Draft. This document needs legal review and translation before launch. Every value in [brackets] is a blank the operator must fill in.
Privacy Policy
Last updated: [publication date]
The short version
The résumé you upload to the ATS check is read in memory and thrown away — it is never written to disk and never stored. We keep only what you deliberately save to an account. We do not sell your data, and we never see your card number.
Who we are
This service is operated by [operator legal name], [address]. You can reach us at [contact email]. Full details are in our Impressum.
What we collect, and why
- Your account. An email address, and — if you choose a password — a hashed password. Used only to sign you in and keep your work. You may instead sign in with a one-time link or with Google.
- Résumés and your profile. The content you save. Stored so you can reach it from any device and reuse it across templates. It is yours; you can delete it.
- Payments. When you buy, Stripe processes the card — we never receive or store the card details. We keep a record of what was purchased and whether it was refunded.
- AI features. If you use the AI writing or the PDF import, the relevant résumé text is sent to our AI provider, [Anthropic], to generate the suggestion. It is not used to train models. [Confirm data-processing terms.]
- Operational logs. Minimal server logs needed to run the service securely. No advertising or cross-site trackers.
The ATS check stores nothing
A file you drop into the ATS check is processed in memory to extract its text, and discarded when the request ends. There is no table it could be stored in. If that ever changes, this page changes first.
Cookies
One cookie: a sign-in session token, set only after you sign in. No third-party advertising cookies.
Who else touches your data
We use a small number of processors to run the service: Stripe (payments), [email provider] (sign-in emails), Google (optional sign-in), and [Anthropic] (AI features). Each processes data only to provide their part of the service.
Where it is stored, and for how long
Data is stored in [region/provider]. [Describe any transfer outside the EU/EEA and the safeguards used.] We keep your saved content while your account exists and delete it when you delete your account or ask us to.
Your rights
Under the GDPR you can ask to access, correct, export, or delete your data, and to object to or restrict processing. Write to [contact email] and we will act within the statutory time. You may also complain to a supervisory authority — in Germany, your state's data-protection authority.
Changes
If this policy changes, the new version is posted here with an updated date.