Privacy Policy

This Policy applies to the ATSTune website, accounts, and digital services. For data where we decide the purpose and means of processing, we act as controller or the equivalent role under applicable law. Creem independently processes checkout and payment information as Merchant of Record under its own privacy notice. Information you separately submit to employers, recruiting platforms, or other third parties is outside this Policy.

We collect information you provide, information created as you use the service, and limited records supplied by partners to complete payments.

• Account information: name, email address, a secure password hash, email-verification status, and account settings; when you use Google Sign-In, this also includes the stable Google account identifier, avatar, and email-verification status supplied by Google.
• Career content: uploaded PDF or DOCX resumes, parsed text, structured resume fields, job descriptions, target roles, analysis results, optimization results, and export records.
• Service activity: point balance and history, features used, request times, error and security logs, and technical information needed to maintain sessions and prevent abuse.
• Device and network information: server logs and Google Analytics may process IP address, browser or device type, pages visited, referring pages, approximate location, and access time. Google Analytics provides us with aggregated usage measurements.
• Payment records: product, amount, currency, transaction identifier, status, and points delivered. Creem processes complete card or bank-account details; we do not receive or store them.
• Support communications: email content, attachments, and case-handling records you provide when contacting support.

We use personal information only for purposes reasonably connected to your use of the service.

• Create and secure accounts, verify email, enable login, and reset or change passwords.
• Parse and store resumes; generate ATS analysis, AI optimization, and exports you select.
• Record point usage, reconcile Creem transactions, and deliver points after successful payment.
• Answer support, refund, and privacy requests and investigate errors, fraud, abuse, and security incidents.
• Maintain, troubleshoot, and improve performance, reliability, and user experience.
• Meet tax, accounting, consumer-protection, law-enforcement, and other legal obligations.
• Send necessary service communications with your consent or as otherwise allowed by law.

Where law requires a legal basis, we rely on: performance of our contract with you (providing requested services and points); our legitimate interests (security, fraud prevention, troubleshooting, and improvement); compliance with legal obligations; and your consent where required. You may withdraw consent, without affecting processing that was lawful before withdrawal.

Only when you request ATS analysis or AI optimization do we send the resume and job content needed for that request to the third-party AI provider currently configured for the service. That provider processes prompts and generated results on our behalf or under the data role stated in its service terms.

Do not include sensitive personal information that the service does not need. AI results can be wrong and should be reviewed before export or submission. We do not make your resume public or authorize third parties to use it for advertising to you.

We do not sell personal information or use resumes for cross-context behavioral advertising. We share limited information only as needed to provide the service, comply with law, or protect rights.

• Google verifies identity and supplies basic account details only when you choose Google Sign-In. Google Analytics also processes website usage and device information so we can understand traffic and improve the service.
• AI providers process analysis or optimization requests you initiate.
• Infrastructure and email providers host the application and data, store files, and send verification and necessary service emails.
• Creem acts as Merchant of Record and handles checkout, taxes, receipts, refunds, and payment risk.
• Professional advisers, regulators, or law enforcement may receive data where required by law or necessary to establish, exercise, or defend legal rights.
• A recipient in a business reorganization may receive data during a merger, financing, acquisition, or asset transfer, subject to appropriate confidentiality and notice measures.

Read the Creem Privacy Notice

We keep information only for as long as needed for the purposes in this Policy. Account and career content is generally retained until you delete the relevant resume, make a valid deletion request, or it is no longer needed to provide the service. Deleting a resume removes its original file and associated analysis, optimization, and export records from active systems, although limited backups may remain briefly through normal backup cycles.

Transaction, points, security, and dispute records may be kept longer for accounting, fraud prevention, legal claims, and compliance. The exact period depends on the record, legal requirements, risk, and continuing need; after that, data is deleted or de-identified.

We use technical and organizational measures appropriate to the service and sensitivity of the data, such as account authentication, access controls, encryption in transit, private file downloads, and signed payment webhooks. No system is completely secure. If an incident requires notice under law, we will take appropriate steps and notify affected people as required.

Our service providers may process data outside your country or region, where privacy laws may differ. Where required, we use contractual terms, adequacy decisions, or other valid transfer mechanisms and take reasonable steps to protect transferred data.

You can view and edit some profile information in your account and delete your resumes. Depending on local law, you may also have rights to access, correct, delete, restrict or object to processing, obtain a portable copy, withdraw consent, and complain to a local data-protection authority.

• To exercise a right, email [email protected] from the address associated with your account so we can verify your identity.
• We generally respond within the period required by applicable law. Complex or numerous requests may be extended where permitted, with an explanation.
• Some records cannot be deleted immediately because of legal obligations, fraud prevention, dispute handling, or the rights of others.

The service uses necessary browser local storage for your login token so it can maintain your session. Google Analytics uses cookies or similar technologies to measure visits, page usage, devices, and traffic sources; we use this information to understand and improve the service, not for personalized advertising. Creem Checkout may set cookies or similar technologies needed for operation, fraud prevention, and payment. You can restrict cookies through your browser, although clearing necessary browser storage will sign you out.

The service is not directed to children below the age at which they can independently consent to data processing where they live. We do not knowingly collect their data. If you believe a child provided information without appropriate consent, contact us and we will take reasonable steps to delete it.

We may update this Policy when our product, providers, or laws change. We will give reasonable notice of material changes through the website, account, or email and update the date at the top. Where law requires it, we will obtain consent before applying a new processing practice.

For privacy questions or rights requests, contact ATSTune at [email protected].