1. Information We Collect
1.1 Information You Provide
- Account information: name, email address, and password
- Resume data: the full text and file content of any resume you upload
- Profile and criteria: job field, target titles, years of experience, skills, work history, education, certifications, work arrangement preferences, location, salary requirements, and security clearance level
- Payment information: billing details processed and stored by our payment processor, Stripe. We do not store raw card numbers.
- Support communications: messages and information you submit via our support form
1.2 Information Generated by the Service
- Job match data: job listings matched to your profile, match scores, and the tailored resume documents generated for each match
- Usage data: actions taken within the service (e.g., marking a job as applied), dates and times of logins, and dashboard activity
1.3 Automatically Collected Information
- Browser type, device type, and IP address for security and fraud prevention purposes
- Authentication tokens required to maintain your login session
2. How We Use Your Information
We use the information we collect to:
- Deliver the Service: run daily job scans against your criteria, score and filter matches, generate tailored resume documents, and deliver them to your dashboard
- Send notifications: email you when new matches arrive and for account-related communications (OTP verification, subscription receipts, renewal reminders)
- Process payments: verify and charge your subscription through Stripe
- Provide support: respond to inquiries, investigate billing disputes, and resolve issues
- Improve the Service: analyze aggregate, de-identified patterns to improve matching quality and resume output — we do not use your individual resume or job history to train third-party AI models
- Comply with legal obligations: maintain records as required by applicable law
3. AI Processing of Your Data
The Service uses third-party AI APIs — including Anthropic's Claude — to score job listings against your profile and to generate tailored resume documents. When a job match is processed, relevant portions of your profile (target titles, skills, experience, resume text) are sent to these APIs as part of the request. We operate under data processing agreements with these providers that restrict their use of your data.
We do not use your resume, profile, or job match data to train any AI model — ours or any third party's.
4. Information Sharing
We do not sell your personal information. We share information only as follows:
- Stripe: payment processing. Stripe's privacy policy governs their handling of payment data.
- Resend: transactional email delivery (match notifications, receipts, OTP codes)
- Supabase: database and file storage infrastructure
- Anthropic: AI API for job scoring and resume generation (see Section 3)
- Legal requirements: if required by law, regulation, court order, or to protect the rights and safety of RoleWinner, our users, or others
5. Data Retention
We retain your account and profile data for as long as your account is active. You may request deletion of your account and associated data by contacting support@rolewinner.com. Upon verified request, we will delete your account data within 30 days, except where retention is required by law or legitimate business interest (e.g., payment records for tax compliance).
Job match records (sent_jobs) are retained for service continuity — they ensure you are not shown the same job twice across multiple sessions — and are deleted along with your account upon account deletion.
6. Security
We implement industry-standard security measures including encrypted connections (HTTPS), row-level security on our database (preventing any user from accessing another user's data), and restricted access to administrative functions. No method of electronic transmission or storage is 100% secure; we cannot guarantee absolute security.
7. Your Rights
Depending on your jurisdiction, you may have rights including:
- Access: request a copy of the personal data we hold about you
- Correction: request correction of inaccurate data
- Deletion: request deletion of your account and personal data
- Portability: request your data in a portable format
To exercise any of these rights, contact us at support@rolewinner.com. We will respond within 30 days.
8. Children
The Service is not directed at individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has created an account, contact us at support@rolewinner.com and we will promptly delete the account.
9. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes by email at least 30 days before they take effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.
