Privacy policy. Your resume file is never uploaded.

• Resume files: PDF, Word, RTF, OpenDocument, TXT and Markdown files are opened in your browser. The file is never uploaded. Your last three PDFs stay in this browser so the Review can show your own pages. To sort a file into roles, its text goes once to AI (reading your resume).
• Scanned resumes: Tesseract OCR reads the picture on your device. It downloads from atsprep.com.
• Checks: the Review, the X-Ray and keyword matching run in your browser.
• Drafts, versions and tracker jobs: kept in this browser's storage, where anyone using this browser profile can see them. Clear this site's data to remove them.
• Backups: unencrypted files you choose to download.
• Pip's memory: Pip's memory is saved only on your device. For your last 5 calls it keeps the questions, your top strength, the skill to work on and up to 8 short story titles, plus your first name and target role. It keeps no transcript and no audio. It is not synced, and it is not sent to our servers or analytics. Edit or delete it in “What Pip remembers” on the interview page. When it is off, Pip saves nothing.
• Practice drills: your browser's own speech service turns spoken answers into text. We never get the audio.
• No selling, no training: we never sell your resume or train models on it. We store it only if you sign in (accounts).

On by default when you add a job in the Studio, once per version of the posting and your resume. It sends the job post's requirement lines and your resume's content lines, never your name or contact details. An open embedding model on Workers AI turns each line into numbers, compared on your device; an open language model then checks whether the closest lines really show each requirement. Nothing is stored or logged. To turn it off, choose Word for word only under How we match. When you add a job post, its text (never your resume) also goes once to an open language model on Workers AI, which marks which lines are requirements and which are pay, perks or company details, and finds the job title and company. That result, not the posting itself, is cached at Cloudflare's edge for up to a week, keyed by a fingerprint of the posting, so the same posting isn't read twice.

Your file is never uploaded. To sort it into roles, its text, without your name or contact details, goes once to an open model on Workers AI. Nothing is kept: we don't log it, and Cloudflare keeps no inputs or outputs after the request and trains no models on them. The model may only copy: anything it returns that isn't in your text is dropped.

• When: only when you press Improve, Write summary, Tailor to job, Fix grammar & tone, Fix all with AI (Pro) or Suggest a stronger answer in interview practice.
• What: only the text that action needs, such as a bullet with its role, your content lines, the job post or an interview answer. Never your contact details.
• Where: our Cloudflare Worker and Workers AI. The text is not stored, logged or used for training. We log the action, its size, the result and whether you were signed in.
• Daily limit: 1 per network, counted with a one-way hash of your IP address for that day; 5 when signed in (300 with ATSPrep Pro), counted against your account ID.

• Your voice: short clips go through our Worker to Workers AI speech-to-text, and a model checks when you have finished. The audio is then discarded, never stored or used for training.
• Pip's next line: the question and your answer's text go to Workers AI.
• Pip's voice: ElevenLabs gets only Pip's lines, which can quote a few of your words or the job post. A follow-up can also name a story you told Pip on an earlier call. Never your audio or transcript.
• Fallbacks: without Pip's voice the call uses captions, not a browser-generated voice; on a busy day your browser's speech service may listen. Your last 10 reports and transcripts stay in this browser; signed in, your account keeps 50. A call you leave part way is kept for a day.

Our MCP server needs no account and logs each tool's name, result and duration, never the text. Its AI tools (tailor_resume, improve_bullet, write_summary, review_interview_answer) send their text to Workers AI under the AI editing rules, limited by a hash of the connecting IP. fetch_job_post reads one public page. A ChatGPT result card makes no network requests; its Open in Studio link keeps the resume after the #, which browsers never send. Your assistant's terms cover what you share with it.

Your browser sends only the link to our Worker. It fetches the public posting's title, company, location and description. Your resume is never sent. Cloudflare caches postings for up to a day; we don't log lookups.

• Free account (Google or email): needed for PDF downloads (Word needs ATSPrep Pro) and more AI edits. Without one, a tally of your free uses stays on your device, and a file waiting for sign-in stays in the browser for up to 30 minutes.
• Google: shares your email, name and picture, never your password, contacts or files. Its code loads only where you can sign in: a Google button, or, when you open the homepage or the Studio signed out, Google's one-tap card, which lists your Google accounts to you alone. We get nothing unless you choose one. It never loads on our guides or blog.
• Email sign-in: we store only a one-way hash of your password. Confirm and reset emails come from hello@atsprep.com through Resend.
• Account record: user ID, email, name if you give one, plan and join date.
• Sync: saved versions, your working draft, tracker jobs and Pip call reports with everything typed in them, and your interview prep path (which job and resume, brief ticks, lessons done, interview date; no answers).
• Where: Supabase, our processor, in the EU (Ireland). Each account reads only its own rows. DataFast gets your random account ID, never your email.
• Leaving: signing out stops sync. Deleting your account removes synced data, your record and sign-in from our servers at once; browser copies stay until you clear them.

• Account emails: a welcome, tips in your first two weeks, a nudge for an untouched resume, a deletion confirmation, and tracker reminders that name your jobs. Turn each kind off from any email.
• Send log: a keyed hash of your address, never the address, logs sends and your choices. Deleting your account clears the log but keeps the choices, so an unsubscribe holds.
• Checklist and updates form: sends your address, the boxes you ticked and campaign details (UTM tags, ad click ID, landing page, referrer), never your resume. You confirm before we add you. A checklist-only record is deleted once sent; updates stay until you unsubscribe.

If you buy ATSPrep Pro, Polar is our payment processor and merchant of record. It collects your card, billing email and country (its policy). We never see your card. We store the order, amount, currency, customer ID, billing period and this month's Pro voice calls. DataFast gets the checkout visitor ID and, after a payment or refund, the amount, currency and payment ID with your random account ID. Deleting your account removes our record; Polar keeps what the law requires.

• DataFast (cookieless): page URLs, referrers, browser, approximate location and a short-lived random ID.
• Our own analytics, from atsprep.com: page, referrer, UTM tags, browser, device, screen width, language and approximate location. IP addresses are used only in transit, ad click IDs are dropped, and nothing is shared or sold.
• Events: both get named steps (import, template, export) with labels we set. Never resume text, file names or what you typed.
• Cloudflare hosts the site and processes IP address, browser, URL and timing.

• Cookies: two, both functional. atsp_lang keeps your language for a year; atsp_geo keeps a country code for 30 days to offer Arabic in Arab League countries. No advertising cookies.
• Browser storage: your drafts and tracker, sign-in session, theme, the guest tally, analytics IDs, campaign tags and “already shown” flags.

• Cloudflare: hosting, AI and speech (policy).
• Supabase (EU): accounts, sync, match, email records (policy).
• ElevenLabs: Pip's voice (policy).
• Google: sign-in (policy).
• Resend: email (policy).
• DataFast: analytics (cookieless mode).
• Polar: payments.

• Resume files: never received.
• Processing: resume reads, match and AI requests and voice audio are not kept after the reply. Call reports and their transcripts are kept as described under Pip voice calls.
• AI limit hash: that day. Job postings: up to a day.
• Account and synced data: until you delete the account.
• Raw analytics events: 13 months. Payments: as the law requires.

You can see, correct or delete your data. Most of it is on your device or on your account page; for the rest, email support@atsprep.com. Block analytics in your browser and every tool still works.

ATSPrep is not for children under 16.

We update this page, and its date, when the product or a provider changes.

Email support@atsprep.com.