Privacy Policy.
Last updated:
We care about your privacy. This page explains what personal data we collect, how and why we use it, who we share it with, where it is processed, and the rights you have under the EU General Data Protection Regulation (GDPR).
We never sell your data. We only use it to provide and improve Roleframe for you.
Who we are & how to contact us
This Privacy Policy explains how Roleframe(" we", "us", or "our") collects, uses, and protects your personal data when you use our website and web application (together, the "Service"). Roleframe is the data controller of your personal data.
This Policy should be read together with our Terms of Use and our Cookie Policy.
1. Data we collect
We collect data you provide to us, data we collect automatically when you use the Service, and limited data from the providers that help us run it.
Information you provide
- Account data. When you sign up, your name, email address, and authentication details are handled securely through our authentication provider. You may add optional profile information.
- Career content. The content you create or upload — resumes and resume content (work history, education, skills, certifications), cover letters, job descriptions you save or analyse, notes, and related career materials.
- Payment data. Card payments are processed by Stripe(Stripe Payments Europe, Ltd.), our payment processor and — via Stripe Managed Payments (Link) — the merchant of record for your purchases. Stripe collects your card details directly; we receive only limited information such as your billing country, the last four digits and type of your card, and your subscription/payment status. We do not store your full card number. Stripe's own privacy policy governs how it processes your payment data.
- Communications. When you contact support, we keep the content of those messages.
Information we collect automatically
- Usage data. How you interact with the Service — features used, actions taken, and timing — generally in aggregated, de-identified form.
- Device & connection. Device type, operating system, browser, IP address, and similar technical identifiers.
- Cookies. See Section 9 and our Cookie Policy.
2. How we use your data and our legal bases
Under the GDPR we must have a legal basis for each use of your personal data. We use your data:
- to create your account, provide the Service, and run the AI-powered actions you request — to perform our contract with you (Art. 6(1)(b) GDPR);
- to secure the Service, prevent fraud and abuse, monitor performance, and improve and develop features using aggregated, de-identified data — our legitimate interests (Art. 6(1)(f) GDPR);
- to send marketing communications and to set non-essential cookies — with your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time;
- to keep records and meet tax, accounting, and other legal duties — to comply with a legal obligation (Art. 6(1)(c) GDPR).
3. AI features
Roleframe uses artificial intelligence to power features such as resume optimisation, cover-letter generation, role and keyword matching, and document parsing. When you use these features, the content you provide (such as resume text and job descriptions) is processed to generate the outputs you request.
Your content is processed by our AI systems only to deliver the feature you request, under strict security and confidentiality controls. We do not use your personal resumes or other identifiable career documents to train general-purpose AI models, and any providers that help us run these features are contractually prohibited from training their models on your content. We may use aggregated, de-identified patterns to improve our own features.
5. International transfers
We aim to process your data within the EU/EEA. Where a provider necessarily processes data outside the EEA, we rely on appropriate safeguards — such as a European Commission adequacy decision or the EU Standard Contractual Clauses — to ensure your data receives an equivalent level of protection. You can ask us for more detail or a copy of the relevant safeguards.
6. Data retention
We keep your personal data for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or anonymise your personal data within a reasonable period (normally within 30 days), except where we must keep certain records to meet legal obligations (for example, billing records for tax) or to establish, exercise, or defend legal claims. Because deletion is permanent, please export anything you want to keep beforehand.
7. Security
We use appropriate technical and organisational measures to protect your data, including encryption in transit and at rest, access controls, and the use of reputable infrastructure providers. No method of transmission or storage is completely secure, but we work to protect your data and will notify you and the relevant authority of a personal-data breach where the law requires.
8. Your GDPR rights
Subject to conditions in the law, you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected (rectification);
- have your data erased (right to be forgotten);
- restrict or object to certain processing;
- receive your data in a portable format and have it transferred (data portability); and
- withdraw consent at any time, without affecting prior use.
You can exercise most of these rights directly in your account settings (including exporting your content and deleting your account), or by contacting [Email Protected]. We will respond within the time limits set by the GDPR.
If you believe we have not handled your data properly, you have the right to lodge a complaint with a supervisory authority — in Poland, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warsaw — or with the authority in your own EU/EEA country.
10. Children
The Service is intended for users aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
11. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above, and where changes are material we will give you notice through the Service or by email before they take effect.
12. Contact us
For any privacy question or to exercise your rights, contact us at: