Privacy policy

Effective Date: 30 October 2025
Last Updated: 30 October 2025

TABLE OF CONTENTS

1.     INTRODUCTION

2.     WHO WE ARE

3.     INFORMATION WE COLLECT

4.     HOW WE USE YOUR INFORMATION

5.     DEEPMATCH™ AI ALGORITHM

6.     SHARING YOUR INFORMATION

7.     DATA TRANSFERS

8.     DATA RETENTION

9.     YOUR PRIVACY RIGHTS

10.  COOKIES AND TRACKING

11.  SECURITY

12.  CHILDREN’S PRIVACY

13.  UPDATES TO THIS POLICY

14.  CONTACT US


1. INTRODUCTION

Welcome to Atalef, the AI-powered precision hiring platform for tech talent. This Privacy Policy explains how Filuet Tech Ltd (“we”, “us”, “our”) collects, uses, shares, and protects your personal information when you use our platform at https://atalef.ai/ and our related services.

Our platform uses advanced AI technology, including our proprietary DeepMatch™ algorithm, to create CV-less profiles and match candidates with employers based on skills, personality, culture, and preferences. We are committed to protecting your privacy while providing innovative recruitment solutions.

Important: This platform is designed for professional recruitment purposes and is not intended for individuals under 18. We do not knowingly collect personal data from minors.

2. WHO WE ARE

Data Controller: Filuet Tech Ltd
Registration: Cyprus Company HE 437908
Address: Zinonos 5, 3040, Limassol, Cyprus
Email: privacy@atalef.ai
Telephone: +357 25029390

As a Cyprus-based company operating in the EU, we comply with the General Data Protection Regulation (GDPR) and Cyprus data protection laws.

3. INFORMATION WE COLLECT

3.1 Information You Provide Directly

 For Candidates:

  •  Account Information: Name, email address, phone number, location, professional title
  • Professional Profile: Work experience, education, skills, certifications, career preferences
  • Assessment Data: Responses to our 400+ technical and soft skill assessments
  • Preference Settings: Job preferences, salary expectations, current salary, location preferences, work arrangements
  • Communication Data: Messages, feedback, and interactions through the platform

 

 For Employers:

  • Company Information: Company name, size, industry, location, contact details
  • Job Requirements: Job descriptions, required skills, team culture, hiring preferences
  • Recruitment Criteria: Priority settings for hard skills, soft skills, personality traits
  • Assessment Selections: Chosen assessment criteria for specific roles
  • Employment position details: Salary and other benefits

 

3.2 Information We Collect Automatically

  • Technical Data: IP address, browser type, device information, operating system
  • Usage Data: Pages visited, features used, time spent on platform, click patterns
  • Performance Data: Platform performance metrics, error logs, response times
  • Cookie Data: As described in our Cookie Policy below

 

3.3 Information from Third Parties

  • LinkedIn Integration: Professional profile data when you connect your LinkedIn account
  • CV Data: Information extracted from uploaded CVs and resumes
  • Public Professional Data: Publicly available professional information to enrich profiles
  • Assessment Partner Data: Results from integrated assessment tools
  • ATS Integration: Data synchronized from your existing Applicant Tracking Systems

 

3.4 CV-less Profile Creation

 Our platform creates comprehensive candidate profiles without relying solely on traditional CVs by:

  • Extracting and structuring data from various professional sources
  • Combining assessment results with experience data
  • Building competency maps based on skills demonstrations
  • Creating preference profiles from user interactions

     

4. HOW WE USE YOUR INFORMATION

4.1 Legal Basis for Processing

 We process your personal data based on the following legal grounds:

Legitimate Interest (Primary basis):

  • Providing recruitment and talent matching services
  • Improving platform functionality and user experience
  • Ensuring platform security and preventing fraud
  • Conducting business analytics and research

 

Contract Performance:

  • Creating and managing your account
  • Delivering requested services
  • Processing payments and billing

     

Consent:

  • Marketing communications (when you opt-in)
  • Non-essential cookies and analytics
  • Sharing your profile with potential employers (candidates)
  • Special category data processing where required

 

Legal Obligation:

  • Compliance with employment laws and regulations
  • Tax and accounting requirements
  • Responding to legal requests

 


4.2 Specific Uses

For All Users:

  • Account creation and authentication
  • Platform functionality and feature provision
  • Customer support and communication
  • Security monitoring and fraud prevention
  • Service improvement and development
  • Legal compliance and dispute resolution

 

For Candidates:

  • Creating and maintaining your professional profile
  • Conducting skills and personality assessments
  • Generating DeepMatch™ compatibility scores
  • Matching you with relevant job opportunities
  • Facilitating communication with potential employers
  • Providing career insights and recommendations
  • Tracking application status and outcomes


For Employers:

  • Sourcing and presenting matched candidates
  • Facilitating candidate evaluation and selection
  • Providing recruitment analytics and insights
  • Managing job postings and requirements
  • ATS integration and data synchronization
  • Reporting on hiring outcomes and success rates


5. DEEPMATCH™ AI ALGORITHM

5.1 How DeepMatch™ Works

 Our proprietary AI algorithm analyzes multiple dimensions to create precise talent matches: 

  • Hard Skills: Technical competencies, programming languages, tools, experience levels
  • Soft Skills: Communication, leadership, problem-solving, teamwork abilities
  • Personality Traits: Working style, cultural fit indicators, collaboration preferences
  • Career Preferences: Role types, company size, work arrangements, growth aspirations
  • Performance Indicators: Assessment scores, past performance data, success predictions

     

5.2 Algorithmic Decision-Making Rights

Under GDPR Article 22, you have rights regarding automated decision-making:

Right to Review: You can request human review of any automated decisions affecting you

Bias Prevention: We regularly audit our algorithms for fairness and implement bias mitigation measures

5.3 Algorithm Transparency

  • Our matching scores are based on objective criteria and measurable factors
  • There is reasoning why certain matches are suggested
  • You can adjust your preferences and validate your skills to influence matching outcomes
  • We regularly update and improve our algorithms based on feedback and performance data


6. SHARING YOUR INFORMATION

6.1 When We Share Data

With Employers (Candidates only):

  • Your professional profile and assessment results (with your consent where necessary)
  • Match compatibility scores and rankings
  • Communication and interaction data during recruitment process


Please note that by creating and maintaining a profile on our platform, you acknowledge that it is necessary for us to share your candidate details, contact details, professional profile, assessment results, and match compatibility scores with potential employers who may have suitable opportunities that align with your profile and preferences in order to provide our services. While we will endeavor to share your information only with employers offering relevant opportunities, you expressly consent to such sharing as part of our recruitment matching services. You may withdraw this consent at any time by deleting your profile and/or account.

With Service Providers:

  • Cloud hosting and infrastructure providers
  • Payment processing companies
  • Email and communication service providers
  • Analytics and performance monitoring tools
  • Security and fraud prevention services
  • Assessment and testing platforms


With Partners:
 

  • Integrated applicant tracking systems
  • Recruitment software platforms
  • HR management systems
  • Only as necessary for platform functionality


Legal Requirements:

  • When required by law, regulation, or court order
  • To protect our rights, property, or safety
  • To prevent fraud or security threats
  • In connection with legal proceedings

 
Business Transfers:

  • In case of merger, acquisition, or sale of business assets
  • Data would be transferred under equivalent privacy protections


6.2 Data Sharing Controls

For Candidates:

  • Uploaded Materials: All content you upload (CVs, certificates, portfolios, work samples, etc.) may be shared with potential employers for recruitment evaluation purposes.
  • Communications: By registering on our platform, you consent to receive communications from Atalef and from potential employers regarding job opportunities, recruitment updates, and related matters.
  • Your Rights: You may ask us to refrain from future employer communications at any time by deleting/removing your profile, though you may continue to receive essential service notifications (as may be applicable). 


For Employers:

  • Candidate data is shared only for legitimate recruitment purposes
  • Access is restricted to authorized recruitment personnel
  • Usage is monitored and logged for compliance
  • Confidentiality obligations apply to all data received


7. DATA TRANSFERS


7.1 International Transfers

Our platform may transfer personal data outside the European Economic Area (EEA) to:      

  • Service Providers: Cloud hosting, analytics, and support services
  • Global Employers: When candidates apply for positions with international companies
  • Partner Platforms: Integrated recruitment and assessment tools


7.2 Transfer Safeguards

 All international transfers are protected (as applicable) by:

  • Adequacy Decisions: Transfers to countries with EU-approved data protection levels
  • Standard Contractual Clauses: EU-approved contract terms ensuring data protection
  • Binding Corporate Rules: For multinational corporate partners
  • Consent: Your explicit consent for specific transfer purposes when required


7.3 Data Localization

  • Primary data processing occurs within the EU
  • Cyprus serves as our main data processing location
  • Backup and disaster recovery may involve international locations
  • You can request information about specific data locations


8. DATA RETENTION

8.1 Retention Periods

Active Accounts: 

  • Profile data: Retained while account is active plus 12 months after last login
  • Assessment results: Retained for 3 years or until account deletion
  • Communication data: Retained for 2 years
  • Usage and analytics data: Retained for 2 years

 

Inactive Accounts: 

  • Automatic deletion after 24 months of inactivity
  • Warning notifications sent before deletion
  • Option to reactivate account during warning period

 

Specific Retention Rules:

  • Financial records: 7 years
  • Legal disputes: 6 years
  • Security incidents: 1 year for investigation purposes
  • Marketing data: Until consent withdrawal


8.2 Deletion Process

When data is deleted:

  • Complete removal from active systems within 30 days
  • Backup systems cleared within 90 days
  • Anonymized analytics data may be retained
  • Confirmation provided upon request


9. YOUR PRIVACY RIGHTS

Under GDPR and Cyprus data protection law, you have the following rights:

9.1 Access Rights

  • Right to Access: Request a copy of all personal data we hold about you
  • Data Portability: Receive your data in a structured, machine-readable format
  • Processing Information: Learn how and why we process your personal data


9.2 Control Rights

  • Right to Rectification: Correct inaccurate or incomplete personal data
  • Right to Erasure: Request deletion of your personal data (“right to be forgotten”)
  • Right to Restrict Processing: Limit how we use your personal data
  • Right to Object: Object to processing based on legitimate interests


9.3 Consent Rights

  • Consent Withdrawal: Withdraw consent for any consent-based processing
  • Marketing Opt-out: Stop receiving marketing communications at any time
  • Profiling Objection: Object to automated profiling and decision-making


9.4 How to Exercise Rights

Online: Use the privacy controls in your account dashboard
Email: Send requests to privacy@atalef.ai
Response Time: We respond within 30 days of receiving your request

Identity Verification: We may request verification to protect your privacy
No Cost: Rights exercises are generally free of charge unless these are of an excessive and abusive nature whereby we reserve the right to charge a reasonable fee

9.5 Right to Complain

If you’re not satisfied with our response:

  • Cyprus: Contact the Commissioner for Personal Data Protection
  • EU/EEA: Contact your local data protection authority
  • Direct Contact: Reach out to our Privacy Officer first


10. COOKIES AND TRACKING

10.1 Types of Cookies We Use

 Essential Cookies (Always Active):

  • Account authentication and session management
  • Platform functionality and security features
  • Load balancing and performance optimization


Analytics Cookies (With Consent):

  • Usage statistics and platform performance monitoring
  • User behavior analysis for service improvement
  • A/B testing and feature optimization


Marketing Cookies (With Consent):

  • Personalized content and recommendations
  • Social media integration and sharing
  • Advertising effectiveness measurement


10.2 Third-Party Cookies

 Our platform may include cookies from:

  • Google Analytics (website analytics)
  • LinkedIn (professional network integration)
  • Payment processors (transaction security)
  • Customer support tools (help desk functionality)


10.3 Managing Cookies

  • Browser Settings: Configure cookie preferences in your browser
  • Platform Settings: Use our cookie preference center
  • Opt-out Links: Available for third-party analytics services
  • Impact Warning: Disabling essential cookies may limit platform functionality


11. SECURITY

11.1 Technical Safeguards

Encryption: 

  • All data encrypted in transit using TLS 1.3
  • Sensitive data encrypted at rest using AES-256
  • End-to-end encryption for sensitive communications


Access Controls:

  • Multi-factor authentication for all accounts
  • Role-based access controls for internal systems
  • Regular access reviews and permission audits


Infrastructure Security:

  • Secure cloud hosting with enterprise-grade protection
  • Regular security assessments and penetration testing
  • Automated monitoring and threat detection
  • Secure development practices and code reviews


11.2 Organizational Safeguards

 Staff Training:

  • Regular privacy and security training for all employees
  • Confidentiality agreements and data handling procedures
  • Clear incident response and escalation protocols


Vendor Management:

  • Due diligence assessments
  • Data processing agreements
  • Vendor audits as may be required


11.3 Your Security Responsibilities

  • Use strong, unique passwords for your account
  • Enable two-factor authentication when available
  • Keep your contact information current
  • Report suspicious activity immediately
  • Protect your login credentials and access devices


12. CHILDREN’S PRIVACY

 Atalef is designed for professional recruitment and is not intended for individuals under 18 years of age.

We do not knowingly:

  • Collect personal data from individuals under 18
  • Target marketing or advertising to minors
  • Allow account creation by users under 18
  • Process data from educational institutions for minors


If we become aware that we have collected data from a child under 18:
 

  • We will delete the data immediately
  • We will not process or share such data
  • We will notify relevant parties if required by law
  • Parents and Guardians: If you believe your child has provided personal data to us, please contact privacy@atalef.ai immediately.


13. UPDATES TO THIS POLICY

13.1 Policy Changes

We may update this Privacy Policy to reflect:

  • Changes in our data processing activities
  • New features or services
  • Legal or regulatory requirements
  • Industry best practices and standards


13.2 Notification Process

 Material Changes:

  • Email notification to all registered users
  • Prominent notice on the platform
  • 30 days’ notice before changes take effect
  • Option to withdraw consent or close account


Minor Updates:

  • Updated “Last Modified” date
  • Notification in platform dashboard
  • Changes effective immediately upon posting


13.3 Version Control

  • Previous versions available upon request
  • Change log maintained for transparency
  • Clear indication of what has changed
  • Date stamps for all modifications


14. CONTACT US

 14.1 Privacy Questions and Requests

General Privacy Inquiries:

Email: privacy@atalef.ai
Response Time: Within 3 business days

Address: Filuet Tech Ltd, Zinonos 5, 3040, Limassol, Cyprus

14.2 Technical Support

Platform Support:

Email: support@atalef.ai
Response Time: Within 48 hours

Emergency Security Issues:
Email: support@atalef.ai
Response Time: Within 48 hours

14.3 Business Contact

General Inquiries:

Email: info@atalef.ai
Telephone: +357 25029390
Website: https://atalef.ai

Mailing Address:

Filuet Tech Ltd
Zinonos 5, 3040
Limassol, Cypr