Privacy Policy · ATSCheck

1.Who we are

ATSCheck (atscheck.emketech.com) is a product of EmKeTech Ltd. In this policy, “EmKeTech”, “we” and “us” mean EmKeTech Ltd as the operator and provider of ATSCheck, and “you” means anyone who visits the website or uses the service.

For personal data processed to provide ATSCheck to its own users, EmKeTech is the controller.

Please send any privacy question or request through our support form.

When an organisation uses ATSCheck HR to review candidates, that organisation is the controller of the candidate data and EmKeTech Ltd processes it on the organisation’s behalf. See HR customers and candidate data.

2.Scope of this policy

This policy covers the ATSCheck website, the ATSCheck application and the emails we send about it, across every plan and the Curated service. It explains what personal data we process, why, on what legal basis, who we share it with, how long we keep it and the rights you have.

It does not cover other EmKeTech products, which keep separate accounts and data, or websites operated by others that we link to. If paid purchasing is enabled in future, the payment processor’s checkout page will be covered by that provider’s own privacy notice.

How ATSCheck uses cookies and browser storage is described in more detail in the Cookie Policy.

3.Personal data we process

Category	What it includes
Account details	Your name, email address, account status, accepted Terms version, plan and communication preferences. Passwords are protected and are never readable by ATSCheck staff.
Sign-in and security settings	Your two-factor authentication choice, active sessions, sign-in history and account-protection records such as failed attempts and temporary lockouts.
Resumes (CVs)	Files you upload or text you paste, each saved version, the text and structure extracted from them, and file details such as name, type and size. Resumes can contain contact details, work history, education and anything else you choose to include.
Job descriptions	Job postings you paste or save, and the requirements ATSCheck extracts from them.
Analyses and scores	ATS compatibility findings, job-match and requirement scores, evidence quotes from your resume, recommendations, rewrite suggestions, and any feedback you give on a result.
Cover letters	Cover letters generated for you, the preferences you give (such as tone or instructions) and any edits you save.
Curated requests	The target role, the optional job description, the optional link to your LinkedIn profile, a text copy of the CV you choose to share, your notes, your recorded consent, the CV wording, cover letters and LinkedIn text our team drafts for you, the message thread between you and the ATSCheck team and, for any application you ask us to make, the role you selected, your approval and the application details submitted.
HR workspace data	Workspace name and settings, members and their roles, team invitations, job openings and confirmed requirements, assignments, comments and team activity.
HR candidate data	Candidate details added by an organisation (such as name, email, phone, location, source and tags), candidate resumes and files, analyses, comparisons, suggested interview questions, pipeline stages and their history, and recruiter notes.
Billing and entitlement information	Your plan, complimentary access and redeemed offers. If paid purchasing is enabled in future, this can also include subscription status, renewal/cancellation dates, invoices and payment status. Payment-card details would be handled by the payment processor and would not reach ATSCheck.
Security, audit and usage records	Records needed to secure accounts, investigate problems, operate plan limits and record authorised access. These records do not contain document content.
Abuse-prevention data	Limited IP, browser and device signals used briefly to prevent automated abuse on the sign-up and password reset pages (see Cookie Policy).
Emails and support	Emails you send to support and our replies, and a record of the service emails we send you.

ATSCheck does not ask for special category data (such as health, ethnic origin, religion, political opinions or sexual orientation). Please leave it out of the resumes and notes you add. ATSCheck’s analysis is instructed to disregard protected characteristics.

4.Where the data comes from

From you, when you create an account, upload or paste documents, use features, contact support or pay.
From an organisation using ATSCheck HR, when it adds you as a candidate or invites you to its workspace.
From an ATSCheck administrator, when we create an account for you (for example for a customer organisation), in which case we email you so you can sign in and set your own password.
From a payment processor, if paid purchasing is enabled, which would tell us whether a payment succeeded and the status of your subscription.
Generated by ATSCheck, such as analyses, scores, suggestions and security records.

5.Why we use it and our legal bases

Purpose	Legal basis (GDPR Article 6)
Providing ATSCheck: creating and running your account, analysing resumes and job descriptions, producing scores, suggestions, rewrites and cover letters, keeping your library and history, running HR workspaces and invitations, and exporting your data.	Performance of our contract with you (6(1)(b)).
Delivering the Curated service: members of the ATSCheck team reading the CV, LinkedIn profile and details you share for a request, curating and optimising your CV, drafting cover letters and LinkedIn profile text on your behalf, replying to you and, only for a role you select and explicitly approve, submitting an application on your behalf using only the facts you supplied or approved.	Performance of our contract with you (6(1)(b)). We also ask for your explicit agreement before a request is sent, so you decide exactly what the team may read, and we act on an application only on your instruction for that role.
Plans and entitlements: applying your plan, promo codes and complimentary access; if paid purchasing is enabled, taking payment and sending receipts/billing notices.	Performance of our contract with you (6(1)(b)).
Service and security emails: email confirmation, password reset, sign-in codes, alerts about security changes, invitations, analysis-ready notices and Curated reply notices.	Performance of our contract (6(1)(b)) and our legitimate interest in keeping accounts secure (6(1)(f)).
Keeping ATSCheck secure: confirming email addresses, two-factor authentication, session management, the security check on the sign-up and password reset pages, rate limiting, account lockouts, audit logging and investigating errors and misuse.	Legitimate interests (6(1)(f)) in protecting accounts, data and the service from fraud, abuse and automated attacks, which also supports our security obligations under Article 32.
Enforcing plan limits and fair use, and monitoring feature reliability using records that contain no document content.	Legitimate interests (6(1)(f)) in operating and improving a sustainable service.
Keeping accounting and tax records.	Legal obligation (6(1)(c)).
Responding to support requests and to requests to exercise your rights.	Performance of our contract (6(1)(b)) and legal obligation (6(1)(c)).
Establishing, exercising or defending legal claims.	Legitimate interests (6(1)(f)).
Occasional product news emails.	Consent (6(1)(a)). The option is off unless you turn it on in your account settings, and you can turn it off at any time.

Where we rely on legitimate interests, we have balanced them against your rights and reasonable expectations, and we keep the data involved to the minimum. You can object to this processing; see Your rights.

If you do not provide the data a feature needs, such as your email address or the resume you want analysed, we cannot provide that feature.

6.AI processing

Some ATSCheck features use an AI service provider acting as our processor.

We send only the information needed to provide the feature you request, such as relevant document text or a scanned file that needs to be read.
ATSCheck does not use your resume, job descriptions, candidate data or generated output to train AI models.
Automated outputs can be incomplete or inaccurate. They are provided as guidance and should be reviewed by a person before they are used.

The AI service may involve processing outside the European Economic Area; see International transfers. More detail is on the Responsible AI page.

7.Scores and automated decision-making

ATSCheck calculates scores and evidence statuses automatically. They are guidance: they describe how a document reads and what evidence it contains for a job’s requirements. They do not predict whether you will be invited to an interview or hired.

ATSCheck does not make decisions that have legal or similarly significant effects on anyone within the meaning of Article 22 GDPR. It does not make hiring decisions, never automatically rejects, ranks out or moves a candidate, and does not assess personality or “culture fit”. In ATSCheck HR, only a person in the organisation can change a candidate’s stage.

Organisations using ATSCheck HR must keep meaningful human review of every hiring decision and must not rely on ATSCheck outputs as the only basis for a decision about a candidate.

8.The Curated service

Curated is a service delivered by people: you can ask the ATSCheck team to curate and optimise your CV, draft cover letters, optimise your LinkedIn profile for the roles you are targeting and, if you want, apply to roles on your behalf. This is the one part of ATSCheck where people on our team read your content. Paid plans, including Curated, cannot be ordered yet; this section describes how the service handles your data once it opens.

Before a request is sent, you choose the CV text to share and confirm that the ATSCheck team may read it. You can also give us a link to your LinkedIn profile and a target job description, if you want those included. We keep a text copy of what you shared with the request, together with the date of your agreement.
We draft CV wording, cover letters and LinkedIn profile text on your behalf and send them to you in the request. What you do with a draft is your decision.
We submit an application only for a role you select and explicitly approve, using only the facts you supplied or approved. When we do, the application details that role needs, such as your CV, cover letter and contact details, are shared with that employer or recruitment platform on your instruction, and it then handles them under its own privacy notice. We never publish your content or apply for a role you have not approved.
Only authorised ATSCheck team members working on requests can open them, and every time a team member opens a request it is recorded in our audit log.
Replies are shown in your account. We email you a notice that a reply is waiting, without the reply itself.
You can ask us to close a request and delete what you shared at any time through our support form. This does not affect work already done.

9.HR customers and candidate data

When an organisation adds candidates to ATSCheck HR, the organisation is the controller of that candidate data and EmKeTech Ltd processes it on the organisation’s behalf as a processor, following the organisation’s instructions.

The organisation is responsible for having a lawful basis to process candidate data and for telling candidates how their data is used, including that ATSCheck is used.
The organisation decides how long candidate data is kept. A workspace owner can set candidates to be deleted automatically after 3, 6, 12 or 24 months without activity, or keep them until they are deleted manually. Authorised members can delete a candidate, a job or the whole workspace at any time.
Access to a workspace is limited to its active members, according to the roles the organisation assigns.
The organisation must keep human review of hiring decisions.
EmKeTech uses candidate data only to provide the service to that organisation and never for its own purposes. ATSCheck does not use resumes, job descriptions, candidate data or generated output to train AI models.

Team invitations are sent by email to the address the organisation enters. Unused invitations expire after 7 days. Hiring plans cannot be bought yet. Before we accept live candidate data for an organisation, that organisation must accept our data-processing terms and is responsible for giving candidates appropriate privacy information about its use of ATSCheck. You can ask for the current data-processing and service-provider information through our support form.

If you are a candidate and want to exercise your rights over data an organisation added, please contact that organisation. If you contact us instead, we will pass your request to the organisation or help you reach it.

10.Access by ATSCheck staff

A small number of authorised staff operate and support ATSCheck. Their access is limited, controlled and recorded.

Staff can access account and usage information only when it is needed to operate the service, protect accounts or answer a support request.
Document and candidate content is not available through normal administration tools. Authorised team members can read content you deliberately share through the Curated service so they can fulfil that request.
Administrative access is protected and auditable. Staff cannot read your password.

We use the following categories of service provider to run ATSCheck. They handle data under their applicable terms and must keep it secure. Most act as our processors; a payment provider may also act as an independent controller where it handles fraud prevention, regulatory or legal obligations. The current list of service providers is available on request through our support form.

Category of provider	What it does	Data involved	Location
Hosting and infrastructure	Runs the website and application	Application and account data needed to provide the service	Application processing in the EU (Ireland). Public website files may be delivered from a global network.
Database hosting	Stores application data and uploaded files	Account, library, workspace and candidate data	EU (Ireland)
AI service provider	Provides requested AI-assisted features	The minimum content needed for the requested feature	United States
Payment processor (only if paid purchasing is enabled)	Checkout, subscriptions, invoices and receipts	Name, email, billing address, payment details (collected directly by the processor), subscription and invoice records	May process data outside the EEA
Transactional email delivery	Sends service, security and billing emails	Email address and message content	May process data outside the EEA
Bot protection	Protects account forms from automated abuse	Limited network, browser and device signals	Global network

If paid purchasing is enabled, the payment processor will collect payment details on its own secure page. For some purposes, such as preventing payment fraud and meeting its own legal obligations, it may act as an independent controller under its own privacy notice, available on the checkout page.

We may also disclose personal data:

to members of an HR workspace, for data that belongs to that workspace;
to an employer or recruitment platform, on your instruction, when you ask the Curated team to apply for a role you selected and approved: only the application details that role needs, which the recipient then handles as its own controller;
to professional advisers, such as lawyers and accountants, under a duty of confidentiality;
where required by law, or to a court, regulator or law enforcement authority with a valid legal request; and
to a buyer or successor if EmKeTech’s business or ATSCheck is reorganised or sold, in which case this policy continues to protect your data.

We do not sell personal data, we do not share it with advertisers or data brokers, and we do not use it for advertising.

12.International transfers

ATSCheck’s primary database and application functions are hosted in the EU (Ireland). Some service providers and their sub-processors may process data outside the European Economic Area, including for AI-assisted features and transactional email delivery.

Where Chapter V of the GDPR applies, we use contractual or other lawful transfer safeguards required for the relevant service, including Standard Contractual Clauses where applicable. We also limit what is transferred, as described in AI processing.

You can ask for the confirmed details of the mechanism that applies to a transfer through our support form.

13.How long we keep data

We keep personal data only as long as we need it for the purposes above. An automated job runs every day to delete data that has reached the end of its retention period.

Data	How long we keep it
Free plan analyses and results	30 days, then deleted automatically.
Free plan resumes	Uploaded files are not kept; only the extracted text is, and it is deleted once no analysis uses it (at the latest when the related analysis expires). The job description you paste for a Free check is used for that check only: it is not saved to a job library, it is cleared from the record once the score is ready, and a check that does not complete is deleted with its result after 30 days.
Saved resumes, files, jobs, analyses and cover letters (paid plans)	Until you delete them or delete your account.
Account details and security settings	For as long as your account exists.
Sign-in sessions	A session ends after 30 days, after 72 hours without activity, or when you sign out. Records of ended sessions are deleted 30 days after the sign-in.
Email confirmation links, password reset links and sign-in codes	Links for confirming your email address expire after 48 hours, password reset links after 60 minutes and sign-in codes after 10 minutes. All are deleted 1 day after they expire.
Rate-limiting records (hashed IP address)	1 day.
Daily usage counters for plan limits	60 days.
Security and audit records; AI usage records	400 days (about 13 months), then deleted automatically.
Billing event records	400 days. Your current plan and subscription status are kept for as long as your account exists.
Invoices and payment records (once paid purchasing is enabled)	Held by the payment processor and retained as required by applicable tax/accounting law and the processor's obligations.
HR candidate data	According to the retention period the organisation sets (3, 6, 12 or 24 months without activity), or until an authorised member deletes it.
HR workspaces, jobs, notes and team activity	Until the workspace or item is deleted. Activity records follow the 400-day period above.
Unused team invitations	Expire after 7 days; expired or revoked invitations are deleted 60 days after they were sent.
Curated requests and messages	12 months after the request is closed, then deleted automatically, or earlier if you delete your account or ask us to delete them. An original resume file is deleted when no other saved record uses it.
Complimentary access	For as long as your account exists.
Promo-code operational records	24 months after the latest expiry, revocation or redemption, then deleted automatically. When you delete your account, the promo code record is no longer linked to you.
Support and privacy-rights emails	24 months after the case is closed, under our mailbox retention procedure. You can ask us to delete them earlier.
Backups	Our production database is backed up automatically every day by our database provider. The current provider backup window is 7 days. Data deleted from the live service may remain in backup copies until the relevant backup expires; if a backup is restored, the original deletion/retention obligation still applies.

14.Deleting your data and your account

You can delete individual resumes, resume versions, saved jobs, analyses and cover letters at any time in ATSCheck.
You can delete your account yourself in your account settings. If paid subscriptions are enabled and you have one, it is cancelled first so you are not charged again. Your account and everything in your personal library are then deleted immediately.
If you own an HR workspace, you need to transfer ownership or delete the workspace before deleting your account, so that an organisation’s candidate data is never removed without its decision.
ATSCheck administrators can also delete an account, for example at your request or where our Terms allow it. The deletion is recorded in our audit log.
After deletion we keep only what we must: a content-free audit record that an account was deleted (not linked to you), AI usage records with your account link removed and, if paid purchasing has been used, payment records that the payment processor must retain for legal reasons.

15.How we protect data

We use technical and organisational measures appropriate to the risk, including:

EU hosting and access controls that keep accounts and workspaces separate.
Encrypted connections (HTTPS) between your browser and ATSCheck.
Private file storage and protected access to documents.
Secure authentication, optional two-factor authentication and account-protection controls.
Automated-abuse prevention, rate limits and temporary safeguards after repeated failed attempts.
Security records designed to exclude document content.
Limited, audited staff access, as described in Access by ATSCheck staff.

No system is completely secure. If a personal data breach occurs, we will act in line with our obligations under the GDPR, including notifying the supervisory authority and affected people where required. See Data & Security for more detail.

16.Your rights

Under the GDPR you have the right to:

Access the personal data we hold about you and receive a copy.
Rectification of inaccurate or incomplete data. You can update your name in account settings; to change your email address, contact support from your current address.
Erasure of your data. You can delete content and your account yourself, as described in Deleting your data.
Restriction of processing in certain circumstances, for example while we check a disputed request.
Data portability: to receive the data you provided in a structured, machine-readable format. You can download a JSON export of your account data from your account settings.
Object to processing based on our legitimate interests.
Withdraw consent at any time where we rely on it, such as product news emails or what you shared in a Curated request, without affecting processing before withdrawal.

How to exercise them. Many rights can be used directly in your account settings. For anything else, contact us through our support form and give your account email address. We may ask you to confirm your identity before acting. We will respond within one month of receiving your request; for complex or numerous requests this can be extended by up to two further months, and we will tell you if that happens. Exercising your rights is free unless a request is manifestly unfounded or excessive.

Complaints. We would like the chance to resolve any concern first, but you have the right to lodge a complaint with a supervisory authority, in particular in the EU country where you live, work or where you believe an infringement occurred. In Ireland the authority is the Data Protection Commission (www.dataprotection.ie).

17.Cookies and browser storage

ATSCheck uses only strictly necessary first-party cookies: atscheck_session keeps you signed in, atscheck_ws remembers your selected HR workspace, and atscheck_mfa holds a pending two-factor sign-in for up to 10 minutes. ATSCheck HR also remembers your focus-mode preference in your browser’s local storage.

We use no analytics, advertising or marketing cookies, which is why there is no cookie consent banner. The full details, including the security check on the sign-up and password reset pages, are in the Cookie Policy.

18.Children

ATSCheck is intended for job seekers and hiring teams and is not intended for anyone under 16. We do not knowingly collect personal data from children under 16. If you believe a child has created an account, contact us through our support form and we will delete it.

19.Changes to this policy

We update this policy when ATSCheck or the law changes, and change the “Last updated” date above. If a change is material, we will tell account holders by email or in the application before it takes effect.

20.Contact

For questions about this policy or your personal data, or to ask for the current list of service providers, contact us through our support form.