Privacy Policy

ATSCheck (atscheck.emketech.com) is a product of EmKeTech. In this policy, “EmKeTech”, “we” and “us” mean the company that provides ATSCheck, and “you” means anyone who visits the website or uses the service.

For personal data processed to provide ATSCheck to its own users, EmKeTech is the controller.

Please send any privacy question or request through our support form.

When an organisation uses ATSCheck HR to review candidates, that organisation is the controller of the candidate data and EmKeTech processes it on the organisation’s behalf. See HR customers and candidate data.

This policy covers the ATSCheck website, the ATSCheck application and the emails we send about it, across every plan and the Curated service. It explains what personal data we process, why, on what legal basis, who we share it with, how long we keep it and the rights you have.

It does not cover other EmKeTech products, which keep separate accounts and data, or websites operated by others that we link to, including the payment processor’s checkout page, which is covered by that provider’s own privacy notice.

How ATSCheck uses cookies and browser storage is described in more detail in the Cookie Policy.

ATSCheck does not ask for special category data (such as health, ethnic origin, religion, political opinions or sexual orientation). Please leave it out of the resumes and notes you add. ATSCheck’s analysis is instructed to disregard protected characteristics.

• From you, when you create an account, upload or paste documents, use features, contact support or pay.
• From an organisation using ATSCheck HR, when it adds you as a candidate or invites you to its workspace.
• From an ATSCheck administrator, when we create an account for you (for example for a customer organisation), in which case we email you so you can sign in and set your own password.
• From our payment processor, which tells us whether a payment succeeded and the status of your subscription.
• Generated by ATSCheck, such as analyses, scores, suggestions and security records.

Where we rely on legitimate interests, we have balanced them against your rights and reasonable expectations, and we keep the data involved to the minimum. You can object to this processing; see Your rights.

If you do not provide the data a feature needs, such as your email address or the resume you want analysed, we cannot provide that feature.

ATSCheck uses AI for some features, with safeguards designed into how it works:

• ATS compatibility checks, requirement extraction and all score calculations are carried out by ATSCheck’s own rules. AI does not set scores.
• An AI service provider, acting as our processor, helps classify evidence against job requirements and drafts recommendations, rewrite suggestions, cover letters, candidate summaries and interview questions.
• Only the document text needed for the task you request is sent. Contact details at the top of a resume (such as name, email, phone, links and address) and lines containing other personal details are withheld, and candidate names are not sent for analysis.
• If you upload a PDF that contains no readable text, such as a scanned document, and your plan includes reading scanned files, the pages of that file are sent to the AI service provider so the text can be read.
• Your content is not used to train AI models, by EmKeTech or by the AI service provider. The provider processes it to return a result and may keep it only for a limited period under our agreement, for example for security and abuse monitoring.
• AI output is checked before you see it: evidence quotes must match your resume text, and generated writing is checked for claims your resume does not support.

The AI service provider is based outside the European Economic Area; see International transfers. More detail is on the AI transparency page.

ATSCheck calculates scores and evidence statuses automatically. They are guidance: they describe how a document reads and what evidence it contains for a job’s requirements. They do not predict whether you will be invited to an interview or hired.

ATSCheck does not make decisions that have legal or similarly significant effects on anyone within the meaning of Article 22 GDPR. It does not make hiring decisions, never automatically rejects, ranks out or moves a candidate, and does not assess personality or “culture fit”. In ATSCheck HR, only a person in the organisation can change a candidate’s stage.

Organisations using ATSCheck HR must keep meaningful human review of every hiring decision and must not rely on ATSCheck outputs as the only basis for a decision about a candidate.

Curated is a service delivered by people: you can ask the ATSCheck team to curate and optimise your CV, draft cover letters and optimise your LinkedIn profile for the roles you are targeting. This is the one part of ATSCheck where people on our team read your content.

• Before a request is sent, you choose the CV text to share and confirm that the ATSCheck team may read it. You can also give us a link to your LinkedIn profile and a target job description, if you want those included. We keep a text copy of what you shared with the request, together with the date of your agreement.
• We draft CV wording, cover letters and LinkedIn profile text on your behalf and send them to you in the request. What you do with a draft is your decision; nothing is published or sent anywhere for you.
• Only authorised ATSCheck team members working on requests can open them, and every time a team member opens a request it is recorded in our audit log.
• Replies are shown in your account. We email you a notice that a reply is waiting, without the reply itself.
• You can ask us to close a request and delete what you shared at any time through our support form. This does not affect work already done.

When an organisation adds candidates to ATSCheck HR, the organisation is the controller of that candidate data and EmKeTech processes it on the organisation’s behalf as a processor, following the organisation’s instructions.

• The organisation is responsible for having a lawful basis to process candidate data and for telling candidates how their data is used, including that ATSCheck is used.
• The organisation decides how long candidate data is kept. A workspace owner can set candidates to be deleted automatically after 3, 6, 12 or 24 months without activity, or keep them until they are deleted manually. Authorised members can delete a candidate, a job or the whole workspace at any time.
• Access to a workspace is limited to its active members, according to the roles the organisation assigns.
• The organisation must keep human review of hiring decisions.
• EmKeTech uses candidate data only to provide the service to that organisation, never for its own purposes and never to train AI models.

Team invitations are sent by email to the address the organisation enters. Unused invitations expire after 7 days. A data processing agreement is available on request through our support form.

If you are a candidate and want to exercise your rights over data an organisation added, please contact that organisation. If you contact us instead, we will pass your request to the organisation or help you reach it.

A small number of authorised ATSCheck administrators operate the service. Their access is limited and recorded:

• Administrators can see account information needed to support customers and run the service: name, email address, plan and subscription status, account status, whether two-factor authentication is on, sign-in dates, and counts of usage.
• The administration tools do not show the content of your resumes, job descriptions, analyses, cover letters or HR candidate data. The only content staff can read is what you share in a Curated request.
• Administrators can, where needed, create an account (you then receive an email to choose your own password), disable or re-enable an account, grant complimentary access, or delete an account. Administrators never set, see or know your password.
• Administrator actions are recorded in an audit log, and administrator accounts must use two-factor authentication.

We use the following categories of service provider to run ATSCheck. Each acts as our processor under a written agreement, may use the data only to provide its service to us, and must keep it secure. The current list of service providers is available on request through our support form.

The payment processor collects your payment details on its own secure page. For some purposes, such as preventing payment fraud and meeting its own legal obligations, it acts as an independent controller under its own privacy notice, which is available on the checkout page.

We may also disclose personal data:

• to members of an HR workspace, for data that belongs to that workspace;
• to professional advisers, such as lawyers and accountants, under a duty of confidentiality;
• where required by law, or to a court, regulator or law enforcement authority with a valid legal request; and
• to a buyer or successor if EmKeTech’s business or ATSCheck is reorganised or sold, in which case this policy continues to protect your data.

We do not sell personal data, we do not share it with advertisers or data brokers, and we do not use it for advertising.

ATSCheck’s database and application processing are hosted in the EU (Ireland). Some service providers, or their sub-processors, process data outside the European Economic Area, in particular the AI service provider, which is based in the United States.

Where personal data is transferred outside the EEA, the transfer relies on appropriate safeguards under Chapter V of the GDPR, such as the European Commission’s Standard Contractual Clauses, or on an adequacy decision where one applies (for example, the EU–US Data Privacy Framework for certified providers). We also limit what is transferred, as described in AI processing.

You can ask for more information about these safeguards, or a copy of them, through our support form.

We keep personal data only as long as we need it for the purposes above. An automated job runs every day to delete data that has reached the end of its retention period.

• You can delete individual resumes, resume versions, saved jobs, analyses and cover letters at any time in ATSCheck.
• You can delete your account yourself in your account settings. Any active subscription is cancelled first, so you are not charged again. Your account and everything in your personal library are then deleted immediately.
• If you own an HR workspace, you need to transfer ownership or delete the workspace before deleting your account, so that an organisation’s candidate data is never removed without its decision.
• ATSCheck administrators can also delete an account, for example at your request or where our Terms allow it. The deletion is recorded in our audit log.
• After deletion we keep only what we must: a content-free audit record that an account was deleted (not linked to you), AI usage records with your account link removed, and payment records held by the payment processor for legal reasons.

We use technical and organisational measures appropriate to the risk, including:

• Hosting in the EU, with database-level access controls that keep each account’s data and each workspace’s data separate.
• Encrypted connections (HTTPS) between your browser and ATSCheck.
• Private files served only through links that expire after 60 seconds.
• Passwords stored only as one-way hashes; authenticator secrets stored encrypted; tokens and codes stored only as hashes.
• Email confirmation before first sign-in, optional two-factor authentication (authenticator app or email codes) with recovery codes, and alerts when security settings change.
• A security check against automated abuse on the sign-up and password reset pages; rate limits and temporary lockouts after repeated failed attempts, on every sign-in as well.
• Sign-in cookies that cannot be read by scripts on the page.
• Logs that record events but never document content, names, email addresses or passwords.
• Limited, audited staff access, as described in Access by ATSCheck staff.

No system is completely secure. If a personal data breach occurs, we will act in line with our obligations under the GDPR, including notifying the supervisory authority and affected people where required. See Data & Security for more detail.

Under the GDPR you have the right to:

• Access the personal data we hold about you and receive a copy.
• Rectification of inaccurate or incomplete data. You can update your name in account settings; to change your email address, contact support from your current address.
• Erasure of your data. You can delete content and your account yourself, as described in Deleting your data.
• Restriction of processing in certain circumstances, for example while we check a disputed request.
• Data portability: to receive the data you provided in a structured, machine-readable format. You can download a JSON export of your account data from your account settings.
• Object to processing based on our legitimate interests.
• Withdraw consent at any time where we rely on it, such as product news emails or what you shared in a Curated request, without affecting processing before withdrawal.

How to exercise them. Many rights can be used directly in your account settings. For anything else, contact us through our support form and give your account email address. We may ask you to confirm your identity before acting. We will respond within one month of receiving your request; for complex or numerous requests this can be extended by up to two further months, and we will tell you if that happens. Exercising your rights is free unless a request is manifestly unfounded or excessive.

Complaints. We would like the chance to resolve any concern first, but you have the right to lodge a complaint with a supervisory authority, in particular in the EU country where you live, work or where you believe an infringement occurred. In Ireland the authority is the Data Protection Commission (www.dataprotection.ie).

ATSCheck uses only strictly necessary first-party cookies: atscheck_session keeps you signed in, atscheck_ws remembers your selected HR workspace, and atscheck_mfa holds a pending two-factor sign-in for up to 10 minutes. ATSCheck HR also remembers your focus-mode preference in your browser’s local storage.

We use no analytics, advertising or marketing cookies, which is why there is no cookie consent banner. The full details, including the security check on the sign-up and password reset pages, are in the Cookie Policy.

ATSCheck is intended for job seekers and hiring teams and is not intended for anyone under 16. We do not knowingly collect personal data from children under 16. If you believe a child has created an account, contact us through our support form and we will delete it.

We update this policy when ATSCheck or the law changes, and change the “Last updated” date above. If a change is material, we will tell account holders by email or in the application before it takes effect.

For questions about this policy or your personal data, or to ask for the current list of service providers, contact us through our support form.