Privacy Policy

This Privacy Policy describes how Careerlister LLC ("CareerATS", "we", "us", or "our") collects, uses, and shares personal data when you use the CareerATS web application, related services, and websites (collectively, the "Services"). If you use the Services on behalf of an organization, you confirm you have authority to share information with us on its behalf.

1) Data We Collect

  • Account data: name, email address, role, credentials, and settings you provide when creating or managing an account.
  • Usage data: device/browser metadata, IP address, activity logs, and product telemetry to secure and improve the Services.
  • Candidate and customer content: resumes, notes, communications, and files you upload or generate within the Services.
  • Support and communications: messages sent to us (including email and in-product chat) and related metadata.
  • Cookies and similar technologies: identifiers used for authentication, session management, preferences, and analytics.

2) How We Use Data

  • Provide and operate the Services, including authentication, collaboration features, and integrations you enable.
  • Maintain security, detect fraud or abuse, and protect the integrity of the platform.
  • Improve performance, reliability, usability, and develop new features.
  • Provide customer support and respond to inquiries.
  • Send service-related communications, updates, and notices about changes to the Services or this Policy.
  • Comply with legal obligations and enforce our agreements.

3) Cookies and Tracking

We use cookies and similar technologies for authentication, session continuity, security, and basic analytics. You can usually disable cookies in your browser settings, but some features of the Services may not function properly without them.

4) How We Share Information

  • Service providers and subprocessors that help us host, support, analyze, or deliver features, under contracts that protect personal data.
  • Third-party integrations you choose to connect, in accordance with your configuration and their terms.
  • Business transfers, such as a merger, acquisition, or sale of assets, where data may be part of the transferred assets.
  • Legal compliance, to respond to lawful requests, protect rights, safety, or prevent fraud.

We do not sell personal data.

5) Data Retention

We retain personal data for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. If you close an account or request deletion, we will delete or de-identify data within a reasonable period, subject to any retention required by law or legitimate business needs.

6) Security

We implement administrative, technical, and physical safeguards designed to protect personal data. No system is perfectly secure; you are responsible for safeguarding credentials, configuring access permissions, and securing devices that access the Services.

7) International Transfers

We may process and store data in the United States and other countries. Where required, we implement appropriate safeguards to protect personal data transferred across borders.

8) Your Rights and Choices

  • Account and profile updates: you can update certain information directly in your account settings.
  • Access, correction, or deletion: subject to applicable law, you may request access to, correction of, or deletion of your personal data.
  • Objection or restriction: you may object to or request restriction of certain processing where permitted by law.
  • Communications: you can opt out of non-essential communications by following unsubscribe instructions; you may still receive transactional notices.

If you submit candidate or customer data to the Services, you are responsible for managing any rights requests related to that data.

9) Children

The Services are not directed to or intended for children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us so we can delete it.

10) Changes to This Policy

We may update this Privacy Policy from time to time. If changes are material, we will provide notice (for example, in-app or by email). Your continued use of the Services after the effective date of an updated Policy means you accept the changes.

11) Google API Services Data

If you connect a Google account (for example, Gmail SMTP via Google Sign-In), we process Google user data in accordance with the Google API Services User Data Policy and applicable Google Workspace API policies.

  • Google data we access: account identifiers, OAuth tokens, and any Google Workspace data scopes you authorize for email delivery features.
  • Purpose limitation: we use Google user data only to provide and improve user-facing features you request in CareerATS (for example, sending email through your connected mailbox).
  • No sale or ads use: we do not sell Google user data and do not use Google user data for advertising, retargeting, or data brokering.
  • Restricted transfers: we only share Google user data with service providers as needed to operate requested features, for security and abuse prevention, to comply with law, or as part of a merger/acquisition as allowed by law.
  • Human access restrictions: we do not allow humans to read Google user data except with your explicit consent, for security purposes, or as required by law.
  • Retention and deletion: OAuth tokens and Google-connected account data are retained only as long as needed to provide the integration. You can disconnect your Google integration in the app or revoke access in your Google account security settings, and you may request deletion at services@careerats.com.

The use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

12) Contact

If you have questions about this Privacy Policy or our data practices, contact us at services@careerats.com.

Last updated: March 18, 2026