Privacy Policy

1. What We Collect

When you use Roleloft, we collect:

• Account data: Name, email address, hashed password (or Google account ID if you sign in with Google)
• Profile data: Education, work experience, skills, resume text, preferred job roles and locations
• Resume: Text extracted from uploaded PDF for ATS analysis. We store extracted text, not the original file.
• Application data: Job applications you track through the platform
• Usage data: Pages visited, features used (no third-party tracking pixels)

2. How We Use Your Data

We use your data to:

• Provide the core Service: job matching, ATS scoring, cover letter generation
• Send transactional emails (welcome, application confirmations, trial expiry notices)
• Improve match accuracy based on your preferences and history
• Maintain platform security and prevent abuse

We never sell your data to employers, recruiters, or third parties.

3. AI Processing

Your resume text and profile data are sent to Groq (an AI API provider) to generate cover letters, ATS scores, and interview questions. Groq processes this data according to their own privacy policy. We send only the minimum data needed for each request and do not share your email or personal identifiers with AI providers.

4. Data Storage

Your data is stored in Supabase (PostgreSQL), a cloud database hosted on AWS infrastructure in the EU region. Data is encrypted at rest and in transit. We retain your data for as long as your account is active. Deleting your account permanently removes all personal data within 30 days.

5. Cookies

We use only essential session-related localStorage (not cookies) to maintain your login state. We do not use advertising cookies, analytics trackers, or third-party tracking pixels.

6. Third-Party Services

We use the following third-party services:

• Supabase — database storage
• Groq — AI language model API
• Adzuna — job listing aggregation
• Resend — transactional email delivery
• Google OAuth — optional sign-in method

Job listing sources (Remotive, Jobicy, Himalayas, RemoteOK, etc.) are fetched via their public APIs and not shared your personal data.

7. Your Rights

You have the right to:

• Access all data we hold about you (available in Settings)
• Correct inaccurate data (edit directly in Settings or Profile)
• Delete your account and all associated data (Settings → Account → Delete Account)
• Export your data — contact us and we'll send a full export within 7 days

8. Children's Privacy

Roleloft is not intended for users under 16 years of age. We do not knowingly collect data from children under 16.

9. Changes to This Policy

We may update this policy as the Service evolves. We will notify you of significant changes via email or in-app notification at least 14 days before they take effect.

10. Contact

For privacy questions or data requests: dhruvtejwani23@gmail.com