searches Atlas runs on your behalf and the jobs it saves to your pipeline.
• Outreach messages — draft emails Atlas generates for your review before sending.
• Usage telemetry — token counts and cost metrics, used only for billing and service health. No message content is included.
• Launch waitlist — your email address, the consent version and time, the page you signed up from, and, if you arrived from one of our campaign links, the campaign tags (source, medium and campaign names) from that link. A repeat sign-up with the same address keeps the original tags.

• To operate the Atlas agent: run job searches, score matches against your CV, and draft outreach.
• To read job-related Gmail threads (recruiter replies, interview invites, application confirmations) so Atlas can track your pipeline. Atlas does not send mail on your behalf — outreach drafts are prepared in Atlas and you send them yourself from Gmail.
• To improve reliability: error logs and performance traces (via Sentry). These never include CV text or message bodies.
• To email you once when Atlas for Windows and Mac launches, if you joined the waitlist. Campaign tags are used only to see which of our links brought people to the list.
• We do not sell your data or use it to train AI models.

Your data is stored in a PostgreSQL database hosted on Microsoft Azure (West Europe region). CV text and agent memory files are stored as plain text files on the same server, accessible only to your user account.

• Account data is retained until you delete your account.
• Job search history and outreach drafts are retained until you delete them or close your account.
• CV text is replaced each time you upload a new CV.
• Waitlist entries are deleted 365 days after sign-up, or sooner on request to Team@atlasjob.tech. Deleting an Atlas account does not remove a waitlist entry; email us to remove it.

Deleting your account

• You can delete your account yourself at any time from Settings → Privacy & data → Delete workspace, or by emailing Team@atlasjob.tech.
• Deletion takes effect immediately: you are signed out on every device and the account can no longer be used. If you delete it from Settings, we also email you a confirmation with the exact date your data will be erased.
• Your data is then kept for 30 days so that an accidental or unauthorised deletion can be undone. If you change your mind, email Team@atlasjob.tech within those 30 days and we will restore your account with its data intact.
• After 30 days your data is permanently erased and cannot be recovered: your profile, CV files and text, saved jobs, chat history, outreach drafts and agent memory. Any Google or Gmail access you granted is revoked and the stored tokens are deleted.
• We keep only a minimal deletion record (the relevant dates, an internal account ID, and a one-way hash of your email address rather than the address itself) so we can show the deletion was carried out.

• Google Sign-In (OAuth 2.0) — when you choose "Continue with Google" on the login or signup page, Atlas Job receives your name, email address, and profile picture from Google. We use this data only to create and identify your account. We request the minimum scopes possible (openid, email, profile) and never the ability to read, send, or modify any Google services on your behalf through this flow. Atlas does not store your Google password; authentication is handled entirely by Google. Your sign-in data is retained for as long as your Atlas Job account is active and is deleted 30 days after you delete your account (see 4. Data Retention). You can revoke Atlas Job's access at any time via myaccount.google.com/permissions.
• Google Gmail API (metadata-only) — used only when you explicitly connect your Gmail account on the Integrations page. This is a separate, optional flow from Google Sign-In above. Atlas requests two scopes: gmail.metadata (read message headers — From, To, Subject, Date — plus the auto-generated snippet Google attaches to each message, used to detect recruiter replies, interview invites, and application status updates that match jobs in your Atlas pipeline) and gmail.labels (read your label list so Atlas can tag tracked threads with a dedicated "Atlas" label for your own inbox organisation). Atlas does not request gmail.readonly, gmail.send, gmail.compose, or gmail.modify — it cannot read full message bodies or attachments, and it cannot send, draft, delete, or alter any message in your mailbox. Gmail metadata is processed in-memory to extract job-related signals (sender, subject, snippet); only the matched metadata is persisted, never message bodies. You can disconnect Gmail at any time from Settings → Integrations, which immediately revokes Atlas's access and deletes the stored OAuth tokens. You can also revoke access independently at myaccount.google.com/permissions.
• Google Vertex AI (Gemini) — CV text and job context are sent to Gemini to power the Atlas agent. Data is processed under Google's standard API terms and is not used to train Google's models.
• Sentry — error monitoring. No personal data or message content is included in error reports.
• Resend — email delivery. Resend sends our service emails and, when Atlas for Windows and Mac launches, the one launch email to people on the waitlist, so it receives the recipient address and message content for those emails.

Atlas Job OS publishes an optional companion browser extension. It is not required to use Atlas, and it does nothing until you sign in to your Atlas Job OS account and ask Atlas to run a job search. This section describes the extension specifically.

What the extension does

When you ask Atlas to search for jobs, the extension opens job-board pages (such as LinkedIn, Indeed, Reed, Adzuna, CV-Library, Glassdoor, Totaljobs and Google Jobs) in tabs it creates, reads the job listings on those pages, and sends the listing details to your Atlas account so Atlas can score them against your CV and add them to your pipeline. While the extension is driving a tab, it displays a visible on-page indicator reading "Atlas Job OS is browsing this page for you" so it is always clear when automation is active.

What the extension reads

• Job listing content — the title, company, location, salary and description text on job-board pages, read from the tabs the extension opened for your search.
• Page addresses of those tabs — the URLs of the job-board pages visited as part of a search, so listings can be de-duplicated and linked back to their source.
• Your Atlas session cookie — the extension reads your existing atlasjob.tech login cookie, and stores a short-lived connection token in the browser's local extension storage, purely to prove that requests to the Atlas backend are coming from you. It never reads cookies for any other website.
• Page screenshots — the extension can capture an image of a job-board page it opened, so Atlas can interpret listings that cannot be read from the page text alone. This uses the browser's debugger interface, which is why your browser may display a notification bar while a search is running.

What the extension does not do

• It does not monitor your general browsing. It only reads pages in the tabs it opened for a search you started, not your other tabs, and not your browsing history.
• It does not read your email, messages, or chats. Gmail access is a separate, optional feature of the Atlas web app and is not part of the extension.
• It does not read passwords, payment details, banking pages, or any form you fill in.
• It does not collect your location, and does not use the browser's geolocation.
• It contains no remotely-loaded or remotely-executed code. All of its code ships inside the extension package and is reviewed by the Chrome Web Store.
• It does not show ads, and includes no advertising or analytics trackers.

Why it asks for access to all websites

The extension requests permission for all sites because job boards span many different domains, and job listings routinely redirect to employer career sites and applicant-tracking systems that cannot be listed in advance. The permission is broad by necessity, but the extension only acts on pages opened as part of a search you initiated.

Where extension data goes and how long it is kept

Job listings captured by the extension are sent to your Atlas Job OS account and stored on Microsoft Azure under the same terms as the rest of your data — see 3. Data Storage and 4. Data Retention above. Extension data is never sold, never transferred to third parties for advertising, never used to determine creditworthiness or for lending purposes, and never used to train AI models. It is used solely to provide the job-search features you asked for.

You can remove the extension at any time from your browser's extensions page. Removing it stops all data collection by the extension immediately and does not affect your Atlas account.

You have the right to access, correct, export, or delete your personal data at any time. You can export your data (Settings → Privacy & data → Export everything) and delete your account (Settings → Privacy & data → Delete workspace) yourself; account deletion follows the 30-day process described in 4. Data Retention. For anything else, or if you would rather we handle it, email us at Team@atlasjob.tech.

• Sign-in cookies — NextAuth sets a session cookie, a CSRF cookie and a callback cookie so you stay signed in and sign-in requests cannot be forged.
• Cookie preference — atlas_cookie_consent remembers the choice you made on the cookie banner.
• Campaign link — atlas_utm is set only when you arrive from one of our campaign links. It records which one, and lasts 90 days.
• Theme — your light or dark theme preference is kept in your browser's local storage.
• We use no advertising or analytics trackers.

Questions about this policy? Team@atlasjob.tech