Privacy Policy

This policy explains what personal data Rolebound ("we", "us") collects when you use Rolebound, why we collect it, and the choices you have. It is written to be read; if anything is unclear, contact support@rolebound.app.

What we collect

• Account data: name, email address, password hash, locale and, if you sign in with Google, the identifier Google provides.
• Profile and documents: the information you enter or upload to build resumes and cover letters, including work history, education, skills, uploaded files and LinkedIn PDF exports.
• Job-search activity: jobs you save, applications submitted (manually or through Auto Apply), Auto Apply preferences, scan results and interview sessions, including transcripts and feedback.
• Billing data: subscription status, credit balance and transaction history. Card details are handled by Stripe and never stored on our servers.
• Technical data: IP address, browser type, device information, pages visited and request identifiers, collected through server logs and privacy-respecting analytics.

How we use it

• To provide the service: generating documents, matching and submitting applications, running interview sessions and scanning resumes.
• To operate AI features: your documents and job descriptions are sent to our AI provider to generate output. Providers are contractually prohibited from using your data to train their models.
• To submit applications on your behalf when you enable Auto Apply, which involves sending your documents and contact details to the employer's application system.
• To bill you, prevent fraud, respond to support requests and send service emails. Marketing emails are sent only with consent and include an unsubscribe link.
• To improve the product using aggregated, de-identified usage statistics.

Legal bases

We process data to perform our contract with you, for legitimate interests (security, product improvement, fraud prevention), with your consent (marketing, optional features) and to comply with legal obligations.

Sharing

We share data with processors who help us run the service: hosting and storage providers, our AI and speech-to-text providers, Stripe for payments, email delivery and error monitoring. Employers receive the application data you choose to send. We do not sell personal data.

The browser extension

The Rolebound extension runs in your own browser, under your own sign-ins, and fills job application forms with the profile you have already given us. It is the part of the product that touches employer websites directly, so it is worth being precise about.

• It reads a page only to find an application form: the fields, their labels and the questions being asked. It sends those questions to us so we can answer them from your profile, and writes the answers back into the form.
• It never reads a page you are not applying on. On any other site it does nothing, records nothing and sends nothing.
• It does not collect your browsing history, your bookmarks, or the contents of pages unrelated to an application.
• It reads cookies only to tell whether you are signed in to a job board, so it knows whether a form can be filled at all. It does not read, copy or transmit the cookie values themselves.
• Wherever a site needs you — a captcha, a question we hold no answer for, a login — it stops and hands the tab back to you rather than guessing.
• Nothing it collects is sold, and none of it is used for advertising or to train models.

Anonymous free tools

Files uploaded to the free scanner or text entered into the sample cover letter generator without an account are processed to produce the result and deleted afterwards. Rate-limiting data (IP address) is kept briefly to prevent abuse.

Retention

Account data is kept while your account is active. You can delete individual documents at any time, and deleting your account removes your personal data within 30 days, except records we must keep for tax or legal reasons. Backups are rotated within 90 days.

Your rights

Depending on where you live, you may have the right to access, correct, export, restrict or delete your personal data, and to object to certain processing. Most of this is available directly in Settings; for anything else, email us. You can complain to your local data protection authority.

International transfers

Data may be processed outside your country. Where required, we rely on standard contractual clauses or equivalent safeguards.

Security

Data is encrypted in transit and at rest. Access is limited to staff who need it, and we log administrative access. No system is perfectly secure; if we become aware of a breach affecting you, we will notify you as required by law.

Children

Rolebound is not intended for people under 16, and we do not knowingly collect their data.

Changes

We will post changes here and, for material changes, notify you by email or in the app.

Contact

Rolebound, United Kingdom. Email: support@rolebound.app.