Privacy policy
How ATS CV Fixer collects, uses and protects your CV and personal data.
Last updated: 6 November 2026
ATS CV Fixer ("we", "us") runs the website atscvfixer.com from Dubai, United Arab Emirates. This policy explains what personal data we collect when you use the site, why, how long we keep it, who we share it with, and the choices and rights you have. If you have a question, email support@atscvfixer.com.
The short version
- When you run a free check, your CV file is deleted as soon as we have read it. The text we keep for your report is encrypted and deleted after 24 hours, or earlier if you press "Delete my data now".
- If you check a photo or screenshot, it is read on your own device. The image is never uploaded; only the text is sent.
- CVs you save in the editor are stored encrypted in your account until you delete them.
- When you ask us to fix your CV with AI, its text is sent to our AI provider (currently OpenAI) only to write your CV.
- We never sell your CV or your personal data, and we never store your card number.
- We show Google ads on some pages. Google may use cookies for this. You can control ad personalisation (see Advertising).
What we collect
Free ATS check (no account needed)
- Your CV file (PDF or Word): read once to get the text, then deleted straight away. We never store the original file.
- The text of your CV and any job ad you paste: stored encrypted for your private report and deleted automatically after 24 hours.
- Your report (score and the problems found) and the region you chose: kept with the text and deleted at the same time.
- The photo in your CV, only if you choose a region where employers expect a photo (such as the UAE and Gulf): we keep a passport-size copy of it, encrypted, with your report, so a CV fix can keep your photo. It is deleted at the same time as the report (24 hours). It is never sent to our AI provider.
- Photos and screenshots: read by software running in your browser. The image stays on your device; only the text you confirm is sent to us.
Account
- Your email address, your name if you give it, and your password (stored only as a secure one-way hash; we can't read it).
- Sign-in records: time, whether the sign-in worked, your IP address, the approximate country worked out from it, and a short description of your browser. We use these to protect your account and keep them for 90 days.
- CVs you build or fix in the editor, including a photo if you add one: stored encrypted until you delete the CV or your account. Each account can keep up to 10 CVs.
- Your agreements: when you tick a box (for example "no job guarantee" before an AI fix, or the digital-delivery terms at checkout), we keep the wording, the time, a scrambled (hashed) version of your IP address and your browser type, as proof of what was agreed.
Waiting list
- Your email address, your place on the list and how you found us (for example LinkedIn). We use it only to tell you about the launch and any founding-member offer you qualify for.
Payments
- Card and PayPal payments are processed by the payment provider (Stripe or PayPal). We never see or store your full card number. We keep the order reference, amount, currency, date and status, which we need for accounting, refunds and tax records.
Visits and security
- We count page visits in total per day (for example "120 visits to the checker today"), without profiling individual visitors.
- Country statistics: we work out the approximate country from your IP address using a database stored on our own server (IP Geolocation by DB-IP), so your IP is not sent to anyone for this. We keep the country on your account and daily counts of checks per country, to understand where our users are. The counts contain no IP address and no personal details.
- To stop abuse (for example too many checks or sign-in attempts), we keep short-lived counters linked to a scrambled (hashed) version of your IP address. They are deleted within about a day.
- Our server keeps technical error logs for up to 30 days. We design them not to contain CV content.
How we use your data, and our legal basis
- To provide the service you asked for (check, report, editor, AI fix, downloads, emails about your account or order). Basis: performing our agreement with you.
- To keep the site and your account secure and to prevent fraud and abuse. Basis: our legitimate interest in a safe service.
- To meet legal duties such as accounting and tax records for payments. Basis: legal obligation.
- To show ads that keep the free check free, and to send the launch email if you joined the list. Basis: your consent where the law requires it, otherwise our legitimate interest.
We do not use your CV to train AI models, and we do not make decisions about you that have legal or similarly important effects using automated means. The ATS score is advice for you only; we never share it with employers.
AI CV fix
When you press "Fix my CV" and agree to the terms shown, we send the text of your CV, your answers to our questions and any job ad you added to our AI provider, which writes an improved version for you. We currently use OpenAI (OpenAI, L.L.C., United States) through its business API. We may switch to another reputable provider, such as Anthropic (United States), and will update this page if we do.
Under OpenAI's API terms, data sent through the API is not used to train its models by default, and may be kept by OpenAI for a limited time (up to 30 days) to detect abuse, then deleted. We don't send your photo, your account password or payment details to the AI provider.
Who we share data with
We share personal data only with companies that help us run the service, and only what they need:
- Hostinger: web hosting, database and our email server (support@atscvfixer.com).
- OpenAI (or another AI provider named above): only for AI CV fixes you ask for.
- Stripe and PayPal: to take payments, once payments are open.
- Google: advertising (Google AdSense) and, if you use it, Google's own services you sign in with.
- Authorities, if the law requires it, or to protect our rights and the safety of users.
We do not sell personal data, and we do not "share" it for cross-context behavioural advertising except through Google's advertising cookies described below, which you can turn off.
International transfers
We are based in the UAE. Our providers may process data in other countries, including the United States and the European Union. When data leaves your country, we rely on the provider's contractual protections (such as standard contractual clauses) and keep the data we send to the minimum needed.
Cookies
A cookie is a small file stored in your browser. We use:
| Cookie | Set by | Purpose | How long |
|---|---|---|---|
| acf_sid | ATS CV Fixer | Essential. Keeps you signed in and protects forms against forgery. | Until you close the browser or sign out |
| acf_lang | ATS CV Fixer | Remembers the language you chose (only if you change it). | 1 year |
| Analytics cookies (_ga, _ga_*) | Google Analytics | Count visits and see how the public pages are used. | Up to 2 years |
| Advertising cookies (for example IDE, __gads, __gpi) | Show ads, limit how often you see the same ad, measure ads and, if you allow it, personalise ads. | Up to 13 months |
We use Google Analytics on our public pages (for example the home page, the free check page and the pricing page) to count visits and see which pages are useful. Google may set analytics cookies (for example _ga) for up to 2 years. It is never loaded on your CV report, the CV editor, your account or checkout pages, and it never receives your CV. Visitors from the EU, EEA, UK and Switzerland are not given analytics cookies by default. You can block or delete cookies in your browser settings or delete cookies in your browser settings; the site still works without advertising cookies, but you need the essential cookie to sign in.
Advertising (Google AdSense)
We use Google AdSense to show ads on some pages. This helps us keep the ATS check free.
- Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites.
- Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to our site and/or other sites on the Internet.
- You may opt out of personalised advertising by visiting Google's Ads Settings. You can also opt out of some third-party vendors' use of cookies for personalised advertising at www.aboutads.info (or www.youronlinechoices.eu in Europe).
- If you opt out, you will still see ads, but they won't be based on your interests.
- Learn more in How Google uses information from sites or apps that use its services and how Google uses cookies in advertising.
Visitors in the European Economic Area, the UK and Switzerland are asked for consent through a consent message from a Google-certified consent management platform before personalised ads or advertising cookies are used. You can change your choice at any time using the privacy or cookie settings link shown on the page. Visitors in US states with privacy laws (such as California) can opt out of the "sale" or "sharing" of personal information for targeted advertising through the same settings or Google's Ads Settings.
Ads are never shown inside your CV, your report text or your downloaded files, and we never give advertisers your CV.
How long we keep data
| Data | Kept for |
|---|---|
| Uploaded CV file (free check) | Deleted immediately after reading |
| Free check text, job ad, report and the photo from your CV | 24 hours, or until you delete it |
| CVs saved in your account | Until you delete the CV or your account |
| Sign-in records | 90 days |
| Abuse-prevention counters | About 1 day |
| Server error logs | Up to 30 days |
| Account (email, name) | Until you ask us to delete it |
| Waiting-list email | Until launch emails are sent, or until you ask us to remove it |
| Agreement records and payment records | As long as the law requires (usually up to 5 years for accounting) |
How we protect your data
- The whole site uses HTTPS (encrypted connections).
- CV text in our database is encrypted with AES-256. Passwords are stored as one-way hashes.
- Original CV files are never stored. Private report links are long random codes, and we store only a scrambled version of them.
- Only the site administrator can use the admin area. Sensitive admin actions are logged.
No system is perfectly secure. If a breach affects your personal data, we will tell you and the authorities where the law requires it.
Your rights and choices
Depending on where you live (for example under the UAE Personal Data Protection Law, the EU and UK GDPR, or US state laws such as the CCPA), you can ask us to:
- tell you what personal data we hold about you and give you a copy;
- correct data that is wrong;
- delete your data or your account;
- stop or limit some uses, or object to them;
- send your data to you in a common format.
You can delete a free check yourself with "Delete my data now" in the report, and delete saved CVs in "My CVs". For anything else, email support@atscvfixer.com from the email address on your account. We reply within 30 days. You can also complain to your local data protection authority. We will not treat you differently for using your rights.
Children
ATS CV Fixer is for job seekers aged 16 and over. We do not knowingly collect data from children under 16. If you think a child has given us personal data, contact us and we will delete it.
Other websites
Our pages may link to other websites, such as LinkedIn or Google. Their own privacy policies apply when you visit them.
Changes to this policy
We will update this page when our service or the law changes, and change the "Last updated" date. If a change is important, we will tell account holders by email before it applies.
Contact
ATS CV Fixer, Dubai, United Arab Emirates. Email: support@atscvfixer.com. See also our Terms of service and Refund policy.