AtlasPrivacy policy
This policy explains what personal data we process, why, and what your rights are. It applies to the atlaswork.business website and to the Atlas application.
1. Data controller
Fahria Agency LLC, Shams (Sharjah Media City Free Zone), Sharjah, United Arab Emirates — licence no. 2536786.01. Contact: privacy@atlaswork.business.
2. Data we process
- Account: name, email address, company name, password (encrypted).
- Usage data: jobs, clients, buildings, units, schedules and history that you enter.
- Quotes: recipient details, amount, quote contents, and a record of when it was opened and answered.
- Working hours: clock-ins, breaks and hourly rates for your technicians, when you use time tracking.
- Notes: the notes you write on a job or a unit, including those marked private, which are never shown to the end client.
- Payment: handled by Stripe. We receive a subscription identifier and billing information, never the full card number.
- Technical data: connection logs, IP address and device type, for security and for keeping the service running.
- Connected mailbox (optional): if you connect your work address, we keep the connection settings and the app password, encrypted. Your messages are read from your provider at the moment you display them, then forgotten: we keep neither your emails nor your attachments.
- Photos and logo: a technician's photo and your company logo, when you add them.
- Pesticide application certificates: the number and expiry date of your technicians' certificates, when you enter them, so we can warn you before they expire.
- Products and stock: products, quantities, lots and movements that you record.
- Offline copy: a technician's job sheet, addresses included, is kept on their phone for at most 7 days, so they can work without a signal. It erases itself, and does so immediately if their access link is disabled.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Providing and running the service | Performance of the contract |
| Billing and payment | Performance of the contract / legal obligation |
| Security and abuse prevention | Legitimate interest |
| Service communications | Performance of the contract |
| Improvements and statistics | Legitimate interest / consent |
4. Subprocessors
We use providers that process data on our behalf:
- Supabase Inc. (United States) — database hosting: this is where your accounts, clients, addresses, jobs and settings live.
- Vercel Inc. (United States) — hosting of the website and the application.
- Stripe, Inc. (United States) — payment processing.
- Resend, Inc. (United States) — sending the service's emails: invitations, quotes, reminders, alerts and support messages.
- Komoot GmbH — Photon (Germany) — address suggestions. The characters you type into an address field are sent to it so it can propose completions.
These providers are required to protect your data and to use it only for the services they provide.
5. International transfers
Some data may be processed outside your country, in particular in the United States. These transfers are covered by appropriate safeguards (standard contractual clauses or equivalent mechanisms).
6. Retention
We keep your data for as long as your account is active. When the account is deleted, your service data is erased immediately and permanently: clients, buildings, units, jobs, quotes, working hours, team, stock and mailbox settings. The only exceptions are billing records, kept by our payment provider for as long as accounting obligations require, and technical security logs, kept for at most 30 days.
Deletion cannot be undone and we take no backup beforehand: export whatever you need first.
7. Your rights
Under the GDPR and applicable laws, you have the rights of access, rectification, erasure, restriction, objection and portability. To exercise them: privacy@atlaswork.business. You may also lodge a complaint with a data protection authority.
8. Security
We put technical and organisational measures in place: encryption in transit and at rest, isolation of each account enforced by the database itself, role-based access control, logging and backups. As no system is infallible, we cannot guarantee absolute security.
9. Cookies
The website uses cookies, described in our Cookie policy.
10. Changes
This policy may change. The date at the top of the page shows when it was last updated.