Privacy policy

• You own what you put in. We store it to run the service for you and for nothing else.
• We do not sell your data, show ads, or share it with recruiters unless you opt in.
• Resume and job text is sent to an AI provider only when you use an AI feature.
• You can export everything, and ask for your account to be deleted, at any time.

• Account details: your name, email address and, if you use one, a password. Passwords are stored only as a one-way hash. If you sign in with Google or single sign-on, we store the identifier that provider gives us and the email it confirms.
• What you create: resumes and their versions, photos, uploaded files, job postings you capture, analyses, applications, notes, reminders, contacts you enter, interview practice, recordings or transcripts you upload, and saved job searches with their alert settings.
• Web resumes you publish: when someone opens one, we record the visit: time, time spent per section, the visitor's IP address, and an approximate city and network derived from it. You see these figures; visitors are not identified by name.
• Security and operations: sign-in sessions (with a hashed IP address and the browser's user-agent string), an audit log of sensitive actions, rate-limit counters, and a record of how much AI each account uses.
• Billing: which plan you are on and its renewal dates. Payment details are handled by the payment provider, not stored by us.

To provide the service you asked for: building and exporting your resume, analysing postings, tracking applications and showing your own analytics. To keep accounts secure and the service running. To answer you when you contact us. We do not use your content to train AI models, and we do not profile you for advertising.

• AI providers. When you use an AI feature (gap analysis, rewrites, interview help, transcription), the relevant resume, posting or recording text is sent to the AI provider the operator has configured, such as OpenAI, Anthropic, Google or Groq, under their API terms. Nothing is sent when you do not use AI features.
• Location lookup. For visits to a published web resume, the visitor's IP address is sent to an IP-geolocation service (ip-api.com or ipapi.co) to find an approximate city.
• Sign-in providers. If you choose Google or single sign-on, that provider handles the sign-in and tells us who you are.
• Payments. Paid plans are billed through Stripe (or PayPal), which processes your payment details under its own privacy policy.
• Email delivery. Account, billing and notification emails, and messages to and from support, are sent and received through Resend, which processes your address and the message under its own privacy policy.
• Bot protection. If the operator enables it, the sign-up form uses Cloudflare Turnstile to tell people from bots.
• Employers you apply to. When you apply to a listing on the job board, the resume and details you choose to send are shared with that employer, who can then see your application and move it through their hiring steps. Nothing is shared with an employer you have not applied to, unless you opted in to being discoverable.
• Hosting. The service and its database run on servers the operator controls.

We never sell or rent personal data. Recruiters on Rolemio see a seeker's profile only if that seeker chose to be discoverable, and see contact details only after the seeker accepts a request.

We use only what the service needs to work. There are no advertising or cross-site tracking cookies.

• Session cookie to keep you signed in, and a separate one for the operator console.
• Short-lived cookies for a sign-in handshake, for returning you to the page you were on, and for remembering that you entered a web resume's passcode.
• Local storage in your browser for preferences such as light or dark mode, recent searches, table sorting, and an anonymous visitor identifier on published web resumes so repeat visits are counted once.

• Access and export: download all your data as a file from Settings.
• Correction: edit anything you created, at any time.
• Deletion: delete your account from Settings, or ask us to, and your data is erased, apart from what we must keep by law (for example, payment records). Items you delete inside the app are kept briefly as a restore point so a mistake can be undone.
• Unpublish: take any web resume offline, or pause everything at once, from Settings.
• Discoverability: opt in or out of being found by recruiters whenever you like.

Depending on where you live, you may have further rights, such as objecting to processing or complaining to a data-protection authority.

Each account's data is separated by the database itself, not just by the application code. Connections are encrypted, passwords are hashed, sign-in and AI use are rate-limited, and job-posting fetches refuse private network addresses. We keep your data while your account exists and delete it when you delete the account or ask us to.

Questions or requests about your data: write to web@rolemio.com, or use the contact form and choose “Privacy or data request”. See also the terms of service.