Privacy Policy

Resume files and job descriptions you upload, plus the analysis results we generate from them. Account data when you sign in (email, name, profile photo from your sign-in provider). Technical data such as IP address, browser information, language, time zone, and screen size, used for abuse prevention and service improvement.

We process your CV only to provide the service: analyses and scores, red-pen marks, edits in the CV editor, rewrites, and tailoring to a job posting. We never sell your data. Employers see your CV only if you turn on employer sharing for it (off by default). They can then find a summary without your name (a short headline, roles, skills, years of experience, remote preference, and your location only if you choose to share it). They see the CV itself only after you accept their request, and only for 14 days: without your name, email, phone, or links, though your employers, dates, and places stay in it. They see your email only if you choose to share it. You can turn sharing off, pause it, or decline a request at any time. IP addresses are stored with each analysis and used to prevent abuse and limit request rates.

We use the following subprocessors: Anthropic (Claude, which reads and marks your CV and writes edits and rewrites), OpenRouter and Google (other AI models, mainly on the Free plan and as fallbacks), Oracle Cloud (database and API servers, in the United States), Google Cloud (file storage and backups), Vercel (website hosting and analytics), Firebase (sign-in and account emails), Stripe (payments — we never see your card details), and Logo.dev (company logos your browser loads). Some of the models we reach through OpenRouter and Google run on free tiers whose providers may keep requests and use them to improve their services, and OpenRouter passes each request to the model's host, which may be outside the United States. We do not use your CV to train AI models.

Your CVs, uploaded files, and analyses are kept while your account is active so your history and dashboard work. Files uploaded without an account, before sign-in was required, are kept for service-quality auditing. You can delete your account and its data, including uploaded files, at any time from the Account page. Deleted data can remain in our nightly database backups, which we use only to recover the service, and Stripe keeps your customer and payment records (such as your email and invoices) as tax and accounting rules require. We honor deletion requests sent to info@atsgrade.com within 30 days.

Depending on your location (including under GDPR and CCPA), you have the right to access, correct, export, or delete your personal data, and to object to processing. You can delete your account and its data yourself on the Account page; to access, correct, or get a copy of your data, or to object to processing, email us.

We use privacy-friendly Vercel Analytics (no cross-site tracking cookies) and the browser storage Firebase Authentication needs for sign-in. Your browser's local storage also keeps your settings (such as the theme), a random visit ID that is linked to your account once you sign in, and where you arrived from (referring site and campaign tags); we use these for our own product statistics and keep those events for 180 days.

We will update this page when our practices change and adjust the date above. Questions: info@atsgrade.com.