Privacy Policy

This Privacy Policy explains how Rolebit ("we", "us", "our") collects, uses, and protects your personal data when you use our service. Rolebit is the data controller for the personal data described here and operates from the United Kingdom.

Rolebit helps you prepare job applications: it researches companies, suggests likely contacts, matches and optimises your CV against a role, and drafts outreach. To do this we process information you provide — including your CV — which is personal data. We collect only what we need, we are transparent about how we use it, and we never sell it.

Account information: your email address, and — if you sign in with Google — your name and profile image from Google.

Content you provide: the CV text and files you upload, job descriptions you paste, and the target company and role you enter. This is used to produce your CV match, optimised CV, and application pack.

Content we generate for you: company research briefs, suggested contacts and email-address patterns, CV suggestions and optimised CVs, cover letters, and outreach drafts — created from your inputs and stored to your account so you can return to them.

Billing information: your application-credit balance and transaction history. Card payments are processed by Stripe; we never receive or store your card number.

Technical information: minimal server-side records needed to run the service securely and reliably, such as error events and rate-limit counters. We do not use web analytics, tracking pixels, or advertising cookies.

We use your information to:

• Provide the service you ask for — research, contact suggestions, CV matching and optimisation, cover letters, and outreach drafts (legal basis: performance of our contract with you). • Keep the service secure and prevent abuse, spam, and excessive cost — including rate limiting and spend limits (legal basis: our legitimate interests). • Process payments and maintain billing records (legal bases: contract and legal obligation). • Send you service emails such as sign-in links and receipts (legal basis: contract).

We do not use your data to train AI models, and the AI provider that processes your content through its API does not train its models on that content. We do not sell your data and we do not use it for advertising.

We use a small number of trusted providers to operate Rolebit. Each processes personal data only on our instructions:

• Supabase — database, authentication, and storage (data hosted in the EU). • Anthropic (Claude API) — AI processing of your CV, job descriptions, and research inputs. This involves a transfer to the United States, safeguarded by standard contractual clauses. • Firecrawl — fetching and structuring public company web pages for research. • Usebouncer — verifying whether suggested email addresses are deliverable. • Stripe — payment processing (PCI-compliant; card data is handled by Stripe, not us). • Google — optional sign-in (OAuth). • Our cloud hosting provider — running the application.

We do not share your personal data with third parties for their own marketing or commercial purposes.

We keep your account and content for as long as your account exists, so the service works as you expect.

Company research results are cached for about 24 hours and then refreshed on next use.

You can export or permanently delete your data at any time from the Account & data page. Deleting your account permanently removes your personal data and content from our systems; short-lived backups age out on a rolling basis.

Application Pack data shown in the app is stored in your browser and is removed when you delete it or clear your browser storage.

Under UK data protection law you have the right to:

• Access and portability — download a copy of your data from Account & data, or ask us for one. • Erasure — delete your account and data from Account & data. • Rectification — ask us to correct inaccurate data. • Restriction and objection — ask us to limit or stop certain processing. • Withdraw consent — where our processing relies on consent.

You can exercise the main rights yourself on the Account & data page. For anything else, contact us using the details below and we will respond within one month. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

We use only strictly-necessary cookies — to keep you signed in and maintain your session. We do not use analytics, tracking, or advertising cookies, so no cookie-consent banner is required to use Rolebit.

Your data is encrypted in transit (HTTPS) and at rest. Access is controlled by row-level security so you can only ever access your own data, and our service keys are held server-side and never exposed to your browser. No system is perfectly secure, but we take reasonable, industry-standard measures to protect your information.

If you have questions about this Privacy Policy or want to exercise a right, contact us at:

privacy@rolebit.com

Rolebit, United Kingdom

This policy was last updated in June 2026.