Privacy Policy

Effective date: July 11, 2026

This Privacy Policy explains how [COMPANY LEGAL NAME], [COMPANY ADDRESS] ("RoleFinder", "we", "us"), operator of rolefinder.co and app.rolefinder.co (the "Service"), collects, uses and shares personal data, and the rights you have over it. For questions or to exercise your rights, contact hello@rolefinder.co.

1. Data we collect

Data you give us:

• Account data — email address, password (stored hashed), and any profile settings such as saved searches and alert preferences.
• Payment data — when you purchase a plan, payment is handled by our payment processor. We receive confirmation of payment, plan type and billing country; we never receive or store your full card number.
• Communications — messages you send us (support emails, feedback).

Data collected automatically:

• Usage and analytics data — we use PrettyInsights, a web analytics service, to understand how the Service is used (pages viewed, referrer, approximate location derived from IP, browser and device type). Analytics data is used in aggregate and not to build individual profiles.
• Technical logs — IP address, timestamps and request data collected by our hosting infrastructure for security and reliability purposes.
• Cookies and similar technologies — see Section 7.

What we do not collect: we do not ask for or store CVs, work histories or application materials, and we are not involved in any application you submit to an employer. Anything you provide on a company's website after following a link from the Service is collected by that company under its own privacy policy, not ours.

2. A note on job listing data

The job listings shown on the Service are collected by automated scanning of publicly available career pages on company websites. This is business information published by companies themselves (role titles, locations, descriptions). Where a public listing incidentally contains personal data (for example a named contact person published by the company), we display it only as published at the source and remove it when the source does. Individuals who wish such data removed can contact us at the address above.

3. How we use your data and legal bases (GDPR)

• Providing the Service (account management, search, unlocking paid features, job alerts) — legal basis: performance of a contract.
• Billing and accounting — legal bases: performance of a contract and legal obligation.
• Service emails (receipts, account and security notices, alert emails you configure) — legal basis: performance of a contract.
• Analytics and Service improvement — legal basis: our legitimate interest in understanding and improving the Service.
• Security, fraud prevention and abuse detection — legal basis: legitimate interest.
• Marketing emails (product news) — only with your consent, which you can withdraw at any time via the unsubscribe link.
• Legal compliance and defense of claims — legal bases: legal obligation and legitimate interest.

We do not sell personal data, and we do not use it for automated decision-making that produces legal or similarly significant effects.

4. Who we share data with

We share personal data only with service providers who process it on our behalf under data processing agreements:

• Hosting and infrastructure providers that serve the website and application;
• Payment processors for subscription billing;
• Analytics (PrettyInsights) as described above;
• Email delivery providers for transactional and alert emails.

We may also disclose data where required by law, to protect our rights, or as part of a business transfer (merger, acquisition, asset sale) — in which case this Policy continues to apply to the transferred data.

5. International transfers

Some providers may process data outside the EEA/UK. Where they do, transfers are protected by appropriate safeguards such as adequacy decisions or the European Commission's Standard Contractual Clauses.

6. Retention

• Account data — kept while your account is active and deleted or anonymized within 90 days of account deletion, except data we must keep longer.
• Billing records — kept as required by tax and accounting law (typically up to 10 years depending on jurisdiction).
• Analytics data — retained in aggregate form.
• Support correspondence — kept up to 24 months after resolution.
• Security logs — typically kept up to 12 months.

7. Cookies and local storage

We use a small number of cookies and similar technologies:

• Strictly necessary — session/authentication cookies on app.rolefinder.co so you stay logged in, and payment-related cookies set by our payment processor during checkout.
• Analytics — identifiers used by PrettyInsights to measure visits.

You can block or delete cookies in your browser settings; strictly necessary cookies are required for logged-in functionality. Where consent is legally required for non-essential cookies, we will request it.

8. Your rights

If you are in the EEA, UK or a jurisdiction with similar laws, you have the right to:

• Access the personal data we hold about you and receive a copy;
• Rectify inaccurate or incomplete data;
• Erase your data ("right to be forgotten"), subject to legal retention duties;
• Restrict or object to processing based on legitimate interests;
• Data portability — receive data you provided in a machine-readable format;
• Withdraw consent at any time where processing is based on consent;
• Complain to your local data protection authority.

To exercise any right, email hello@rolefinder.co. We respond within one month. California residents have analogous rights under the CCPA/CPRA, including the right to know, delete and opt out of "sale" or "sharing" — we do not sell or share personal data as defined by that law.

9. Security

We apply technical and organizational measures appropriate to the risk, including encryption in transit (HTTPS), hashed passwords, access controls and reputable infrastructure providers. No system is perfectly secure; if a breach affecting your data occurs, we will notify you and the competent authority as required by law.

10. Children

The Service is not directed to children under 16, and we do not knowingly collect their data. If you believe a child has provided us personal data, contact us and we will delete it.

11. Changes to this Policy

We may update this Policy from time to time. Material changes will be announced on the Service or by email, and the effective date above will be updated. The current version always applies.

12. Contact

[COMPANY LEGAL NAME]
[COMPANY ADDRESS]
hello@rolefinder.co