Privacy Policy

This Privacy Policy applies to Rolebolt websites, applications, recruiter workspaces, seeker workspaces, public opportunity pages, application and assessment pages, and related support and billing experiences that link to this policy. It applies whether you browse without an account, create an account, apply for a role, publish a role, or use Rolebolt as part of a recruiting team.

Rolebolt provides the technology. When a recruiter or organisation uses Rolebolt to collect and review applications, that recruiter or organisation may decide why candidate information is collected and how it is used. In that situation, the recruiter or organisation may have its own privacy notice and legal responsibilities. Questions about a particular job, hiring decision, or employer's retention period should first be directed to the organisation named on the opportunity.

For information we collect and use for our own account, service, security, support, product, and billing operations, Rolebolt is responsible for the practices described here.

Depending on the feature and your relationship with Rolebolt, the information we handle may include the following:

• Account and identity information: name, email address where provided, username, phone number where used for sign-in, profile role, account status, authentication identifiers, and account creation or update dates.
• Authentication and security information: password hashes rather than your readable password, email-verification and password-reset tokens, token expiry information, sign-in events, and information needed to detect or respond to unauthorised access. Never send us a password, secret, or API key through support or feedback.
• Recruiter and organisation information: company or organisation name, profile description, location, industry, website, LinkedIn or portfolio links, logo or profile image, job descriptions, hiring criteria, rubrics, pipeline settings, notes, collaboration activity, interview materials, offers, and hiring workflow history.
• Job-seeker information: seeker profile details, usernames, resumes and resume versions, cover letters, saved roles, application tracker entries, job-search workspace content, interview-preparation content, and other information you choose to create or upload.
• Candidate and application information: information submitted to a job or form, including name, email, phone number, resume or work-sample content, answers, assessment responses, time taken on assessment questions, recruiter notes, score breakdowns, interview briefs, stage history, offer details, and communications. This information may belong to a candidate even when it is entered by a recruiter or submitted through a public application page.
• Billing information: plan category, plan and billing interval, entitlement status, subscription and payment-provider identifiers, billing period, payment state, cancellation state, usage counters, and billing audit information. Payment providers process payment details; Rolebolt does not ask you to submit a full card number in the Rolebolt application.
• Support and feedback: feedback category, message, optional email address, page URL, and the date submitted. If you contact support, we also receive the information you include in that communication.
• Usage and technical information: pages or features used, events generated by the application, an anonymous or pseudonymous browser session identifier, account identifier when available, browser and device information made available by the platform, approximate timing, and infrastructure or security logs. Network providers may also create standard access logs such as IP address and request information.

Please provide only information that is relevant to the feature and that you are authorised to provide. Recruiters should not upload sensitive candidate information unless they have an appropriate legal basis and have given candidates any notice required by applicable law.

We may receive information:

• directly from you when you register, complete a profile, publish a role, apply, answer an assessment, upload a file, use Copilot, submit feedback, or contact support;
• from a recruiter, organisation, or team member who creates a job, imports a resume, invites collaboration, or submits candidate information;
• from authentication and payment providers when you choose a supported sign-in method or complete a billing action;
• from public pages and links you choose to publish or visit; and
• automatically from the Rolebolt application and hosting infrastructure as you use the service.

We use information for the following purposes:

• to create and maintain accounts, profiles, recruiter workspaces, seeker workspaces, jobs, applications, assessments, offers, and collaboration features;
• to publish the pages and opportunities you ask us to publish and to deliver applications or assessment responses to the relevant recruiting organisation;
• to match, analyse, score, organise, search, summarise, and otherwise operate the hiring and job-search tools you request;
• to send verification, application, assessment, interview, offer, reminder, collaboration, briefing, billing, and service messages;
• to authenticate users, recover accounts, prevent fraud and abuse, enforce access boundaries, and protect the security of the service;
• to calculate plan entitlements, enforce usage limits, reconcile payments, prevent duplicate processing, and maintain billing records;
• to understand feature usage, diagnose failures, measure reliability, and improve product design and documentation;
• to respond to support requests and feedback; and
• to comply with legal obligations, enforce our terms, resolve disputes, and protect the rights, safety, and property of Rolebolt, our users, and others.

Depending on where you live and how the information is used, these activities may be based on performing a contract with you, your consent where consent is required, our legitimate interests in operating and securing the service, the legitimate interests of a recruiting organisation, or a legal obligation.

Rolebolt includes AI-assisted features such as job analysis, resume and candidate scoring, assessment scoring, summaries, interview preparation, cover-letter assistance, offer drafting, hiring automation support, and Copilot conversations. These features may process the relevant job description, rubric, resume, profile, application, assessment, interview, form, or conversation content needed to return the result you request.

AI output can be incomplete, inaccurate, outdated, or biased. It is decision support, not a guarantee of a candidate's ability, identity, suitability, employment outcome, or career outcome. Recruiters remain responsible for human review, lawful hiring practices, appropriate notices, and final decisions. Job seekers remain responsible for reviewing generated resumes, cover letters, interview answers, and other content before using it.

Relevant content may be sent to the external AI services configured for the feature, including Google Gemini and other model infrastructure used by Rolebolt. We send only the content needed for the requested operation, but you should avoid entering unnecessary sensitive information or secrets into AI prompts. The treatment of data by an AI provider is also subject to that provider's terms and privacy practices.

We share information only as needed for the purposes described in this policy, at your direction, or as permitted or required by law. Service categories may include:

• Database and hosting providers: store account, workspace, application, billing, event, and operational information and run the Rolebolt application.
• Authentication providers: support custom account authentication and, where enabled, social or phone sign-in. They may receive the identifiers needed to complete that sign-in.
• Email providers: deliver verification, application, assessment, offer, notification, support, and billing messages.
• AI providers: process the relevant content for a requested AI-assisted result as described above.
• Payment providers: process checkout and subscription events. Rolebolt receives provider references, status, and reconciliation information rather than needing to store full payment credentials.
• Security and abuse-prevention providers: help protect public application flows and the service from automated abuse where those controls are enabled.
• People you choose to involve: recruiters, candidates, teammates, employers, or other recipients when a feature requires the information to be displayed or delivered to them.

We may also disclose information to professional advisers, regulators, law-enforcement authorities, courts, or other parties when reasonably necessary to comply with law, respond to a valid legal process, investigate abuse, protect people or the service, or establish or defend legal claims. If Rolebolt is involved in a merger, financing, acquisition, reorganisation, or sale of assets, information may be transferred as part of that transaction subject to appropriate confidentiality and legal requirements.

We do not sell personal information and do not share it for cross-context behavioural advertising.

Some Rolebolt features are intentionally public. A public username profile, recruiter or creator profile, job listing, or opportunity page may be visible to people who access the relevant link and may be indexed by search engines. Review the information on a profile or listing before publishing it. You can contact the relevant account owner or Rolebolt about correcting or removing information where the feature allows it.

When you apply, complete a form, or take an assessment, your submission is delivered to the recruiting organisation connected to that opportunity. That organisation may review, store, export, communicate about, score, or otherwise use the submission for its hiring process. Recruiter notes, internal score explanations, agent logs, collaboration comments, and internal workflow data are not intended to be public unless a user deliberately shares them.

If you are a candidate, the organisation that invited or received your application may be the best contact for questions about its use of your information, a hiring decision, or deletion from that organisation's records. Rolebolt can help route a request where appropriate, but cannot make an employer delete records that the employer is legally entitled or required to retain.

We keep information for as long as it is needed to provide the feature, maintain an account or workspace, support an active hiring process, meet billing and accounting requirements, resolve disputes, enforce agreements, prevent abuse, or satisfy a legal obligation. Retention varies by type of information and by the instructions of the recruiting organisation for candidate data.

Deleting an item from a workspace may not immediately remove copies in backups, audit records, email inboxes, exports, or another organisation's records. Those copies are handled according to the applicable retention and backup cycle. When information is no longer needed, we aim to delete it, anonymise it, or securely isolate it.

To request account deletion or a copy of your information, email privacy@rolebolt.tech from the address associated with the account where possible. We may need to verify your identity and clarify the account, job, or application involved before acting.

We use reasonable technical and organisational safeguards appropriate to the service, including authenticated access controls, owner- and job-scoped permissions for recruiter data, encrypted network connections, password hashing, provider security controls, and operational monitoring. Access to candidate and workspace information is intended to be limited to authorised users and service operations.

No website, database, email system, or internet transmission is completely secure. Keep credentials private, use a strong unique password, review teammate access, and report suspected unauthorised access or a security issue promptly to privacy@rolebolt.tech.

Rolebolt uses browser storage for essential product behaviour. Depending on the experience, this can include a local authentication token, an authentication cookie used to help preserve a session, theme preference, checklist or workspace drafts, interview or chatbot history, and a session identifier used for product events. These are not used by Rolebolt as a third-party advertising profile.

We also use essential server-side session, security, and infrastructure mechanisms and may receive standard logs from hosting or network providers. If you block or clear browser storage, sign-in and saved local preferences may stop working, and a session may need to be re-established. You can manage browser storage through your browser settings.

Depending on your location and the context in which Rolebolt processes your information, you may have rights to request access, correction, deletion, portability, restriction, objection, or information about processing. You may also withdraw consent where processing is based on consent. These rights are subject to exceptions under applicable law.

You can usually exercise control by:

• editing your account or profile information;
• choosing what to publish on a public profile or opportunity page;
• deleting or updating workspace content where the feature provides that control;
• managing billing and cancellation from Payment & billing;
• contacting the recruiting organisation that controls a particular application; or
• emailing privacy@rolebolt.tech with the request, the account or email involved, and enough context for us to locate the information.

We do not discriminate against you for making a lawful privacy request. We may ask for reasonable verification, and an authorised representative may need to provide evidence of authority where local law requires it. If you are not satisfied with our response, you may have the right to contact a data protection or privacy regulator in your jurisdiction.

Rolebolt and its service providers may process information in countries other than the country where you live. Those countries may have different data-protection rules. When required, we use appropriate safeguards for cross-border transfers and require providers to protect information according to their agreements and applicable law.

Rolebolt is intended for adults and professional or educational hiring and job-search use. It is not directed to children, and we do not knowingly collect personal information from children in violation of applicable law. If you believe a child has provided information to Rolebolt, contact privacy@rolebolt.tech so we can review and take appropriate action.

We may update this policy when Rolebolt's features, providers, legal requirements, or data practices change. We will post the updated version on this page and change the "Last updated" date. If a change is material, we will use an appropriate additional notice where required.

Privacy questions, rights requests, security concerns, and complaints can be sent to privacy@rolebolt.tech. For billing questions, use billing@rolebolt.tech. For a question about a specific job or application, contact the recruiting organisation shown on that opportunity as well.

Rolebolt's other public policies are available through the footer, including Terms & Conditions, Refund & Cancellation, and Payment & Billing.