Privacy

Last updated 15 October 2026. Operated by Zirui Li.

What we store

Your email address and, if you use Google sign-in, the name Google shares with us.
Resumes and documents you upload, and the career facts we extract from them for you to approve.
The rules and limits you set: locations, salary floor, roles you exclude, questions you refuse to answer.
Answers you approve for application forms, and the applications we prepare or send on your instruction.
A receipt for every application sent: when, to which employer, and what was submitted.
Replies employers send to the forwarding address we give you.
Billing status. Card details go to Stripe and never reach us.

The Chrome extension

It only works on Greenhouse and Ashby job pages and on roleinbox.com. It cannot read any other site, and it does not see your browsing history.
On a job page, and only when you use the side panel, it reads the page address and the application form’s questions and choices, and sends them to RoleInbox to prepare your answers.
After it fills the form, it reads each field back to check the value took. After you press Submit, it reads the page’s address, title and up to 4,000 characters of its text, to confirm the employer received your application.
It keeps your sign-in session and one setting in Chrome’s own storage on your computer. Signing out clears the session.
If you let it help you create an employer account (for example on Workday), it saves that email and password on your computer for that company. Only if you tick “keep it in my RoleInbox account” is a copy stored with us, encrypted, so you can sign in from another computer. “Remove saved password” deletes both.
“Capture employer emails” is off until you turn it on. When on, it types a RoleInbox forwarding address into the form’s email field, so the employer’s replies reach RoleInbox. Your own email stays on your profile.
It has no ads, analytics or tracking. More about the extension.

What we do not do

We do not sell your data or share it with employers beyond the application you told us to send.
We do not scrape LinkedIn or buy profile data about you from anyone.
We do not have a RoleInbox password for you: sign-in is by emailed link or Google. Employer passwords are covered under the Chrome extension above.
We do not train models on your documents.

Who processes it for us

Supabase (sign-in), Stripe (payments), Resend (email), Cloudflare and Hetzner (hosting, database, file storage and backups), DeepSeek and OpenAI (the models that draft answers and rank postings; each call is logged to your account and carries only the text needed for that answer), and Google (sign-in, if you choose it).

How long we keep it

Your profile, documents and rules stay until you delete them or your account. Application receipts are kept as a record of what was sent in your name. If you ask us to erase your account, we export your receipts to you, delete the personal content, and keep only an anonymised stub (date, employer, a hash) so the record cannot be silently rewritten.

Your rights

You can export or delete your data at any time by emailing support@roleinbox.com. We answer within 30 days. If you are in the EU or UK you also have the right to complain to your data protection authority.