Privacy policy

Data we collect

• Account data: your name, email and password (stored hashed), or your name and email from Google if you sign in with Google.
• Content you add: resumes and their files, job postings, job tracker, interview and note data, your interview practice answers, your conversations with the resume coach, and your LinkedIn profile PDF if you upload it.
• Subscription data: plan, status and invoice history. Payments are processed by Stripe; we never receive or store your card details.
• Technical data: IP address, browser type, and security and error logs, to protect accounts and prevent abuse.

Chrome extension

• The extension reads the open page only when you click its icon. It doesn't read other pages or your browsing history.
• When you choose "Save" or "Scan", it sends to your Atslio account only: the job title, company name, page URL and posting text.
• It stores in your browser only an extension connection key and your email. The key can save and scan jobs; it can't change your resumes or settings.
• You can disconnect at any time from the "Chrome extension" page in your account, and the key stops working immediately.

Job matches (public postings pool)

When you save or scan a job with a link to a public page (such as a posting on LinkedIn or Bayt), we add that public posting text and link to a shared pool we use to suggest matching jobs to all users.

The pool doesn't record who added a posting, and nothing from your resume or notes goes into it. Text you paste without a link isn't added.

How we use your data

• To provide the service: scanning and matching resumes to jobs, suggestions, the builder, tracker and reminders.
• To run your account, subscription and security, and send service emails (confirmation, password reset, reminders).
• To improve the service using aggregated statistics that don't identify you.
• We don't sell your data and we don't use it for advertising.

Artificial intelligence

Some features (optimization, generators, coach, LinkedIn, interview practice) send the needed parts of your resume and the job posting to a language model provider to produce suggestions, which our servers then check before showing them.

We don't use your content to train AI models unless you explicitly opt in from settings; this is off by default.

Who we share data with

We share data only as needed with providers that run the service on our behalf:

• Hosting, servers, database and file storage.
• Cloudflare: security and content delivery.
• Our language model provider: for AI features.
• Stripe: payments and invoices.
• Our email provider: service emails.
• Google: if you choose to sign in with Google.
• We may disclose data when required by a competent authority under applicable law.

Retention and deletion

We keep your data while your account exists. You can delete resumes, interview practice sessions and LinkedIn reviews from inside your account.

To delete your whole account and all your files, email [email protected] from your account email; we'll delete it within 30 days, except what the law requires us to keep (such as invoices).

Security

• Connections are always encrypted (HTTPS).
• Passwords and extension keys are stored hashed; we can't see them.
• Access to data is limited to what's needed.

Your rights

You have the right to access, correct, delete and object to the processing of your data, under the Personal Data Protection Law of Saudi Arabia. Contact us at [email protected].

Age

The service is intended for people aged 18 or older.

Changes

We update this policy when needed and will notify you of material changes by email or in the app before they take effect.