Last updated: March 2026

Privacy Policy

ATSReady (“we”, “our”, “us”) is committed to protecting your privacy. This policy explains what data we collect, why we collect it, and how we keep it safe.

1. Information We Collect

Account information: When you sign up via Google OAuth or email OTP (powered by Clerk), we receive your name, email address, and a unique user identifier. We do not store passwords.
Resume content: The resume data you enter or upload (text, work history, education, skills) is stored in our database to power the editor and AI features.
Uploaded files: PDF and DOCX files you upload are stored securely in Cloudflare R2 object storage and are accessible only to your account.
Usage data: We collect anonymised usage analytics (page views, feature interactions) via Vercel Analytics to improve the product.
Payment information: Token purchases are handled by Razorpay. We store only the Razorpay order ID and payment status — we never see or store your card details.

2. How We Use Your Information

To operate the service: process your resume, run ATS scoring, and generate AI-tailored content.
To manage your account and token balance.
To send transactional emails (e.g. payment confirmations) via Resend.
To debug errors and improve reliability — error logs are stored internally and reviewed by our team only.
We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. AI Processing

Resume content and job descriptions you submit may be sent to Google Gemini APIs for AI-powered analysis and generation. This data is used solely to fulfil your request.
We do not use your resume content to train AI models.
Google's data processing is governed by their Terms of Service and Privacy Policy.

4. Data Retention

Your account data and resumes are retained for as long as your account is active.
You may delete individual resumes from your dashboard at any time.
You can permanently delete your account from your account settings page at any time.

5. Cookies & Tracking

We use essential cookies set by Clerk for authentication session management.
Vercel Analytics uses privacy-friendly, cookie-free tracking.
We do not use advertising or cross-site tracking cookies.

6. Security

All data in transit is encrypted via HTTPS/TLS.
Uploaded files are stored in Cloudflare R2 with private access controls.
Database access is restricted to application services only via Neon's secure connection pooling.

7. Your Rights

You can access, export, or delete your resume data directly in the app.
To request a full data export, email privacy@atsready.in and we will respond within 30 days.

8. Your Right to Delete Your Data

You can permanently delete your account and all associated data at any time from your account settings page. Deletion is processed immediately. Resume data, credits, and personal information are permanently removed.
Certain financial records (payment orders) are retained for up to 7 years as required by applicable tax laws, but are anonymized and not linked to your identity.
Anonymous product feedback may be retained to improve the service.
To request manual deletion or if you encounter any issues, email support@atsready.in. We will process all deletion requests within 30 days as required by applicable law.

9. GDPR — Rights of EU Users

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):
Lawful basis: We process your personal data on the basis of (a) contract performance — to provide the resume and ATS services you requested, and (b) legitimate interests — to improve the product, prevent abuse, and send transactional communications.
Right of access (Art. 15): You may request a copy of your personal data. Email privacy@atsready.in and we will respond within 30 days.
Right to rectification (Art. 16): You may correct inaccurate data directly in your account settings, or contact us.
Right to erasure (Art. 17 — 'Right to be Forgotten'): You may delete your account and all associated data at any time from account settings. See Section 8 for details.
Right to restriction (Art. 18): You may request we restrict processing of your data while a dispute is resolved.
Right to data portability (Art. 20): You may request your data in a machine-readable format.
Right to object (Art. 21): You may object to processing based on legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds.
To exercise any GDPR right, email privacy@atsready.in. We respond within 30 days. If you are unsatisfied with our response, you may lodge a complaint with your local supervisory authority.
For enterprise and B2B users requiring a Data Processing Agreement (DPA), see our DPA page.

10. CCPA — Rights of California Users

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
Right to know: You may request disclosure of the categories and specific pieces of personal information we collect, use, and share.
Right to delete: You may request deletion of your personal information. See Section 8 for the account deletion process.
Right to opt out of sale: ATSReady does not sell personal information to third parties. We have no 'sale' to opt out of.
Right to non-discrimination: We will not discriminate against you for exercising CCPA rights.
Global Privacy Control (GPC): We honor GPC browser signals. If your browser sends a GPC signal, we will not use your data for analytics beyond what is strictly necessary.
To exercise CCPA rights, email privacy@atsready.in with the subject 'CCPA Request'.

11. Changes to This Policy

We may update this policy periodically. We will notify you of significant changes via email or an in-app notice. Continued use of the service after changes constitutes acceptance.

12. Contact

For privacy-related questions, contact us at privacy@atsready.in.
For enterprise Data Processing Agreement (DPA) requests, see our DPA page.

← Back to ATSReady