ATS Check Privacy Policy

Last updated · May 28, 2026

ATS Check scores the resume on your current Canva page. To do that, the text of that page — plus the optional job title and job description you choose to enter — is sent to our backend, scored, and the result is returned to you. Images, the rest of your design, and your Canva account identity are not sent. We don't sell your data, and we don't use it to train AI models.

01Who we are

ATS Check is built and operated by Blossomn, a small software studio in India. Under India's Digital Personal Data Protection Act, 2023 (DPDP Act), Blossomn is the data fiduciary for the limited personal data described below; for users in the EEA / UK, we are the data controller for the same.

Questions, requests, or concerns? Email info@blossomn.com. A real person reads every message.

02The short version

• ATS Check runs inside the Canva editor as an app. It reads the text and layout of the current page only through Canva's design API.
• To produce a score and fixes, that page text (and any optional job title / job description you type) is sent over an encrypted connection to our backend, which calls a third-party AI provider to analyze it. The result is returned to the app and shown to you.
• We do not receive your images, the other pages of your design, your name, your Canva account ID, or your email — unless you choose to email us for support.
• ATS Check never edits your design unless you press Apply fix on a specific issue. That edit happens locally in the Canva editor.
• We do not sell or rent your data, we do not use it to train AI models, and ATS Check contains no advertising SDKs and no cross-site tracking.

03What data ATS Check processes

Resume content you scan

• The text content of your current page, read via Canva's design API when you press Scan. This is sent to our backend to generate the score and fixes.
• Any optional target job title and job description you type into the app, used to check keyword and role match.

This content is processed to generate your result and is not stored as a permanent profile about you. See Retention below for how long anything persists.

What is never sent

• Images, logos, photos, or any non-text elements in your design.
• Pages other than the one you're scanning.
• Your Canva account name, email, or user ID. The Canva platform may pass our backend an opaque identifier solely to enforce per-user usage limits; it does not tell us who you are.

Usage & rate-limit data

• To keep the free service running and prevent abuse, our backend counts how many scans an opaque user identifier has run within a period. This is a counter, not a record of your resume content.
• Standard server logs (timestamp, coarse request metadata, IP address as seen by the server) are kept briefly for security and debugging.

Support correspondence

• If you contact us via the support form or email info@blossomn.com, we keep the thread so we can help. We delete any resume snippets you voluntarily share once the issue is resolved.

Website analytics

• The ATS Check marketing site uses a privacy-preserving, cookieless analytics tool that records page views and approximate country. It sets no cookies, does not fingerprint you, and does not track you across sites.

04The AI provider

Anthropic processes the request to return a result and, under its API terms, does not use data submitted through the API to train its models. We send only the text needed to do the scan; we don't attach your name or contact details. Anthropic's handling of API data is governed by Anthropic's privacy policy.

05What ATS Check cannot do

ATS Check operates inside Canva's app sandbox and uses only the design APIs Canva grants it. It reads the current page's content and, when you press Apply fix, writes a specific text change you approved. It cannot browse your other Canva designs, read your account details, or change anything outside the page you're working on.

06Why we process the little data we do (legal bases)

• Performance of the service you requested — running the scan and returning a score and fixes.
• Legitimate interests in keeping the free service available (rate limiting, abuse prevention), fixing bugs, and answering support requests.
• Consent for any optional information you choose to provide, such as a job description or a support message.
• Legal obligation for lawful disclosure requests and any required record retention.

07Retention

• Scanned page text & job details: processed to generate your result and not retained as a stored profile. Transient copies in request handling and provider processing are short-lived.
• Usage counters: kept only as long as needed to enforce the usage window, then reset.
• Server logs: typically 30 days, then rotated out.
• Support emails: 24 months, then deleted unless an open issue or legal hold requires longer.

08Subprocessors

Each is bound by a data-processing agreement where applicable:

• Canva Pty Ltd. — the platform ATS Check runs inside; it provides the design APIs the app uses.
• Anthropic, PBC — the AI provider that generates the score and fixes from your page text.
• Our hosting provider — runs the backend that relays scan requests. (Region and provider listed in-app and updated here as needed.)
• Postmark — transactional email (the occasional support reply).

We will post a notice on this page at least 30 days before adding any new subprocessor that processes personal data.

09International transfers

Where personal data moves out of India or the EEA — for example to the AI provider's or host's infrastructure — we and our subprocessors rely on the appropriate contractual safeguards (Standard Contractual Clauses for EEA data; equivalent safeguards under DPDP rules for Indian data).

10Security

All traffic between the app, our backend, and the AI provider uses TLS. We send only the data needed to perform a scan and apply the usage limit. If you discover a vulnerability, email info@blossomn.com with "Security" in the subject. We read these within one business day and follow a coordinated-disclosure policy. If a personal-data breach ever affects you, we'll notify you and the Data Protection Board of India within 72 hours of becoming aware.

11Your rights

Wherever you live, you can ask us to confirm what limited personal data we hold (in practice: support emails and short-lived logs), correct it, delete it, withdraw consent for optional features, or nominate another person to exercise these rights on your behalf (DPDP Act §14). Because we don't build a stored profile from your scans, there is usually nothing of that kind to export or erase. Email info@blossomn.com; we respond within 7 business days and complete most requests within 30 days. EU/UK residents may complain to their local supervisory authority; Indian residents, to the Data Protection Board of India.

12Children

ATS Check is a general-audience tool for job seekers, not designed for or directed at children under 13, and we don't knowingly collect personal data from children.

13Changes

If we make a material change to this policy we'll post a notice at the top of this page at least 14 days before it takes effect. Smaller corrections will just bump the "Last updated" date above.

14Contact

Grievance Officer: Blossomn Team · info@blossomn.com · Operated from India. We aim to acknowledge every privacy request within one business day.