Privacy Policy

This policy explains what personal data Career Forge Ltd ("we", "us") collects when you use Rolebound, why we collect it, and the choices you have. It is written to be read; if anything is unclear, contact [email protected].

What we collect

• Account data: name, email address, password hash, locale and, if you sign in with Google, the identifier Google provides.
• Profile and documents: the information you enter or upload to build resumes and cover letters, including work history, education, skills, uploaded files and LinkedIn PDF exports.
• Job-search activity: jobs you save, applications submitted (manually or through Auto Apply), Auto Apply preferences, scan results and interview sessions, including transcripts and feedback.
• Billing data: subscription status, credit balance and transaction history. Card details are handled by Stripe and never stored on our servers.
• Technical data: IP address, browser type, device information, pages visited and request identifiers, collected through server logs and, only if you agree to it, Google Analytics.

How we use it

• To provide the service: generating documents, matching and submitting applications, running interview sessions and scanning resumes.
• To operate AI features: your documents and job descriptions are sent to our AI provider to generate output. Providers are contractually prohibited from using your data to train their models.
• To submit applications on your behalf when you enable Auto Apply, which involves sending your documents and contact details to the employer's application system.
• To bill you, prevent fraud, respond to support requests and send service emails. Marketing emails are sent only with consent and include an unsubscribe link.
• To improve the product using aggregated, de-identified usage statistics.

Legal bases

We process data to perform our contract with you, for legitimate interests (security, product improvement, fraud prevention), with your consent (marketing, optional features) and to comply with legal obligations.

Sharing

We share data with processors who help us run the service: hosting and storage providers, our AI and speech-to-text providers, Stripe for payments, email delivery and error monitoring. Employers receive the application data you choose to send. We do not sell personal data.

The browser extension

The Rolebound extension runs in your own browser, under your own sign-ins, and fills job application forms with the profile you have already given us. It is the part of the product that touches employer websites directly, so it is worth being precise about.

• It reads a page only to find an application form: the fields, their labels and the questions being asked. It sends those questions to us so we can answer them from your profile, and writes the answers back into the form.
• It never reads a page you are not applying on. On any other site it does nothing, records nothing and sends nothing.
• It does not collect your browsing history, your bookmarks, or the contents of pages unrelated to an application.
• It reads cookies only to tell whether you are signed in to a job board, so it knows whether a form can be filled at all. It does not read, copy or transmit the cookie values themselves.
• Wherever a site needs you — a captcha, a question we hold no answer for, a login — it stops and hands the tab back to you rather than guessing.
• Nothing it collects is sold, and none of it is used for advertising or to train models.

Cookies

Necessary cookies keep you signed in (rb_access, rb_refresh), protect the site from abuse, and remember the choice you make on the cookie banner (rb_consent). We do not ask permission for these, because the site cannot do what you came for without them.

Everything else is optional and off until you turn it on. Analytics cookies are Google Analytics 4, which tells us which pages people use and where they give up. Advertising cookies let us tell which advert brought someone here, so we stop paying for the ones that do not work. None of these are loaded — no script, no request to Google, no cookie — unless and until you choose to accept them. If you refuse, or simply ignore the banner, nothing optional is set at all.

You can change your mind at any time from “Cookie settings” in the footer of every page. Turning something off removes the cookies it set and stops the tag loading again. We keep a record of what you chose, when, and which version of this notice was in force, because we have to be able to show that consent was asked for properly; that record is kept against a random identifier, not against your name, unless you happened to be signed in.

Anonymous free tools

Files uploaded to the free scanner or text entered into the sample cover letter generator without an account are processed to produce the result and deleted afterwards. Rate-limiting data (IP address) is kept briefly to prevent abuse.

Retention

Account data is kept while your account is active. You can delete individual documents at any time, and deleting your account removes your personal data within 30 days, except records we must keep for tax or legal reasons. Backups are rotated within 90 days.

Your rights

Depending on where you live, you may have the right to access, correct, export, restrict or delete your personal data, and to object to certain processing. Most of this is available directly in Settings; for anything else, email us. You can complain to your local data protection authority.

International transfers

Data may be processed outside your country. Where required, we rely on standard contractual clauses or equivalent safeguards.

Security

Data is encrypted in transit and at rest. Access is limited to staff who need it, and we log administrative access. No system is perfectly secure; if we become aware of a breach affecting you, we will notify you as required by law.

Children

Rolebound is not intended for people under 16, and we do not knowingly collect their data.

Changes

We will post changes here and, for material changes, notify you by email or in the app.

Contact

Career Forge Ltd, United Kingdom. Email: [email protected].