Privacy Policy

Last updated: June 10, 2026

The short version: your resume never leaves your browser

ATSGrader analyzes your resume and job description entirely on your device. The text you paste or upload is not transmitted to, stored on, or readable by our servers— we could not read it even if we wanted to. For convenience, your last scan is kept in your browser's local storage on your own device; clearing your browser data removes it. The one exception: when you buy the Pro report, we store a one-way fingerprint (a SHA-256 hash derived from the contact details already in your resume) so your purchase unlocks that specific resume and follows it across devices. The fingerprint cannot be reversed into your resume, and the resume text itself still never leaves your browser. The rest of this policy covers the small amount of data we do process: purchases, support emails and aggregate analytics.

Data controller

NEXUSVIBE S.L. (NIF B70966650), Avenida del Cantábrico 249, 28939 Arroyomolinos, Madrid, Spain. Registro Mercantil de Madrid, Tomo 46502, Folio 135, Sección 1ª, Hoja M-816510. Contact: gestion@nexusvibe.net.

What we process, why, and for how long

Delivering the free scan and the Pro report

  • Data: None on our servers — the analysis runs entirely in your browser
  • Legal basis: Performance of the contract (Art. 6.1.b GDPR)
  • Retention: Nothing is stored by us; your last scan stays in your own browser's local storage until you clear it

Processing your Pro purchase and restoring access

  • Data: Email address and payment status (via Stripe); we never see card numbers
  • Legal basis: Performance of the contract (Art. 6.1.b GDPR)
  • Retention: Invoicing records: 4 years (Spanish tax law) / 6 years (Commercial Code)

Unlocking the Pro report for the resume you paid for

  • Data: A one-way fingerprint (SHA-256 hash derived from the contact details in your resume) + Stripe session id + checkout email — never the resume text
  • Legal basis: Performance of the contract (Art. 6.1.b GDPR)
  • Retention: Kept while the unlock is valid so you don't pay twice for the same resume

Aggregate site analytics and advertising measurement

  • Data: Pseudonymous usage events, pages visited, traffic source, approximate location; never any resume content
  • Legal basis: Your consent (Art. 6.1.a GDPR), given via the cookie banner
  • Retention: Google Analytics: up to 26 months; our own event counters: indefinitely in aggregate, with no personal identifiers

Answering support requests and refunds

  • Data: Your email and the content of your message
  • Legal basis: Performance of the contract / legitimate interest (Art. 6.1.b / 6.1.f GDPR)
  • Retention: Until the request is resolved, plus statutory limitation periods

Providing an email at checkout is required to complete a purchase (it is how Stripe issues your receipt and how we restore your access); everything else is optional. The free scan requires no personal data at all. Your ATS score is produced by automated rules that you request and that run on your own device; it has no legal or similarly significant effect on you — it is advice you are free to ignore.

Recipients and processors

We share data only with the service providers needed to run ATSGrader, acting under data-processing agreements: Stripe (payment processing), Vercel (hosting and aggregate, cookieless page analytics), Neon (database storing our anonymous event counters) and Google (Google Analytics and Google Ads measurement — only with your consent). We never sell personal data.

International transfers

Some providers process data in the United States. Transfers rely on the EU–US Data Privacy Framework adequacy decision (Stripe, Google and Vercel participate) and, where applicable, Standard Contractual Clauses under Art. 46 GDPR. You can request a copy of the relevant safeguards at the contact address above.

Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw consent at any time (without affecting processing already carried out), by emailing gestion@nexusvibe.net from the address you used, or by post to the address above. We respond within one month (Art. 12.3 GDPR). We extend these rights to all users worldwide, including rights under the UK GDPR, CCPA/CPRA (California) and PIPEDA (Canada) where they apply.

If you believe we have mishandled your data, you can lodge a complaint with the Spanish supervisory authority: Agencia Española de Protección de Datos (AEPD), C/ Jorge Juan 6, 28001 Madrid — www.aepd.es.

Cookies

Analytics and advertising cookies are used only with your consent, which you can give, refuse or withdraw at any time. Full details, including a cookie table and the settings panel, are in the Cookie Policy.

← Back to ATSGrader