# What OpenATS stores, and from where

> The data OpenATS Cloud keeps for your workspace, what it reads from Gmail, Google Calendar, Slack and the OpenATS Extension, and what it never does with it.

OpenATS keeps your account details and the recruiting record your team builds. From connected tools it keeps only what’s about candidates: Gmail messages with candidates, the calendar events for interviews it schedules, linked Slack channels and messages to its bot. Your data is never sold, never used for advertising, and never used to train generative models.

*Privacy & data · Last updated 2026-11-11*

---

| Source | What OpenATS keeps |
| --- | --- |
| **Your account** | Your name, work email and workspace settings, and, if you turn on two-step verification, its key (kept sealed) and your recovery codes (kept only as hashes). |
| **Your team’s recruiting** | Candidate profiles, resumes, notes, scorecards, interview transcripts, job postings and the rest of the hiring record. Your workspace controls it. |
| **Gmail**, when a recruiter connects it | Only messages with the email addresses of candidates already in your workspace. Nothing else in the inbox is stored, shown or processed. |
| **Google Calendar**, when enabled | It creates and updates the events for interviews scheduled in OpenATS, and reads nothing else. |
| **Slack**, when an admin connects it | Only the channels an admin links, and direct messages people send the OpenATS bot. |
| **The OpenATS Extension** | The LinkedIn profile or Juicebox list in front of a recruiter, sent to OpenATS only to check whether someone is already there, and when they add or update someone. |

## What it never does

- Sell personal data, or use it for advertising.
- Use your data to train generative models.
- Let what it learns in one workspace inform another, or, for an agency, what it learns about one client inform another client.
- Consider protected characteristics in any AI feature, or advance or reject anyone by software.

## Security

Everything travels over TLS. Integration credentials are stored encrypted and deleted the moment an integration is disconnected. Disconnecting Gmail stops its access at once, and unlinking a Slack channel deletes what was kept and learned from it.

The full policy, including who else processes data to run the service, is on [our privacy page](https://openats.ai/privacy).

> **Note:** This covers OpenATS Cloud. A self-hosted OpenATS runs on its installer’s own infrastructure: their deployment, their data.

---

Still need help? Write to the OpenATS team at https://openats.ai/support (or support@b150.ai). We reply by email.

Source: https://openats.ai/docs/privacy-and-data/what-openats-stores
OpenATS help center: https://openats.ai/docs