Legal
Privacy Policy
A working draft covering the disclosures Google and Microsoft require for mailbox access. Have counsel review it before publication.
Last updated: 13 September 2026. This policy applies to AtsIcloud, operated by Resource Innovative Technologies LLC, Rock Hill, SC.
1. Data we process
We process two categories of data. Account data belongs to our customers: names, work email addresses and billing details. Workspace data is the recruiting data our customers upload or generate: candidates, requisitions, submissions, placements, timesheets, invoices and compliance documents. We process workspace data solely as a processor, on the customer’s instruction.
2. Google and Microsoft mailbox access
Where a customer connects a Gmail or Microsoft 365 mailbox, we request only the scopes needed to read a job description the user explicitly sends to AtsIcloud, and to send and thread messages the user composes in the application.
AtsIcloud’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we do not:
- use Google user data for serving advertising, or transfer it to others for advertising;
- use Google user data to train generalised artificial intelligence models;
- allow humans to read Google user data, except with the user’s explicit consent for specific messages, where necessary for security purposes such as investigating abuse, to comply with applicable law, or where the data is aggregated and anonymised.
3. How we use data
- To provide, secure and support the application.
- To generate drafts, matches and report summaries within a single customer workspace.
- To meet legal, tax and audit obligations.
We do not sell personal data, and we do not pool customer records into a shared training corpus. AI features run through a gateway using the customer’s own provider keys.
4. Storage and security
The application is local-first: workspace data is held in an encrypted store on the customer’s device and synchronised to cloud infrastructure in the customer’s selected region. Data is encrypted in transit and at rest. Access by our personnel is restricted, logged and reviewed.
5. Retention
Workspace data is retained for the life of the subscription and deleted within 30 days of termination, unless a longer period is required by law or agreed in contract. Connected mailbox tokens are revoked immediately on disconnection.
6. Your rights
Depending on your jurisdiction you may have rights of access, correction, deletion, portability and objection. Candidates should direct requests to the staffing firm that holds their record; we assist that customer in responding, and the application includes export and erasure tooling for this purpose.
7. Sub-processors
We use a small number of sub-processors for cloud hosting, transactional email and error monitoring. A current list is available on request.
8. Contact
Questions about this policy, or a data request, can be sent to hello@atsicloud.com.