Welcome to GATEBREAK ("we," "our," or "us"), operated by Society Media Tech.
We respect your privacy and are committed to protecting your personal data.
This privacy policy will inform you as to how we look after your personal data when you visit our websites (including all subdomains and related applications)
and tell you about your privacy rights and how the law protects you.
2. Data We Collect
We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:
Identity Data: includes first name, last name, username or similar identifier.
Contact Data: includes email address.
Technical Data: includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
Usage Data: includes information about how you use our website, products and services.
Financial Data: includes payment card details processed securely through Stripe. We do not store your full card number.
📄 GATEBREAK-Specific Data
In addition to the above, GATEBREAK collects the following data specific to our resume optimization service:
Resume Files: PDF, DOCX, and DOC files you upload for analysis.
Parsed Resume Text: Extracted text content from your uploaded documents for ATS analysis.
ATS Analysis Results: Scores, suggestions, and optimization recommendations generated for your resume.
Template Preferences: Information about which resume templates you've applied or downloaded.
Job Target Information: Any job titles, industries, or keywords you specify for optimization.
3. How We Use Your Personal Data
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
Where we need to perform the contract we are about to enter into or have entered into with you.
Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
Where we need to comply with a legal obligation.
🔍 How GATEBREAK Uses Your Resume Data
ATS Analysis: We parse and analyze your resume text to calculate ATS compatibility scores and generate improvement suggestions.
AI Processing: Your resume text may be processed by Google's Gemini AI to generate intelligent suggestions. This data is transmitted securely and not retained by Google for training purposes.
Template Application: We use your resume content to populate professional templates you select.
Service Improvement: Aggregated, anonymized data may be used to improve our analysis algorithms.
4. Data Storage & Third-Party Services
Your data is stored securely using industry-standard practices:
Database: DigitalOcean Managed MySQL with encryption at rest.
File Storage: DigitalOcean Spaces (S3-compatible) with encryption.
Payment Processing: Stripe handles all payment data (PCI-DSS compliant).
Authentication: Google OAuth for social login (optional).
AI Processing: Google Gemini API for intelligent resume analysis.
5. Data Retention
📅 GATEBREAK Data Retention Policy
Active Accounts: Resume files and analysis data are retained for the duration of your subscription plus 30 days after cancellation.
Free Tier: Data from free analyses is retained for 90 days.
After Deletion: When you delete your account, all resume files are permanently deleted from our storage within 7 days. Database records are anonymized or deleted.
Backups: Encrypted backups may retain your data for up to 30 days after deletion for disaster recovery purposes.
We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for,
including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.
6. Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed:
All data transmitted via HTTPS/TLS encryption
Passwords hashed using bcrypt with secure salting
Regular security audits and penetration testing
Rate limiting to prevent abuse
CSRF protection on all forms
Content Security Policy headers
7. Your Rights (GDPR)
Under certain circumstances, you have rights under data protection laws in relation to your personal data:
Right to Access: Request a copy of your personal data.
Right to Rectification: Request correction of inaccurate data.
Right to Erasure: Request deletion of your personal data.
Right to Portability: Request transfer of your data in machine-readable format.
Right to Object: Object to processing of your personal data.
Right to Restrict Processing: Request restriction of processing.
To exercise any of these rights, please use the "Download My Data" or "Delete Account" features in your account settings,
or contact us directly at the email below.
8. Cookies
We use cookies to maintain your session and preferences. You can manage your cookie preferences at any time using our cookie consent banner.
Essential Cookies (Always Active)
PHPSESSID: Session identifier for authentication (httpOnly, secure). Expires when browser closes.
csrf_token: Protects against cross-site request forgery attacks.
vestige_cookie_consent: Stores your cookie preferences (365 days).
Optional Cookies (Require Consent)
Analytics Cookies: Help us understand how visitors use our site. Only set if you consent.
We do not use advertising or third-party tracking cookies.
9. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page
and updating the "Last Updated" date. We encourage you to review this policy periodically.
10. Contact Us
If you have any questions about this privacy policy or our privacy practices, please contact us at: