Privacy Policy

1. What we collect

Account data: email address, name (if provided), and a hashed password (or, if you sign in with Google, your Google-verified email and name — we never see your Google password).

Resume and career data: the resume content you build or upload — work history, education, skills, summaries, contact details — plus job descriptions you paste in, application-tracking notes, and any referral contacts you record.

AI conversation data: the full text of your chats with our resume-building assistant. Individual chat messages are automatically deleted after 90 days; conversation records are kept while your account is active.

Uploaded resume files: if you upload a PDF resume for parsing, it's read in memory and sent to our AI provider for processing — we don't save the uploaded file itself on our servers.

Payment data: handled entirely by Paddle, our payment processor and Merchant of Record. We receive your email and subscription/purchase status from Paddle — never your card number.

Usage and device data: pages visited, actions taken in the app, IP address, browser/device information, and error/crash diagnostics.

2. How we use it

To provide the Service (building, scoring, and tailoring resumes; tracking applications; sending job-alert emails you opt into); to process payments and manage your subscription; to keep the Service secure and diagnose errors; to improve the product; and, where you've opted in, for marketing and vacancy-alert emails. We don't sell your personal data.

3. Who we share data with

We use a small number of third-party service providers ("subprocessors") to run Green-ATS. Each receives only what it needs to do its job:

• Anthropic (Claude API) — receives resume content, job descriptions, and uploaded resume files to generate AI results (scoring, tailoring, chat, parsing). Per Anthropic's API terms, this data isn't used to train their models.
• Paddle — receives your email and payment details as our Merchant of Record; handles checkout, billing, and tax compliance.
• Google — provides Sign in with Google (email, name) if you use it, and powers our website analytics/ad-conversion tracking.
• Meta — powers ad-conversion tracking (Meta Pixel) on our marketing pages.
• Cloudflare — hosts our frontend and file storage, and provides CDN/security infrastructure.
• Supabase — hosts our production database (a managed Postgres host; we connect to it directly, we don't use Supabase's own auth/storage products).
• Sentry — receives error and performance diagnostics to help us fix bugs; configured not to collect personal data by default.
• Our email provider — sends account, billing, and vacancy-alert emails on our behalf.
• Job-data sources (job boards and applicant-tracking-system APIs we query to surface vacancies) — receive only search terms like role and location, never your personal data.

We may also disclose data if required by law, or to protect the rights, safety, or property of Green-ATS or our users.

4. Cookies and tracking

We use browser storage to keep you signed in (essential, required for the Service to work), and — on our marketing pages and, for logged-in analytics, in the app — Google Analytics, Google Ads, and Meta Pixel to understand traffic and measure ad performance. You can block these via your browser's privacy settings or an ad blocker without affecting your ability to use the core Service.

5. Data retention

AI chat messages are automatically deleted after 90 days. Your account, resume, and application data is kept for as long as your account is active. If you request account deletion, we'll delete or anonymize your personal data within 30 days, except where we're required to retain records (e.g. billing records) for legal or tax purposes.

6. Your rights

You can access, correct, or export your data from within the app, or by emailing us. You can request deletion of your account and data, unsubscribe from any marketing or vacancy-alert email with one click (no login required — every such email includes an unsubscribe link), and withdraw consent for optional data uses at any time. To exercise any of these, email hello@green-ats.com.

7. International data transfers

We're based in Israel, and several of our subprocessors (listed above) are based in the United States or elsewhere. Using the Service means your data may be processed outside your home country.

8. Children's privacy

Green-ATS isn't directed at children under 16, and we don't knowingly collect data from them. If you believe a child has provided us data, contact us and we'll delete it.

9. Security

We use reasonable technical and organizational measures to protect your data — encryption in transit, access controls, and hashed passwords. No method of transmission or storage is 100% secure, so we can't guarantee absolute security.

10. Changes to this policy

We may update this policy from time to time. We'll update the "Last updated" date above and, for material changes, notify active users.

11. Contact

Questions about this policy or your data? Email hello@green-ats.com.