Privacy Policy

Atlas uses what you give it — your profile, your CV, your goal — to plan a move to work in another country. To do that, parts of your material are sent to Google's Gemini artificial-intelligence service. Feedback text and support messages also pass through Claude, by Anthropic, in an internal summary for the operator.

We do not sell your data, we show no advertising, we load no third-party analytics, and we do not use your data to train any artificial-intelligence model. Google does not use it to train its models either, under the terms that apply to Atlas's paid use of the Gemini API, and neither does Anthropic, with model training turned off on the operator's account.

Artificial intelligence in Atlas suggests; it decides nothing about you. No hiring, visa or credit decision is taken by Atlas.

You can edit most of your data in the app, and you can delete your whole account yourself, in Settings, at any time. Deletion is immediate.

This summary does not replace the sections below; they are the policy.

The controller of your personal data — the person who decides how and why it is processed — is Jan Furtado Saar, a natural person resident in Brazil, who operates Atlas.

Contact for anything in this policy, including exercising your rights: support@atlastruenorth.com. That address is the communication channel with data subjects required by the LGPD.

Atlas is a small-scale operation. As Brazilian regulation allows for small-scale processing agents, no data protection officer (encarregado) has been formally appointed; the controller answers the contact address personally.

Account: your email and your password. The password is held by the authentication service in hashed form — Atlas cannot read it. We also record the date you accepted these documents, the version you accepted, and the language you signed up in.

Profile: name, nationality, where you live now, your work-authorisation situation, the role you are after, experience, education, skills, languages, and the CV text you upload or paste. A CV photo, if you want one.

Journey: your goal, the phases of the plan, the gaps found, the tasks, the deadlines, and the record of what you completed and when.

Applications and network: the companies you track, the stage of each application, your notes, the company dossiers generated, the contacts you record, outreach messages, and — in interview preparation — the predicted questions, your own answers, and the critiques of them.

Documents: the CVs and cover letters you generate or edit in the app.

Conversations: the questions you ask Atlas and the answers you receive.

Preferences: language, theme, default daily capacity, and which in-app guides you have already seen.

AI usage: for each call we record which feature ran, which model, how many tokens it used, whether it succeeded, and when. That is what powers the usage panel and cost control. These records hold no text from your request.

Technical data: IP address, browser type, and the time and path of each request, which pass through our hosting and security providers, plus server error and access logs needed to run and diagnose the service.

Messages you send us: if you write to support@atlastruenorth.com, we receive your address and whatever your message contains.

We collect nothing from you outside Atlas. We do not buy data, and we do not enrich your profile with data from social networks or data brokers.

Some features let you record information about other people: recruiters, hiring managers and contacts you want to approach, and the companies they work for. You decide what goes in; Atlas only stores it for you and uses it to help you write to them.

Keep it to what you need: name, role, company, and professional contact details. Do not record sensitive information about anyone.

Atlas never contacts those people, never sends them anything, and never uses their data for any purpose of its own. Someone whose data was recorded by a user can write to support@atlastruenorth.com to have it removed.

Atlas does not ask for sensitive data — health, religion, political opinion, racial or ethnic origin, sex life or sexual orientation, union membership, genetic or biometric data.

Several fields are free text, and a CV can contain that kind of information. Please leave it out unless it matters to your goal. If you include it, it is processed only for the purpose you entered it for — including being sent to the artificial-intelligence provider to generate what you asked — and on the basis of your choice to provide it (LGPD, art. 11, I; GDPR, art. 9(2)(a)). You can remove it at any time by editing or deleting the content.

The CV photo is optional, and the service works fully without it. Atlas does not analyse the photo; it only places it on the CV you generate.

To run the service: read your CV, build and update your journey, generate documents, suggest companies and contacts, prepare you for interviews, answer your questions, and keep your progress between sessions.

To control cost and abuse: measure AI consumption per account and apply the limits described in the Terms.

For security: protect the sign-in forms against automated abuse, detect unauthorised access and failures, and investigate incidents.

For operational email: address confirmation, password recovery, and notices about relevant changes to the service or to these documents. Atlas sends no marketing email.

To answer you: when you write to us, to reply and to keep a record of the request.

To keep track of what comes in: an internal daily summary, made by artificial intelligence, of the feedback and of the messages sent to support@atlastruenorth.com, which shows the operator the recurring themes and what is still unanswered.

To meet legal obligations and to defend rights in legal, administrative or arbitral proceedings.

We do not use your data for advertising, we do not profile you for third parties, and we do not use it for any purpose incompatible with the ones above.

Running the service, including the artificial-intelligence features and operational email: performance of the contract between you and Atlas (LGPD, art. 7, V; GDPR, art. 6(1)(b)).

The optional CV photo and anything you choose to include beyond what the service needs: your consent (LGPD, art. 7, I; GDPR, art. 6(1)(a)). You can withdraw it at any time by removing the content; withdrawal does not affect what was done before it.

Security, fraud and abuse prevention, cost control, and the anonymous usage records kept after an account is deleted: legitimate interest in keeping the service safe and sustainable (LGPD, art. 7, IX; GDPR, art. 6(1)(f)). You may object to processing on this basis; see Your rights.

Reading, answering, keeping and summarising the feedback you send, and summarising the messages sent to support@atlastruenorth.com: legitimate interest in maintaining and improving the service (LGPD, art. 7, IX; GDPR, art. 6(1)(f)). Keeping feedback text after the account is deleted: your consent, given at the time of deletion (LGPD, art. 7, I; GDPR, art. 6(1)(a)).

Keeping the record of your acceptance of these documents, and answering authorities: compliance with a legal or regulatory obligation and the regular exercise of rights (LGPD, art. 7, II and VI; GDPR, art. 6(1)(c) and (f)).

Atlas's artificial-intelligence features run on Google's Gemini models, through the paid Gemini API. When you ask for something that depends on them, only the content that request needs is sent: your CV text on import, your profile and goal when building the journey, the company and your profile for a dossier, your answer for an interview critique, or the text of your question when you ask Atlas.

Some calls use Google Search to ground the answer in current information. In that case a search query derived from your request also reaches Google's search service.

Under the terms Google applies to paid use of the Gemini API at the time of writing, Google does not use the prompts or the responses to improve its products or train its models. Google may keep them for a limited period to detect abuse and meet legal obligations, and grounded search requests are handled under Google's own terms for that feature.

Atlas does not train, fine-tune or build any model with your data.

Outside the app's features, the operator uses Claude, by Anthropic, for an internal daily summary of the feedback and of the support messages (see Feedback and Who else receives your data). That summary decides nothing about you.

Artificial intelligence in Atlas is advisory. It suggests plans, gaps, companies, texts and answers; you decide what to do with them. Atlas takes no decision about you based solely on automated processing that produces legal effects or similarly significant effects — it does not hire, reject, score you for anyone else, or decide any application. You still have the right to ask for an explanation and a human review of any automated output that concerns you (LGPD, art. 20; GDPR, art. 22), by writing to support@atlastruenorth.com.

Output generated by artificial intelligence can be wrong. What that means for you is set out in the Terms of Use.

Through Send feedback, you can send us a problem, a suggestion or praise. We keep the type, the text, up to three photos you attach, the page you sent it from and the date.

Feedback is read by the operator of Atlas together with your account's name and email. It is used to fix problems, improve Atlas and reply to you: in the app, where the status and the reply appear next to the feedback, or by email, only about that feedback.

The type, the text and the page of each piece of feedback, without your account's name or email and without the photos, also go into an internal daily summary, made by Claude, by Anthropic. The summary keeps only themes, in short phrases, with no name, address or copied passage.

Photos are kept in private storage: only you and the operator of Atlas can see them.

You can delete each piece of feedback, with its photos, at any time, on the same page. What you do not delete is kept while the account exists.

When you delete your account, you can tick the option to keep your feedback. In that case, and only with that consent, the text stays stored with no link to the account: no identifier, name or email. Photos are always erased. With the option unticked, your feedback is erased with the account.

Kept text stays exactly as you wrote it. If it mentions anything that identifies you, leave the option unticked: after deletion, there is no way left to trace that text back to you.

Atlas relies on a small number of service providers, who process data on its behalf and under its instructions. Each receives only what its function requires.

Google LLC (United States) — the Gemini API and Google Search grounding: the content of each artificial-intelligence request, as described in the previous section; and Gmail, which holds the messages sent to support@atlastruenorth.com.

Anthropic, PBC (United States) — Claude, which the operator uses for the internal daily summary: feedback text, without the account's name or email, and the messages sent to support@atlastruenorth.com, with the sender's address. With model training turned off on the operator's account, Anthropic does not use that content to train its models; it may keep it for a limited period, under its own terms.

Supabase Inc. (United States) — the database, the authentication service and file storage: everything stored in your account, including the CV photo, and your sign-in data.

Vercel Inc. (United States) — hosting of the website and app: every request you make passes through it, with your IP address and browser data, and it keeps short-lived technical logs.

Resend (Plus Five Five, Inc., United States) — delivery of transactional email: your email address and the content of the confirmation and password-recovery messages.

Cloudflare, Inc. (United States) — the domain's name servers; Turnstile, which protects the sign-up, sign-in and password-recovery forms against bots by checking technical signals from your browser; and the routing of email sent to support@atlastruenorth.com.

Authorities: we disclose data to a public authority only when a law or a court order requires it, and only what is required.

If Atlas is ever transferred to another operator, your data would go with it under this same policy, and you would be told beforehand.

There is no other recipient. Atlas does not sell data, does not rent it, and does not share it with advertisers or data brokers.

Atlas is operated from Brazil, and the providers above are United States companies whose servers may be in the United States or elsewhere. Using Atlas means your data is processed outside your country.

From Brazil, the transfer is necessary to perform the contract with you and rests on the safeguards the providers offer, under art. 33 of the LGPD.

From the European Economic Area, transfers to Brazil are covered by the European Commission's adequacy decision for Brazil of January 2026. Onward transfers to the United States rely on the EU–U.S. Data Privacy Framework, for providers certified under it, or on the European Commission's Standard Contractual Clauses included in the providers' data processing terms.

From the United Kingdom, the same providers rely on the UK Extension to the Data Privacy Framework or on the UK addendum to the Standard Contractual Clauses.

You can ask for more information about these safeguards at support@atlastruenorth.com.

Your account, profile, journey, documents, applications, contacts and conversations are kept while the account exists. You can delete much of that content inside the app at any time, and it is erased when you delete it.

When you delete your account, everything linked to it is erased in the same request, including the files you uploaded. The only exception is the text of any feedback you choose to keep at the time of deletion, with no link to the account (see Feedback).

AI usage records — feature, model, tokens, outcome and date — are kept for cost and abuse control. When the account is deleted they are not erased but stripped of any link to it: no account identifier and no email remain, so they no longer identify you.

Transactional email logs, security checks and server logs are kept by the providers for short periods, under their own retention rules, only as long as delivery, diagnosis and security require.

Messages you send to support@atlastruenorth.com are kept while the matter they concern is open, and afterwards only as long as needed to show how a request was handled.

Anything we must keep by law, or to defend rights in legal proceedings, is kept for the period that obligation requires, and for nothing else.

The LGPD (art. 18) gives you the right to: confirmation that we process your data; access to it; correction of what is incomplete, inaccurate or out of date; anonymisation, blocking or deletion of what is unnecessary, excessive or processed unlawfully; portability to another provider; deletion of data processed with your consent; information about who we share it with; information about the possibility of refusing consent and what follows; and withdrawal of consent.

You may also object to processing carried out on a basis other than consent if it does not comply with the law, and ask for a review of decisions taken solely on automated processing (art. 20).

Many of these rights work directly in the app: the profile is editable, the journey can be restarted, documents, contacts and conversations can be deleted, feedback can be deleted, the usage panel shows what was consumed, and the whole account can be deleted in Settings, under the danger zone. Deletion is immediate: the account and its content are erased in the same request, except any feedback you choose to keep, with no link to the account.

If you believe your rights have not been respected, you can complain to the Brazilian National Data Protection Authority (ANPD). We would appreciate the chance to fix it first, at support@atlastruenorth.com.

If you use Atlas from the European Economic Area, the General Data Protection Regulation (GDPR) applies to you; from the United Kingdom, the UK GDPR and the Data Protection Act 2018. The legal bases for each use are listed in the section on legal basis.

You have the right to access your data, to rectification, to erasure, to restriction of processing, to data portability, to object to processing based on legitimate interest, to withdraw consent at any time without affecting earlier processing, and not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects — which Atlas does not take.

You have the right to lodge a complaint with the data protection supervisory authority of the country where you live or work, or where the alleged infringement took place. In the United Kingdom, that is the Information Commissioner's Office (ICO).

Providing your data is a requirement of the contract only to the extent the service needs it: without an email there is no account, and without a profile or CV Atlas cannot plan a journey. Everything else is optional.

If you use Atlas from another country, any right the data-protection law of your country grants you and that cannot be waived still applies, in addition to what this policy offers. Write to support@atlastruenorth.com and we will handle the request under the rule that protects you more.

Use the app where it already offers the control. For everything else, write to support@atlastruenorth.com from the email address of your account, saying which right you want to exercise.

If the request comes from another address, or from someone acting for you, we may ask for confirmation of identity or of the authority to act before answering. We will not ask for more information than that requires.

We answer as quickly as we can: within 15 days for a confirmation or a full copy of your data, as the LGPD provides, and in any case within one month, extendable only where the GDPR allows and with notice to you.

Exercising your rights is free. A request that is manifestly unfounded or repetitive may be refused, with the reason given.

Every row in the database is protected by an access policy in the database itself, tied to your user: a request authenticated as you cannot reach another person's data.

Traffic is encrypted in transit with TLS, data is encrypted at rest by the database provider, the password is stored hashed by the authentication service, and reaching the files you upload requires authentication.

The sign-in forms are protected against automated attacks, the pages are served with a restrictive content security policy, and access to the production systems is limited to the operator.

No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If an incident happens that may create relevant risk or damage to you, we will notify you and the ANPD within the period the regulation sets, and, where the GDPR applies, the competent supervisory authority, as those laws require.

You help too: use a password you use nowhere else, and tell us at once if you suspect someone else has reached your account.

Atlas uses strictly necessary cookies only: the authentication session cookies that keep you signed in, set by the authentication service, and the atlas-locale cookie, which remembers your chosen language for up to one year.

The browser's local storage keeps your chosen theme and small interface flags, such as which guides you have already closed. It never leaves your device.

On the sign-up, sign-in and password-recovery forms, Cloudflare Turnstile runs in a frame served by Cloudflare to tell people from bots. It is used for security only, not for advertising or tracking across sites.

There is no advertising, social-media or cross-site tracking cookie, and the app loads no third-party analytics. Because every cookie is strictly necessary, there is no cookie banner. Blocking them in your browser will stop you from signing in.

Atlas is meant for people 18 and older, and account creation requires confirming it. We do not knowingly collect data from anyone under 18. If we find out that an account belongs to a minor, it will be closed and its data erased. A parent or guardian who believes this has happened can write to support@atlastruenorth.com.

This policy can change, as the service or the law changes. The date at the top of the page marks the current version, and earlier versions are available on request.

When a change materially affects how your data is processed, we will tell you in the app or by email before it takes effect. Where a change requires new consent, we will ask for it.

This policy is published in Portuguese and in English. Both say the same thing. If they ever diverge, the Portuguese version prevails, except where the law of your country requires the version in your language to prevail.

To exercise your rights, ask a question, or report a privacy problem: support@atlastruenorth.com.

Controller: Jan Furtado Saar.