Applicant privacy notice

Atheron Network Inc. ("Atheron", "we", "us") decides how your application is handled and is responsible for it. Questions go to privacy@aton-network.org.

• What you give us when you apply: your name, your email address, a password for your candidate account (we keep only a scrambled form of it), your CV, anything you choose to tell us, and your answers to the role's questions.
• What happens while we consider you: the messages between you and our hiring team, the stage your application is at, interview times, the interviewers' scorecards and notes, our decision and its reason, and any documents we ask you for.
• If we make you an offer: the offer itself, which only the people who need to see it can open.
• To keep the form safe: a check that you are a person (Cloudflare Turnstile) and the technical details of your visit our servers record for security.

We do not ask for your date of birth, a photograph, your nationality or anything about your health. If your CV includes them, we do not use them.

• To consider you for the role you applied for, and for others you apply for.
• To contact you about your application and arrange interviews.
• To keep a fair and consistent record of how we hire.
• If you join us, to start your employee file.

We rely on your consent when you send an application, and on our legitimate need to run a fair hiring process.

A person reads every CV. Before they do, an AI model reads it and writes that person a short note on how your experience fits the role. The model is told not to weigh your name, any photograph, your age, your nationality or gaps in your work history. It never turns anybody down and makes no decision. The model is provided by Anthropic, which processes the CV for us only to write that note.

Our hiring team for the role: HR, the hiring manager and the people who interview you. Nobody else at Atheron, and we never sell it. These companies hold or carry it for us, under contracts that limit them to doing that:

• DigitalOcean, which stores it in Toronto, Canada.
• Microsoft 365, which sends interview invitations and runs the Teams meetings.
• Anthropic, for the CV note in section 4. Its processing may take place in the United States.
• Our email provider, which delivers our messages to you.
• Cloudflare, which protects our site and runs the person check.

Where a provider works outside Canada, your information may be available to the authorities of that country under its law.

• Your application: deleted twelve months after a decision on it. A role put on hold counts as closed.
• Our hiring team's record of it, including your CV: kept for two years, then deleted.
• Backups: the encrypted copies are gone within eight days of a deletion.
• Interview invitations: kept in our calendars under our Microsoft 365 retention settings.
• If you join us: your application, its interview notes and the messages with you move into your employee file and are kept as long as that file.

• See what we hold about you, and ask us to correct it.
• Withdraw your application at any time from your candidate account or by writing to us, and ask us to delete it.
• Ask how the CV note in section 4 was used in your case.

We answer within 30 days. If you are not happy with our answer, you can complain to the Office of the Information and Privacy Commissioner for British Columbia or to the Office of the Privacy Commissioner of Canada.

When this notice changes, we publish a new version with its date, and earlier versions stay readable on this page.