Privacy
Last updated 17 September 2026. Operated by [LEGAL ENTITY], [COUNTRY].
What we store
- Your email address and, if you use Google sign-in, the name Google shares with us.
- Résumés and documents you upload, and the career facts we extract from them for you to approve.
- The rules and limits you set: locations, salary floor, roles you exclude, questions you refuse to answer.
- Answers you approve for application forms, and the applications we prepare or send on your instruction.
- A receipt for every application sent: when, to which employer, and what was submitted.
- Replies employers send to the forwarding address we give you.
- Billing status. Card details go to Stripe and never reach us.
What we do not do
- We do not sell your data or share it with employers beyond the application you told us to send.
- We do not scrape LinkedIn or buy profile data about you from anyone.
- We do not store passwords. Sign-in is by emailed link or Google.
- We do not train models on your documents.
Who processes it for us
Supabase (database, authentication and file storage), Stripe (payments), Resend (email), Cloudflare and Hetzner (hosting), DeepSeek and OpenAI (the models that draft answers and rank postings; each call is logged to your account and carries only the text needed for that answer), and Google (sign-in, if you choose it).
How long we keep it
Your profile, documents and rules stay until you delete them or your account. Application receipts are kept as a record of what was sent in your name. If you ask us to erase your account, we export your receipts to you, delete the personal content, and keep only an anonymised stub (date, employer, a hash) so the record cannot be silently rewritten.
Your rights
You can export or delete your data at any time by emailing privacy@roleinbox.com. We answer within 30 days. If you are in the EU or UK you also have the right to complain to your data protection authority.