Privacy Policy.
Your data, explained.

ATAS (Alliance for Transformative AI Systems) is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our services, website, and platforms.

We collect information that you provide directly to us, as well as information generated automatically as you use our services.

Provided directly

• Personal identification information - name, email address, phone number
• Professional information - organization, role, research interests
• Account credentials
• Payment information for services
• Research participation data

Collected automatically

• Usage data and analytics
• Technical information - IP address, browser type, device information
• Any other information you choose to provide when using our services or participating in our research programs

We use collected information to:

• Provide and improve our AI research services
• Process your requests and transactions
• Communicate with you about services and updates
• Conduct research and development activities
• Ensure platform security and prevent fraud
• Comply with legal obligations
• Personalize your experience
• Analyze usage patterns to improve our services
• Send relevant educational content and research opportunities

We do not sell your personal information. We may share your data with:

• Trusted service providers who assist our operations, under strict confidentiality agreements
• Research partners and academic institutions - only anonymized data
• Legal authorities when required by law
• Professional advisors (lawyers, accountants) under confidentiality obligations
• Potential business transaction parties (mergers, acquisitions) with your consent

All third parties are contractually required to protect your data and use it only for specified purposes.

We implement industry-standard security measures to protect your data, including:

• Encryption of data in transit and at rest
• Secure access controls and authentication
• Regular security audits and assessments
• Employee training on data protection
• Incident response procedures
• Secure data centers with physical security
• Regular backups and disaster recovery plans
• Network security monitoring

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.

• Account information is retained while your account is active and for a reasonable period afterward
• Research data is retained according to academic standards and regulatory requirements
• Payment information is retained as required for accounting and legal compliance

You may request deletion of your data at any time, subject to legal retention requirements.

You have the right to:

• Access your personal data and obtain a copy
• Correct inaccurate or incomplete data
• Request deletion of your data, subject to legal requirements
• Object to or restrict certain data processing activities
• Withdraw consent for data processing
• Data portability - receive your data in a structured format
• Opt out of marketing communications
• Lodge a complaint with data protection authorities

To exercise these rights, contact us at privacy@atas.rw. We will respond to your request within 30 days.

We use cookies and similar tracking technologies to enhance your experience and analyze usage.

Types of cookies we use

• Essential cookies - necessary for site functionality
• Analytics cookies - to understand usage patterns
• Preference cookies - to remember your settings
• Marketing cookies - with your consent

You can control cookies through your browser settings. Disabling certain cookies may limit functionality. We also use analytics tools like Google Analytics to improve our services.

ATAS is based in Rwanda. Your data may be transferred to and processed in Rwanda or other countries where we or our service providers operate.

Safeguards for international transfers

• Standard contractual clauses
• Adequacy decisions by relevant authorities
• Your explicit consent where required

All transfers comply with applicable data protection laws including Rwanda’s data protection regulations and international standards.

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors.

How we notify you

• Posting the updated policy on our website
• Sending email notifications to registered users
• Displaying a notice on our platform

The “Last Updated” date at the top of this page indicates when the policy was last revised. Your continued use after changes constitutes acceptance of the updated policy.