سیاست حفظ حریم خصوصی کاربران اپلیکیشن های شرکت گسترش نرم افزار اطلس

1. Identity of Controller

Atlas Software Development Company (“Controller”, “Company”) headquartered in Tabriz, Iran, is the legal data controller for all Android and Windows applications published under its ownership.

2. Regulatory Framework

• EU General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA/CPRA)
• Children’s Online Privacy Protection Act (COPPA)
• Google Play Developer Policy (Sensitive Permissions & Accessibility)
• Microsoft Store Policy

3. Categories of Data Processed

• Identity Data (Name, Email if provided)
• Device & Technical Data
• SMS Content (only when app core functionality requires)
• Financial Notification Data (processed locally by default)
• Usage & Diagnostic Data

4. Strict SMS & Accessibility Compliance Statement

SMS, Notification Access, and Accessibility permissions are requested strictly for core declared functionality. No data is sold, profiled, or transferred for advertising purposes. Accessibility services are never used for surveillance, behavioral tracking, or credential harvesting.

5. Legal Basis for Processing (GDPR Art.6)

• Explicit Consent
• Performance of Contract
• Legal Obligation
• Legitimate Interest (balanced test applied)

6. Data Minimization & Privacy by Design

Applications are engineered under Privacy-by-Design principles (GDPR Art.25). Only minimum necessary data is processed.

7. International Transfers

If cross-border transfer occurs (e.g., cloud analytics), safeguards such as Standard Contractual Clauses (SCCs) or equivalent legal mechanisms are applied.

8. Data Subject Rights

• Right of Access (Art.15)
• Right to Rectification (Art.16)
• Right to Erasure – “Right to be Forgotten” (Art.17)
• Right to Restrict Processing (Art.18)
• Right to Data Portability (Art.20)
• Right to Object (Art.21)

9. Data Retention Policy

Personal data is retained only as long as strictly necessary for functional or legal requirements.

10. Security Measures (GDPR Art.32)

• Encryption in transit
• Secure local processing
• Access control mechanisms
• Regular security review

11. Data Deletion Requests

Users may request deletion by contacting our official communication channel. Identity verification may be required.

12. Children’s Data

Applications are not directed to children under 13. No intentional collection occurs.

13. Jurisdiction & Governing Law

This policy shall be governed by applicable international data protection regulations and relevant Iranian commercial law where applicable.

14. Contact & DPO Communication

Atlas Software Development Company
Tabriz, Iran
Phone: +98 41 35455392
Email: shahrdad1980@yahoo.com