Your privacy is fundamental to everything we do at RoleStack. This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and the choices and rights you have regarding your data. We are committed to being transparent about our data practices and to handling your information with the care and respect it deserves.
This Privacy Policy applies to RoleStack ("RoleStack", "we", "our", or "us"), the operator of the RoleStack AI-powered job search platform, accessible at https://www.rolestack.ai and through our associated applications and services (collectively, the "Platform").
This policy applies to all users of the Platform - whether you are a visitor browsing our website, a registered free user, or a paid subscriber. It describes how we collect, use, store, protect, share, and otherwise process personal information about you ("Personal Data") in connection with your use of our services.
By accessing or using our Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this policy, please discontinue using our services.
Our core commitment: We will never sell your personal information to third parties for their own marketing or advertising purposes. Your data exists to serve your job search - that's it.
We collect different categories of information depending on how you interact with our Platform. Below is a detailed breakdown:
When you create an account, we collect:
To operate our AI-powered job matching and application services, we collect detailed professional information, including but not limited to:
As part of our core service, we collect and generate data related to your job search activity:
When you subscribe to a paid plan, we collect:
We do not directly collect or store full credit card numbers, CVV codes, or full bank account details. All payment data is processed and stored by Stripe in accordance with PCI-DSS standards.
We automatically collect certain usage data when you interact with our Platform:
If you contact us directly - via email, support tickets, bug reports, or in-app chat - we collect the content of those communications, including your name, email, and any information you choose to include.
We collect information through the following channels:
The majority of your personal information is collected directly from you when you:
We automatically collect usage and technical data using cookies, web beacons, pixel tags, and analytics tools as you interact with our Platform. See Section 7 for more details on our cookie practices.
We may collect information from third-party sources, including:
We use the information we collect for specific, legitimate purposes directly related to providing and improving our services:
AI Training Notice: We may use de-identified or anonymized data from user interactions to train and improve our AI models. We will never use your personally identifiable resume content or application data to train models in ways that could expose your identity to other users or third parties.
If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, RoleStack processes your personal data under the following legal bases as defined by the General Data Protection Regulation (GDPR):
Contractual Necessity
Processing necessary to perform our contract with you - i.e., providing the RoleStack platform and services you have registered for and subscribed to. This includes account management, job matching, and application automation.
Legitimate Interests
Processing necessary for our legitimate business interests, including improving our platform, preventing fraud and abuse, ensuring security, and sending service-related communications - provided these interests are not overridden by your rights and interests.
Consent
Where we rely on your consent - such as for optional marketing communications or non-essential cookies - you have the right to withdraw consent at any time without affecting the lawfulness of prior processing.
Legal Obligation
Processing required to comply with applicable laws, regulations, tax obligations, or to respond to lawful governmental requests.
Your personal data is stored on secure cloud infrastructure operated by reputable providers with industry-standard security certifications. Data may be stored and processed in the United States and other jurisdictions where our service providers operate. Please see Section 12 for information on international data transfers.
We implement a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or alteration:
In the event of a data breach that affects your personal information, RoleStack will notify you and relevant authorities as required by applicable law - typically within 72 hours of becoming aware of the breach. Notification will be sent to your registered email address and/or through in-app notifications.
Your role in security: While we take extensive measures to protect your data, no system is 100% secure. You are responsible for keeping your login credentials confidential, using a strong password, and promptly notifying us if you suspect unauthorized access to your account at support@rolestack.ai.
We retain your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our retention practices are as follows:
| Data Type | Retention Period | Reason |
|---|---|---|
| Active account data | For the duration of the account | Service delivery |
| Post-cancellation data | 90 days | Reactivation opportunity |
| Billing & payment records | 7 years | Tax and legal compliance |
| Application history logs | 2 years after account closure | Dispute resolution, refund verification |
| Analytics data (aggregated) | Up to 26 months | Product improvement (per GA4 defaults) |
| Support communications | 3 years | Service quality and dispute history |
When data is no longer needed, we securely delete or anonymize it in accordance with industry standards. You may request early deletion of your data - see Section 10 for your data rights.
Depending on your location, you may have certain rights regarding your personal data. RoleStack is committed to honoring these rights promptly and transparently. The following rights are available to all RoleStack users regardless of location:
Right to Access
You have the right to request a copy of the personal data RoleStack holds about you, including what data we have, how we use it, and whom we share it with.
Right to Correction (Rectification)
You have the right to request correction of any inaccurate or incomplete personal data we hold about you. Most profile information can be updated directly within your account settings.
Right to Deletion (Right to be Forgotten)
You have the right to request that RoleStack delete your personal data. Upon a valid deletion request, we will delete your account and personal data within 30 days, subject to our legal retention obligations (e.g., financial records required by tax law).
Right to Portability
You have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format (e.g., JSON or CSV) so you can transfer it to another service.
Right to Object / Opt Out
You may opt out of marketing communications at any time by using the "unsubscribe" link in any marketing email, or by contacting us directly. You may also object to certain processing activities based on legitimate interests.
Right to Restrict Processing
In certain circumstances, you have the right to request that we restrict the processing of your personal data - for example, while a dispute regarding accuracy is being resolved.
To exercise any of the rights above, please email us at privacy@rolestack.ai with the subject line "Privacy Rights Request" and include:
We will respond to all valid requests within 30 days. In complex cases, we may extend this period by up to an additional 30 days, in which case we will notify you of the extension. We will not charge a fee for reasonable requests, but may charge a reasonable administrative fee or decline manifestly unfounded or excessive requests.
If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) provide you with additional rights regarding your personal information.
In the past 12 months, we have collected the following categories of personal information as defined by the CCPA:
To exercise your California rights, contact us at privacy@rolestack.ai. We will verify your identity before fulfilling your request.
RoleStack is based in the United States, and your personal data may be stored and processed in the United States or other countries where our service providers operate. These countries may have data protection laws that differ from those in your home country.
If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, and we transfer your personal data to countries not recognized as providing an adequate level of data protection, we implement appropriate safeguards to ensure your data is protected, including:
By using RoleStack's services, you acknowledge and consent to the transfer of your personal data to the United States and other jurisdictions as described in this section.
RoleStack's services are not directed to, and we do not knowingly collect personal information from, individuals under the age of 18. Our Platform is intended solely for adults who are legally eligible to enter into employment and contractual relationships.
If you are a parent or guardian and believe that your child under the age of 18 has provided us with personal information, please contact us immediately at privacy@rolestack.ai. We will take prompt steps to delete such information from our systems.
If we discover that we have inadvertently collected personal information from a child under 18, we will delete that information as quickly as reasonably possible and terminate the associated account.
Our Platform may contain links to external websites, employer career pages, job boards, or third-party services (such as LinkedIn). Once you click on a link to a third-party site, you leave the RoleStack Platform, and this Privacy Policy no longer applies to the information collected by those third parties.
We are not responsible for the privacy practices or content of third-party websites or services. We encourage you to review the privacy policies of any third-party sites you visit before providing any personal information.
Employer career portals and job boards may independently collect information about you when you apply for jobs. RoleStack is not responsible for the data practices of employers or job boards who receive your application materials.
We may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or Platform features. When we make material changes, we will:
Your continued use of RoleStack's Platform after the effective date of the revised Privacy Policy constitutes your acceptance of the updated policy. If you do not agree to the updated policy, you must stop using our services and may request deletion of your account data.
For non-material changes (such as clarifications or minor editorial updates), we will update the "Last Updated" date but may not provide direct notification. We encourage you to review this policy periodically.
If you have any questions, concerns, or requests regarding this Privacy Policy or how RoleStack handles your personal data, please don't hesitate to reach out. We are committed to addressing all privacy-related inquiries promptly and transparently.
We aim to acknowledge all privacy-related requests within 48 hours and resolve them within 30 days. For complex requests involving data deletion or portability, we will keep you informed of progress throughout the process.
If you are located in the EEA or UK and believe we have not handled your personal data in accordance with applicable data protection law, you have the right to lodge a complaint with your local data protection supervisory authority. We would, however, appreciate the opportunity to address your concerns directly before you escalate to a supervisory authority.