AtlasCarta Privacy Notice

AtlasCarta is operated by Precision Interactive Network FZE LLC, Ajman, United Arab Emirates. For privacy or support questions, contact support@atlas.nccgulf.com.

For purposes of applicable data-protection law, the final legally approved notice should confirm the precise controller designation and registered-office wording.

This notice covers AtlasCarta's public website, candidate account, candidate mobile application, support interactions, privacy-request workflows, pathway assessment features and related security and operational systems.

Separate professional, consultant, enterprise or partner arrangements may require additional contractual or privacy terms where another organization controls or supplies personal data.

Depending on the features you use, AtlasCarta can process the following categories of information:

• Account information: name, email address, verification state, authentication and account-security records.
• Candidate profile information: date of birth, nationality/residence, marital/family information, education, employment, job offers, language-test information, funds, assets, connections, migration preferences and program-specific answers you provide.
• Pathway-workspace information: saved pathways, profile snapshots, assessment results, scenario inputs, alerts, reports and related timestamps.
• Professional-review information: where enabled and authorized, consultant assignments, comments, recommendations or occupation-review records associated with your profile.
• Technical and security information: session records, limited device/browser or network information used by authentication, security, rate limiting, diagnostics and abuse prevention.
• Commercial information: if paid services are introduced, normalized subscription/entitlement identifiers and transaction-related records needed to provide and reconcile access. AtlasCarta does not need to store full payment-card details when payment is handled by an app store or payment provider.
• Support and privacy information: communications, data requests, consent choices and request-status records.

Most candidate information comes directly from you. AtlasCarta also generates profile snapshots, assessment outputs, alerts and operational records from the information you provide and the program rules stored in the platform.

If paid services launch, limited subscription or entitlement information may come from Apple, Google or another authorized billing provider. Security and authentication services may generate session and anti-abuse records automatically when you use the service.

AtlasCarta processes information to:

• create, verify, secure and maintain your account;
• build the candidate profile and preserve immutable profile snapshots used for assessment;
• compare declared facts with published immigration-program rules and present deterministic assessment results;
• provide saved pathways, scenarios, alerts, reports and notification preferences;
• provide professional-review features where you choose or authorize them;
• respond to support, correction, export, deletion and account-deletion requests;
• prevent abuse, investigate security incidents and maintain system integrity;
• administer subscriptions or entitlements if paid services are introduced; and
• comply with applicable legal, regulatory, accounting, tax, dispute-resolution and record-keeping obligations.

AtlasCarta records versioned consent choices for features that require an affirmative choice in the product, including profile-based matching/profiling and consultant sharing. You can change those choices in Privacy settings.

Where consent is legally required, AtlasCarta should rely on valid consent and allow it to be withdrawn for future processing. Other processing may be carried out where permitted or required by applicable law, for example to provide a service you request, protect security, establish or defend legal rights, or comply with legal obligations. Legal counsel should confirm the final basis language before approval.

AtlasCarta compares your declared profile facts with stored, source-backed pathway rules. The service distinguishes deterministic rule results from professional comments and does not represent an assessment as a government decision, legal advice or a guaranteed approval probability.

Profile snapshots are retained while your account is active so a historical assessment can be tied to the facts used when it was generated rather than silently changing when you later edit your live profile.

AtlasCarta may disclose the minimum information reasonably necessary to service providers that support functions such as hosting, databases, authentication, transactional email, security, monitoring, app distribution, customer support and, if introduced, payment/subscription processing.

Candidate information may be made available to a professional consultant only through the authorized professional-review or sharing workflow. AtlasCarta may also disclose information where required by law, court order or a competent authority, or where reasonably necessary to protect legal rights or system security.

AtlasCarta does not sell candidate personal data. The final legally approved notice should identify categories of processors or named subprocessors to the extent required.

Technology providers used to operate AtlasCarta may process or store data in countries outside the United Arab Emirates. Where the UAE Personal Data Protection Law or another applicable law imposes conditions on cross-border transfers, AtlasCarta should use the safeguards or permitted transfer mechanism required by that law.

The final notice should be aligned with the actual hosting, email, monitoring, app-store and payment-provider locations in use at launch.

AtlasCarta is designed to keep personal data only for as long as reasonably necessary for the purposes described above, while your account is active, or for a longer period where required for legal, accounting, tax, security, dispute or regulatory reasons.

After a completed account-deletion process, the candidate profile and operational workspace data are intended to be erased, while the minimum non-identifying or legally required audit, security or transaction evidence may be retained. Retained evidence is not used to recreate the deleted candidate account.

Backups may retain deleted information temporarily until they age out through the applicable backup cycle. Exact retention periods and backup schedules must be confirmed in the final legal review rather than invented in this draft.

Subject to applicable law and any lawful exceptions, you may ask AtlasCarta to provide information about your personal data, correct inaccurate information, export data where available, delete personal data, restrict or stop certain processing, or withdraw consent for future processing.

Signed-in candidates can submit tracked requests from Privacy settings. If you cannot access your account, contact support@atlas.nccgulf.com. AtlasCarta may need to verify identity before acting on a request.

The UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) provides a federal framework for personal-data protection, including data-subject rights and controls on cross-border transfers. The UAE Data Office is the federal data regulator. Counsel should confirm the final complaint-route wording and any additional jurisdictional rights that apply to AtlasCarta users.

You may initiate permanent deletion of your AtlasCarta candidate account from Privacy settings. The account-deletion process is separate from a request to delete an individual category of personal data.

Read the public Account deletion page for the current process, the categories intended to be removed, and the limited records that may need to be retained after deletion.

If you enter information about a spouse, dependant, family member, employer or other person, you should only provide information you are authorized to provide. AtlasCarta should not be used to upload unnecessary sensitive information about another person.

AtlasCarta uses measures designed to protect account and profile data, including authenticated access controls, role separation, email verification, secure session handling, server-side authorization, audit logging and security-focused validation. No internet service can guarantee absolute security, and users should protect their password and devices.

AtlasCarta uses cookies or equivalent session mechanisms needed for authentication and security. Public pathway exploration can also use browser/session storage so selections survive navigation. A user-directed account-creation handoff may temporarily preserve public exploration information so the user can confirm profile records after verification.

The production notice should carry an effective date and be updated when AtlasCarta materially changes its data practices, providers, commercial model or legal obligations. Where required, AtlasCarta should provide additional notice or obtain updated consent before materially different processing begins.

Privacy and support enquiries: support@atlas.nccgulf.com.

Operator: Precision Interactive Network FZE LLC, Ajman, United Arab Emirates. The exact registered-office wording should be inserted or confirmed during legal review.