Back to home

Privacy Policy

Effective Date: October 2026

1. Controller

ATI Lab ("we," "us"). Contact: contact@atilab.io

2. Data We Collect

Through our request form: name, email, service description. Legitimate interest basis (GDPR Art. 6(1)(f)) — processing inquiries for potential business relationships.

3. Use

  • Evaluate and respond to service requests
  • Create project proposals
  • Business communications

4. Storage & Retention

  • EU servers (Supabase)
  • Retained indefinitely unless you request deletion
  • Deletion requests processed within 30 days

5. Job Applicants

When you apply for a role through our careers page we collect your name, email, location, LinkedIn profile if you share it, start date, hourly pay expectations, CV, cover letter if you add one, and the work samples and voice recording link you submit. We process this to consider you for the role you applied to (GDPR Art. 6(1)(b)).

  • Used only to assess your application and contact you about it
  • Stored on EU servers (Supabase) and sent to our hiring inbox
  • Never added to our sales or marketing lists
  • Cloudflare Turnstile checks submissions to help prevent automated spam
  • Deleted within 6 months unless you join the team
  • Ask for deletion at any time via contact@atilab.io

6. Client Project Data

Project-specific data handling varies per contract. Clients may host data on their own infrastructure or use our hosting. Details specified in each service agreement.

7. Third-Party Tools

We may use third-party AI/software tools (OpenAI, Anthropic, etc.) per project needs. Each tool is subject to their own terms. Specified in proposals.

8. No Sharing

We don't sell or share your data with third parties except as required by law or specified in project contracts.

9. Your Rights (GDPR)

  • Access your data
  • Rectification
  • Erasure ("right to be forgotten")
  • Data portability
  • Object to processing
  • Lodge complaint with your local data protection authority

Contact us at contact@atilab.io to exercise rights.

10. Security

Industry-standard encryption and access controls. No method is 100% secure.

11. Changes

We may update this policy. Check date above for latest version.