Privacy Policy

ATOM AI WORKS ("ATOM", "we", "us", or "our") is an AI development and automation studio headquartered in Dublin, Ireland. We are committed to protecting personal data and respecting privacy rights worldwide.

This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you visit our website, contact us, engage our services, or otherwise interact with us. It is designed to meet requirements under the EU General Data Protection Regulation (GDPR), UK GDPR, California Consumer Privacy Act (CCPA/CPRA), and other applicable global privacy laws.

For the purposes of applicable data protection law, ATOM AI WORKS is the data controller responsible for your personal data.

• Company: ATOM AI WORKS
• Location: Dublin, Ireland
• Privacy contact: privacy@atomaiworks.com

We may collect the following categories of personal information:

• Identity and contact data: name, job title, company name, email address, phone number, and business address.
• Professional data: industry, company size, CRM systems, project requirements, and service interests.
• Communication data: messages, inquiries, meeting notes, and correspondence with our team.
• Technical data: IP address, browser type, device information, operating system, referral URLs, and pages visited.
• Usage data: interactions with our website, analytics events, and session information.
• Marketing preferences: newsletter subscriptions and communication opt-in/opt-out choices.
• Client project data: information you provide for AI development, automation, or consulting engagements, which may include business data processed under contract.

• Directly from you via contact forms, email, calls, proposals, contracts, and onboarding.
• Automatically through cookies, analytics tools, and server logs when you use our website.
• From third-party sources such as LinkedIn, referral partners, or publicly available business directories, where permitted by law.
• From client systems and integrations when delivering AI, automation, or sales operations services under agreement.

Where GDPR or UK GDPR applies, we process personal data on the following legal bases:

• Contract: to respond to inquiries, deliver services, and perform our agreements with you.
• Legitimate interests: to operate and improve our business, secure our systems, prevent fraud, and pursue B2B marketing to relevant professionals, balanced against your rights.
• Consent: where required for certain cookies, marketing communications, or optional data uses.
• Legal obligation: to comply with applicable laws, tax requirements, and regulatory requests.

• Provide, operate, and improve our AI development, automation, and consulting services.
• Respond to inquiries, schedule meetings, and prepare proposals or statements of work.
• Manage client relationships, project delivery, support, billing, and account administration.
• Analyze website performance and user experience through analytics.
• Send service-related communications and, where permitted, marketing about ATOM products and services.
• Maintain security, detect abuse, and protect against unauthorized access.
• Comply with legal obligations and enforce our Terms and Conditions.

As an AI engineering company, we may use artificial intelligence and automation tools in our internal operations and in services delivered to clients. Where we process personal data using AI systems on our own behalf, we implement appropriate safeguards, human oversight where required, and data minimization practices.

When we process personal data on behalf of clients, we act as a data processor (or service provider) under client instructions and applicable data processing agreements. Clients remain responsible for determining the lawful basis and purpose of such processing unless otherwise agreed in writing.

We do not use personal data obtained through our website contact forms to train public foundation models without explicit consent.

We use essential cookies required for website functionality and may use analytics cookies to understand how visitors use our site. Where required by law, we request consent before placing non-essential cookies.

• Essential cookies: enable core site functionality and security.
• Analytics cookies: help us measure traffic and improve performance (e.g. Vercel Analytics).
• Preference cookies: remember settings where applicable.

You can control cookies through your browser settings. Disabling certain cookies may affect website functionality.

We do not sell personal information. We may share data with:

• Service providers: hosting (Vercel), database (Supabase), CRM (HubSpot), email, analytics, and professional advisors bound by confidentiality obligations.
• Client-authorised integrations: systems connected during project delivery with your approval.
• Legal and regulatory authorities: when required by law, court order, or to protect rights and safety.
• Business transfers: in connection with a merger, acquisition, or asset sale, subject to appropriate safeguards.

ATOM operates globally and may transfer personal data to countries outside your jurisdiction, including the United States and other regions where our service providers operate. Where required, we implement appropriate safeguards such as Standard Contractual Clauses (SCCs), UK International Data Transfer Agreements, or other lawful transfer mechanisms.

We retain personal data only as long as necessary for the purposes described in this policy, unless a longer retention period is required or permitted by law.

• Contact inquiries: typically up to 24 months unless a business relationship continues.
• Client records and contracts: for the duration of the relationship plus applicable statutory limitation periods.
• Marketing records: until you unsubscribe or object, plus a reasonable suppression period.
• Technical logs: generally up to 12 months unless needed for security investigations.

We implement technical and organizational measures designed to protect personal data, including access controls, encryption in transit, secure infrastructure, and staff confidentiality obligations. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on your location, you may have the following rights:

• Access: request a copy of personal data we hold about you.
• Rectification: request correction of inaccurate or incomplete data.
• Erasure: request deletion of personal data in certain circumstances.
• Restriction: request limited processing in certain circumstances.
• Portability: receive personal data in a structured, machine-readable format where applicable.
• Objection: object to processing based on legitimate interests or direct marketing.
• Withdraw consent: where processing is based on consent, withdraw it at any time.
• Non-discrimination (CCPA/CPRA): we will not discriminate against you for exercising privacy rights.

To exercise your rights, contact us at privacy@atomaiworks.com. We may need to verify your identity before responding. You also have the right to lodge a complaint with your local supervisory authority, such as the Irish Data Protection Commission (DPC) or your EU/EEA member state authority.

For California residents, we provide this additional notice. In the preceding 12 months, we may have collected the categories of personal information listed in Section 3 for the business purposes listed in Section 6. We do not sell or share personal information for cross-context behavioral advertising. California residents may request access, deletion, and correction of personal information by contacting privacy@atomaiworks.com.

Our website and services are directed at businesses and professionals. We do not knowingly collect personal information from individuals under 16 years of age. If you believe we have collected such information, please contact us and we will take appropriate steps to delete it.

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing personal information.

We may update this Privacy Policy from time to time to reflect changes in law, technology, or our practices. The "Last updated" date at the top indicates when this policy was last revised. Material changes will be posted on this page.

If you have questions about this Privacy Policy or our data practices, contact:

• Email: privacy@atomaiworks.com
• Company: ATOM AI WORKS
• Address: Dublin, Ireland