Atlas Privacy Notice
Atlas is designed to make humanitarian information useful without treating personal data casually. This notice explains what we collect, why we need it, who receives it, and the choices available to you.
1. Who controls the data
The data controller is The Change Architect, an independent programme operated by Mohammed Al-Hajjaj in Brussels, Belgium. Privacy requests can be sent to contact@thechangearchitect.org.
2. Data we process
- Account data: email address, password hash, account type, membership status and acceptance records.
- Personal profile and CV data you choose to save, including contact details, experience, education, skills, languages and an optional photograph.
- Opportunity interests, preferred country, saved opportunities and alert-delivery history when you use personalized matching.
- Organization-representative details and edits made to a claimed organization profile.
- Applications, cover notes, external CV links and saved-CV snapshots submitted to a posting organization.
- Service requests, opportunity submissions, usage counters and administrative status history.
- Basic security and server records needed to operate and protect the service.
- Public organization information imported from identified open-data sources or submitted by organizations.
3. Why we use it
We process account, CV, application and service-request data to provide the features you request and administer membership. When you use opportunity matching, Atlas compares words in your preferences, profile and saved CV with open opportunity records to rank relevant results. Email alerts are sent only after you opt in and can be stopped from your matching preferences. We process security and fair-use records for our legitimate interest in protecting Atlas and applying published limits consistently. Public organization records support our legitimate interest in maintaining a source-traceable humanitarian directory. Where consent is the appropriate basis, the form asks for it directly.
4. Who receives data
Application details and the CV you attach are shared with the organization that posted the relevant opportunity. Hosting and email providers process limited data as technical service providers. We do not sell personal data. We do not send saved CV text to Gemini, Grammarly or another AI service automatically; those external tools receive information only if you independently choose to use them.
5. Retention
- Accounts, profiles and saved CVs remain until you delete the account or ask us to remove them.
- Password-reset links expire after one hour; expired and used reset records are deleted automatically.
- Applications are retained for up to 12 months, unless an earlier deletion request or a legal obligation applies.
- Completed or declined service requests and membership-usage records are retained for up to 24 months for service continuity and accountability.
- Public organization records remain while relevant to the directory and can be corrected or removed upon a justified request.
6. Your choices and rights
You can update your profile, download a copy of your account data, and delete your account from Account Settings. Depending on applicable law, you may also request access, correction, erasure, restriction, portability, or object to processing. You may lodge a complaint with the Belgian Data Protection Authority or your local supervisory authority.
7. Security and cookies
Atlas uses HTTPS, password hashing, access controls, session protection and limited administrative access. The site currently uses only essential session cookies required for login and security. It does not use advertising cookies or behavioural profiling.
8. Automated decisions and international access
Atlas does not make legal or similarly significant decisions about members solely through automated processing. Grant and opportunity relevance scores are informational, explain their main matching reasons, and do not determine eligibility or selection. Because Atlas serves an international community and uses internet infrastructure, data may be processed outside your country; applicable protections continue to apply.
9. Contact and changes
Questions or requests: contact@thechangearchitect.org. Material changes will be dated on this page.