Last Updated: August 5, 2026

Privacy Policy

1. Introduction

ATSLetter ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website atsletter.com(the "Service"), including any related services, features, content, or applications offered by ATSLetter.

By accessing or using our Service, you consent to the practices described in this Privacy Policy. If you do not agree with this policy, please do not use the Service.

This policy applies to all users, including visitors, registered users, and subscribers, regardless of location. We comply with applicable data protection laws including the California Consumer Privacy Act (CCPA/CPRA) and, where applicable, the EU General Data Protection Regulation (GDPR).

2. Information We Collect

2.1 Information You Provide

  • Account Information: When you register, we collect your name, email address, and account credentials. If you sign in via Google OAuth, we receive your Google profile name and email address.
  • User-Submitted Content: When using our cover letter generator, you may submit resumes (PDF, DOCX), job descriptions, skills, work experience, achievements, and other professional information. Your uploaded resume and job-description files are temporarily cached for processing and automatically purged within 24 hours of generation.Cover letters you generate are saved to your private account history so you can access them later, and are retained until you delete your account or request data deletion.
  • Payment Information:All payments are processed exclusively through Paddle.com Inc. ("Paddle"), our Merchant of Record. We do NOT collect, store, or have access to your full credit card numbers, CVC codes, or bank account details. Paddle may collect billing addresses and payment method details per their own privacy policy.
  • Communications: If you contact us via email or support channels, we collect the content of your message and contact details.

2.2 Information Collected Automatically

  • Log Data: IP address, browser type, operating system, referring URLs, pages visited, and timestamps.
  • Cookies & Tracking: We use cookies for authentication, preferences, analytics (Google Analytics), and advertising (Google AdSense). See Section 8 for details.
  • Usage Data: Number of cover letters generated, features used, template selections (aggregated and anonymized for product improvement).

3. How We Use Your Information

We use collected information for the following purposes:

  • To provide, maintain, and improve the cover letter generation service.
  • To process your AI cover letter requests via OpenAI API (data transmitted is subject to OpenAI's privacy policy and data usage terms).
  • To manage your account, subscription, and billing through Paddle (our Merchant of Record).
  • To display contextual advertisements via Google AdSense (free-tier users only; Pro users see no ads).
  • To analyze usage patterns and improve our ATS scoring algorithms and persona prompts.
  • To communicate with you about your account, service updates, and promotional offers (with opt-out).
  • To detect, prevent, and address fraud, abuse, and Terms of Service violations.
  • To comply with legal obligations and respond to lawful requests.

4. Data Sharing & Third Parties

WE DO NOT SELL YOUR PERSONAL INFORMATION.We do not sell, rent, or trade your personal data to third parties for their marketing purposes. We share data only with the following service providers necessary to operate our Service:

Service ProviderPurposeData Shared
OpenAI, L.L.C.
(via api2d relay)
AI text generationResume content & job descriptions, transmitted on each generation request (temporary; not used for training)
Paddle.com Inc.Payment processing (Merchant of Record)Email, billing address, payment method (we never see full card numbers)
Google LLCAnalytics & AdvertisingAnonymous usage data, ad interactions
Vercel Inc.Hosting & CDNServer logs, IP addresses

Each third-party provider has its own privacy policy governing their use of your data. We encourage you to review their policies at their respective websites.

5. Data Retention Policy

How We Handle Your Documents

Your uploaded resume and job-description files are temporarily cached exclusively for the purpose of AI processing and are permanently purged from our servers within 24 hours of generation. Generated cover letters are saved to your private account history so you can revisit them; you can delete any letter at any time from your dashboard, and all of your data is removed when you delete your account.

  • Account Data: Retained until you delete your account or request deletion.
  • AI Processing Data: Uploaded resumes and job descriptions — purged within 24 hours. Generated cover letters are kept in your account history until you delete them or your account.
  • Payment Records: Retained as required by tax and accounting laws (typically 7 years for transaction records; payment details are held by Paddle).
  • Usage Analytics: Aggregated, anonymized data may be retained indefinitely for product improvement.
  • AI Training: We do NOT use any user-submitted content (resumes, cover letters, job descriptions) to train, fine-tune, or improve AI/ML models.

6. Security Measures

We implement industry-standard security measures to protect your information:

  • TLS 1.3 encryption for all data in transit.
  • AES-256 encryption for temporary cached documents at rest.
  • Secure, isolated processing environments for AI generation requests.
  • Regular security audits and vulnerability assessments.
  • Strict access controls: only essential personnel can access operational systems.

However, no method of electronic storage or transmission is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) grant you specific rights regarding your personal information:

  • Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you in the preceding 12 months.
  • Right to Delete: You may request deletion of your personal information, subject to certain exceptions (e.g., legal compliance, fraud prevention). You can also self-delete all data from your Account Settings page.
  • Right to Correct: You may request correction of inaccurate personal information.
  • Right to Opt-Out: We do not sell personal information. However, you may opt out of cookie-based advertising via our Cookie Preferences banner.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any CCPA rights (e.g., denying service, charging different prices).

To exercise your CCPA rights, email us at privacy@atsletter.comwith the subject "CCPA Request." We will verify your identity and respond within 45 days as required by law.

8. Cookie Policy

We use cookies and similar tracking technologies for the following purposes:

  • Essential Cookies: Required for authentication, session management, and core functionality. Cannot be disabled.
  • Analytics Cookies (Google Analytics): Track anonymous usage patterns to improve our service. You may opt out.
  • Advertising Cookies (Google AdSense): Used to display relevant advertisements on free-tier accounts. Pro users do not receive ad cookies. You may opt out.

You can manage cookie preferences through our Cookie Consent banner (shown on first visit) or through your browser settings. Disabling certain cookies may affect Service functionality.

9. Children's Privacy (COPPA)

Our Service is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal data, we will delete it immediately. Parents or guardians who believe their child has provided us with information should contact us at privacy@atsletter.com.

10. International Data Transfers

ATSLetter is based in the United States. If you access our Service from outside the US, your data may be transferred to, stored, and processed in the United States where our servers are located. By using the Service, you consent to such transfer and processing in accordance with this Privacy Policy.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email (to registered users) and a prominent notice on our website at least 30 days before the change takes effect. The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of the Service after changes constitutes acceptance.

12. Contact Information

If you have questions about this Privacy Policy or wish to exercise your data rights:

  • Email: privacy@atsletter.com
  • Website: https://atsletter.com/contact
  • Mailing Address: ATSLetter, 8 The Green, Suite A, Dover, DE 19901, USA

For legal correspondence, please use the mailing address above.