Home › Privacy Policy

Privacy Policy

Last updated: 12 November 2026

The short version: we use your resume and job description to build your report. We don't sell your data, share it with recruiters or use it to train AI models. You can download or delete everything from My Locker whenever you want.

1. Who we are

ATSPass runs atspass.in, an AI resume checker for job seekers, based in India. Under India's Digital Personal Data Protection Act, 2023 (DPDP Act), we are the Data Fiduciary for the personal data you give us.

Grievance Officer: Kunal Chauhan, Founder and Grievance Officer — privacy@atspass.in. Write to this address for any question, request or complaint about your data.

2. What we collect and why

What	Why
Email address and password	To create your account, send login codes and deliver your reports. Your password is stored hashed by our login provider; we never see it.
Resume and job description	To score your resume, find missing keywords, rewrite bullets and draft a cover letter. The text (and any file you upload) is stored with each scan so you can reopen the report later.
Reports we generate	Scores, keyword analysis, rewritten resumes and cover letters, so you can view and download them again.
Saved resumes	Only if you turn on resume saving. Lets you reuse a resume on your next scan.
Mobile number (optional)	For WhatsApp and SMS updates, only if you tick the opt-in box.
Payment details	Razorpay order and payment IDs, amount, plan and status, to unlock what you bought. Razorpay handles card and UPI details; we never see them.
How you found us	The website, campaign tag or page that first brought you here, saved to your account at signup, so we know which channels work.
Feedback and support emails	What you send us, to answer you and improve the product.
Email delivery data	Whether our emails were delivered, opened or clicked, to stop sending what nobody reads.
Anti-abuse hashes	One-way hashes of your email, mobile and resume, so the free trial can only be claimed once per person.
Usage analytics (only if you allow it)	Pages visited, clicks, device, browser and approximate location from Google Analytics and Microsoft Clarity. Clarity can record sessions, but all text is masked on pages that show resumes, reports or account details.
IP address	For security, rate limits and stopping abuse.

We process this data with your consent, which you give at signup and for each optional feature (WhatsApp/SMS, promotional email, resume saving, analytics). We only collect what we need for these purposes.

3. What we never do

Sell your data, or share your resume with recruiters or employers.
Use your resume or reports to train AI models. Our AI provider processes them under API terms that do not allow training on them.
Send you promotional email, WhatsApp or SMS unless you opted in.

4. Who processes your data for us

We use these service providers to run ATSPass. They process data only to provide their service to us.

Provider	What for	Where
Supabase	Database, login and file storage	Singapore
Vercel	Website hosting	Global network
Anthropic (Claude API)	AI analysis of resumes and job descriptions	USA
Unstructured	Reading text out of some uploaded files	USA
Razorpay	Payments	India
Resend	Sending and receiving email	USA
Google Analytics	Usage analytics, only if you allow it	USA
Microsoft Clarity	Heatmaps and session replay, only if you allow it	USA

Some providers process data outside India. The DPDP Act allows this, except to countries the Government of India restricts by notification.

Inside ATSPass, only the founder can access account data, through a protected admin panel. We do this only to answer your support requests, fix errors or stop abuse.

5. How long we keep it

Account, scans, reports and uploaded files: until you delete your account.
Saved resumes: until you delete them, turn off resume saving or delete your account.
Inactive accounts: if you don't sign in or run a scan for 3 years, we delete your account. We email you first.
Payment records: kept for as long as Indian tax and accounting law requires, even after you delete your account. They are unlinked from your account when you delete it.
Login codes: expire after 10 minutes.

6. Your rights and how to use them

Most of these are one click in My Locker → Privacy & your data. Anything else, email privacy@atspass.in.

See your data: download everything linked to your account as one file.
Correct it: email us and we'll fix anything wrong or incomplete.
Delete it: delete single saved resumes, or your whole account.
Withdraw consent: turn off promotional email, WhatsApp/SMS, resume saving or analytics at any time. Every promotional email also has an unsubscribe link. Withdrawing doesn't affect what we did before you withdrew, and some features (like reports) need the data to work.
Nominate someone: you can name a person to exercise these rights for you if you die or can't act yourself. Email us their name and contact details.
Complain: email our Grievance Officer. We reply within 7 days and aim to resolve it within 30 days. If you're not satisfied, you can complain to the Data Protection Board of India.

7. Children

ATSPass is only for people aged 18 or older, and you confirm this when you sign up. If we learn that someone under 18 created an account, we delete it.

8. Security and breaches

All traffic uses HTTPS. Data is encrypted at rest by our database provider, and access to the database and file storage is restricted. No system is perfectly secure. If a breach affects your data, we will tell you without delay: what happened, what it means for you and what you can do. We will also report it to the Data Protection Board as the law requires.

9. Cookies and local storage

Always on (needed for the site to work)

Your login session.
The source of your first visit, saved to your account only if you sign up.
Your analytics choice, so we don't ask again.
A pending payment, so a dropped connection doesn't lose what you paid for.

Only if you click Allow

Google Analytics cookies, to count visits and see which pages work.
Microsoft Clarity, for heatmaps and session replay. All text is masked on pages that show resumes, reports or account details.

If you say no, Google Analytics only gets cookieless, anonymous counts, and Clarity doesn't load at all.

10. Changes to this policy

When we change this policy, we update the date at the top. If a change affects how we use your data, we email you before it takes effect.

11. Contact

Privacy questions, requests or complaints: privacy@atspass.in (Kunal Chauhan, Grievance Officer). Everything else: contact us.