ATSAI / INFORMATION

Privacy notice

Information collected when you use ATSAI accounts and forms.

Sign-in and email verification

When you choose Google sign-in, Google processes your sign-in request and ATSAI receives your Google account identifier, name and verified email address. Google sign-in is optional. Direct email accounts receive verification codes through Resend. We store email-verification status, linked sign-in provider and successful sign-in method and time for account support and security. Verification codes are stored only as protected digests and expire after 10 minutes. Only authorised platform owners can view sign-in reporting. Account deletion removes the associated sign-in metadata and history.

Account and profile details

Candidate accounts store your name, email, password hash, profile details, consent timestamp, and account creation date. Profile fields may include your phone, location, skills, experience, and optional private resume uploads or HTTPS links.

Applications and requests

An application stores the role, your profile snapshot, optional introduction, consent timestamp, status, and timestamps. Enquiry forms store the contact details and message you provide. Rate-limiting records use hashed identifiers.

Who can access it

Your candidate profile is not published in a public directory. Your own workspace displays your information. When you apply, the hiring company’s authorized team can review that application, its profile snapshot and its attached resume. Each company has a separate workspace. Authorized platform owners can review records for administration and support. Private team notes are not shown to candidates. When email delivery is configured, Resend processes your email address, name, role details and public application updates to send transactional notifications. Private team notes and resume files are not included in those emails. Staff publishing access is separate. If you follow an external employer application link, that employer handles the information you submit there.

Storage and session cookies

Production records are stored in the configured Turso database. Candidate and employer session cookies identify signed-in accounts and expire after eight hours. Passwords and session tokens are stored as hashes; the raw password is not retained.

Your choices

Edit your profile in your dashboard and withdraw active applications when needed. Existing applications retain the snapshot submitted for that role. You can delete your uploaded resumes in your profile; doing so removes file access from applications too. Withdrawing stops the hiring company’s access to your uploaded resume for that application, unless a separate active application grants access. Use /privacy-request for access, correction, or deletion requests. We may ask you to verify your identity before changing or disclosing records.

Retention and contact

Records remain until managed or removed by the team; there is no automatic fixed retention schedule configured. Contact support@atsai.pro or submit a privacy request if you need assistance with your information.