Privacy Policy

1. What we collect

When you use ATS Pass to analyse a CV, we collect the following data for the sole purpose of performing the analysis:

• The CV file you upload (PDF or DOCX)
• The job description text you provide
• Your IP address (for rate limiting only)
• Your email address (if you purchase credits or use paid analysis)

2. How we use your data

• CV & job description -sent to a third-party AI service to generate your ATS compatibility analysis. The data is processed in memory and is not stored on our servers after the request completes.
• IP address -stored temporarily in an in-memory cache for up to one hour to enforce a rate limit of 5 analyses per hour. It is not written to disk or shared with third parties.
• Email & credit balance -if you purchase credits, your email address and credit balance are stored in our database to track your remaining analyses.

3. Third-party processing

Your CV text and job description are sent to a third-party AI service for analysis. This provider processes data under their own privacy policy and data processing terms. If you would like details about our AI provider, please contact us.

Payments are processed by Stripe, a PCI-compliant payment processor. We do not store your card details. Stripe’s privacy policy applies to all payment transactions.

4. Data retention

We do not persist your CV, job description, or analysis results. All data is held in server memory only for the duration of the request and is discarded immediately after. Rate-limit records (IP address and request count) are held in memory for up to one hour and are lost on server restart.

If you purchase credits, your email address and credit balance are stored persistently in our database. Transaction records (purchase and usage) are also retained for accounting purposes.

5. Cookies and tracking

ATS Pass does not use cookies, localStorage, analytics services, or any other tracking technology. Payment is handled via Stripe Checkout, which is an external redirect and does not set cookies on our domain.

6. Your rights

Under the UK GDPR and EU GDPR you have the right to:

• Access -request confirmation of whether we process your personal data and obtain a copy.
• Erasure -request deletion of your personal data. Because we do not store data beyond the request, there is nothing to delete, but you may still make a formal request.
• Restriction & objection -object to or restrict processing of your data.
• Portability -receive your data in a structured, machine-readable format.
• Withdraw consent -you may withdraw your consent at any time by simply not submitting further analyses.

To exercise any of these rights, please contact us.

7. Lawful basis

We process your data on the basis of consent (GDPR Art. 6(1)(a)). You provide consent by clicking the Analyse button to submit your CV for analysis. You may withdraw consent at any time by simply not submitting further analyses.

8. Security

All data is transmitted over HTTPS. CV text is sanitised on the server before being sent to the AI model. We do not store personal data on disk, reducing the risk surface of a data breach.

9. Changes to this policy

We may update this policy from time to time. The “last updated” date at the top of this page reflects the most recent revision.

10. Contact

If you have questions about this privacy policy or want to exercise your data rights, please reach out via our contact page.