Privacy Policy

Last updated: 11 Aug 2026

This Privacy Policy explains how SkyElevate ATS (the “Company”, “we”, “us”) collects, uses, and stores personal data when you use our website and ATS resume checker.

1) Controller

SkyElevate (the operator of this website). If you need to contact us, please use the website contact channels.

2) Personal data we collect

Account data (registered users): email address, password hash, chosen plan, and credit balances.

Guest scan limits (no signup): we set an HTTP-only cookieats_anon_id (signed to reduce tampering) and store guest scan counts per month. To reduce abuse, we also store a hashed representation of your IP address together with daily request counts.

Scan content: resume and job-description text are analyzed in your browser. We do not upload or store your CV file contents on our servers for analysis.

Payments (subscriptions): Paddle acts as the Merchant of Record (MoR). We store Paddle webhook events needed to manage your subscription and credits.

3) Purposes of processing

We process personal data to provide the service, enforce scan limits (abuse prevention), manage accounts and credits, and administer subscriptions and billing.

4) Legal basis (UK GDPR)

For registered accounts and subscriptions, we rely on contractual necessity. For guest scan limits and abuse prevention, we rely on legitimate interests. Where applicable, we rely on legal obligations.

5) Who we share data with

We share data with service providers that help us run the website (e.g., hosting infrastructure) and with Paddle for payment processing. We do not sell personal data.

6) Data retention

Guest scan cookie (ats_anon_id): up to ~6 months (monthly limits).

Guest scan counts: up to ~6 months.

IP-based abuse prevention logs (hashed IP + daily counts): up to ~30 days.

Payment webhook event logs: up to ~180 days (for reconciliation/idempotency).

User accounts (email and password hash): retained until you delete your account or it is otherwise removed in accordance with our legal and operational requirements.

7) Your rights

Depending on the circumstances, you may have rights under UK data protection law, including the right to access, correct, delete, restrict processing, object to processing, and (where applicable) data portability. You can also lodge a complaint with the UK Information Commissioner’s Office (ICO).

8) Contact

If you have privacy questions, email [email protected].

Links: Terms of Service · Refund Policy