Privacy Policy

This Privacy Policy explains how Atlas HR ("Atlas HR", "we", "us", or "our") collects, uses, discloses, and safeguards information when you use our website and HR platform (the "Services").

Atlas HR is an HR platform, which means we often process personal data about our customers' employees on their behalf. In that context our customer is the data controller and Atlas HR acts as a data processor. For our website and account data, Atlas HR is the controller.

Account and contact information: name, work email, company, role, and billing details you provide when you create an account or contact us.

Employee and HR data: records our customers upload or generate in the platform, such as employee profiles, documents, leave, payroll references, performance notes, and case data.

Usage and device data: log data, IP address, browser type, pages viewed, and similar information collected automatically to operate and improve the Services.

Cookies and similar technologies used to keep you signed in, remember preferences, and understand how the Services are used.

To provide, maintain, secure, and improve the Services; to authenticate users and manage access; to process payments; to respond to support requests; to send service and, where permitted, marketing communications; and to comply with legal obligations.

Atlas AI features may process content you submit to generate drafts, research, and compliance guidance. AI output is assistive and subject to human review; we do not use customer HR data to train third-party foundation models without a lawful basis and appropriate controls.

Where applicable law (such as the GDPR) requires it, we rely on one or more of the following legal bases: performance of a contract, our legitimate interests, your consent, and compliance with legal obligations.

We share information with service providers (subprocessors) who help us run the Services — for example hosting, authentication, payments, and analytics — under contracts that require appropriate safeguards.

We may disclose information to comply with law, enforce our agreements, protect rights and safety, or in connection with a merger, acquisition, or asset sale. We do not sell personal data.

Your information may be processed in countries other than your own. Where we transfer personal data internationally, we use appropriate safeguards such as Standard Contractual Clauses.

We retain personal data for as long as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Customers can request export or deletion of workspace data as described in our documentation.

We use technical and organizational measures including role-based access controls, row-level security for organization data, audit logging, and encryption in transit. No method of transmission or storage is completely secure, but we work to protect your information.

Depending on your location, you may have rights to access, correct, delete, restrict, or object to the processing of your personal data, and to data portability. To exercise these rights, contact us using the details below. If your data is held by an Atlas HR customer as controller, we will refer your request to them.

The Services are intended for business use and are not directed to children. We do not knowingly collect personal data from children.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, provide additional notice.

If you have questions about this Privacy Policy or our data practices, contact us at privacy@atlashr.xyz.