Privacy notice

Version 2026-09-29.

# Privacy Notice

**Last updated:** 2026-09-29
**Who this is from:** Ji Hwan Moon, Edgewater, New Jersey, [email protected]

Rolevero is software you use yourself: you bring your resume and, when you want, a job
description, and it cleans up, reorders and checks your own writing. It does not send your
resume to an AI model. This notice says what happens to what you put in.

## What I collect

Only what you give the app, and only what the work needs:

- **Your account** — email address, name if you give one, and a hash of your password
  (never the password itself), and, if you joined with one, the invite code that opened
  the account.
- **Your resume and career history** — the files you import, the text taken from them, the
  versions you save, and the answers you type into Compose: employers, dates, titles,
  education, certifications, accomplishments.
- **Job descriptions you paste in**, and the tailored documents and reports produced from
  them.
- **Your application tracker** — the jobs you log, from the site or the browser extension,
  with their status, dates and notes.
- **Rate-limit counters** — how often an account or address has used a feature recently,
  so one person cannot exhaust the service for everybody else.
- **Ratings you give** — a 👍 or 👎 on a result, an optional comment, and what was rated
  (for example a company name or a job title, never your resume text). Linked to your
  account if you are signed in; exported and deleted with it.

## Cookies and browser storage

One cookie, `rolevero_session`, which is how the site knows you are signed in. It holds a random
value, not your identity, and deleting it signs you out. It is set only after you sign in.

The site also keeps some things **in your own browser**, not on my server: an unsaved
Compose draft, your language choice, and a job posting handed over from the extension. The
browser extension keeps its access token and a list of your resume names in Chrome's
storage on your computer. Clearing site data, or removing the extension, deletes these; deleting
your account cannot reach them.

**There is no analytics, advertising or tracking technology on this site**, first-party or
third-party. If that ever changes, this section changes first and you will see a banner.

## The iPhone app

The app uses the same account and keeps the same things on the server as the website. On
your phone it also keeps:

- **A sign-in token** in the iOS Keychain, so you stay signed in. Signing out deletes it
  here and on the server. The server records the session as "iPhone app", not by your
  phone's name.
- **Your Inbox:** job postings you share into the app. They stay on the phone until you
  act on one (log it, tailor to it). A posting you delete is not sent anywhere.
- **A copy of your applications and any company brief you opened**, so the app works
  without a signal, plus your language choice and an unsaved resume draft.
- **Follow-up reminders**, as notifications scheduled on the phone itself. There is no
  push service and no device token.

If you tap "read from the link", the server fetches that job posting's page to get its
text. The app has no advertising, analytics or crash-reporting SDK and does not track you
across other apps or websites. Deleting the app removes everything it kept on the phone;
deleting your account (Account → Delete your account, in the app or on the website)
removes the rest.

## What I do not ask for

- Your Social Security number, passport number, or any government ID number
- Your visa type, I-94, or any immigration document
- Your date of birth, marital status, family details, or a photograph

**One question is close to this line, and it is optional:** Compose asks whether you are
authorized to work in the US and whether you need sponsorship. If you need none, the
answer can appear as one line on your resume; if you do, it stays off the resume. Skip it
and nothing breaks.

**Korean résumés routinely include the items above.** The US resume the app produces has
no place for them, but **the text of a file you import is stored as you gave it** — so
please remove ID numbers and anything else you do not want kept before uploading.

## Who else sees it — subprocessors

These are the only companies that handle your data, what each one gets, and why. If this
list changes, this page is updated before the change takes effect.

| Who | What they receive | Why | Terms |
|---|---|---|---|
| **Cloudflare** | Every page and request passes through their network on its way to the server | Serving the site over HTTPS and blocking abuse | [Privacy](https://www.cloudflare.com/privacypolicy/) · [DPA](https://www.cloudflare.com/cloudflare-customer-dpa/) |
| **Resend** | Your email address and the text of account emails sent to you | Password resets and account notices | [Terms](https://resend.com/legal/privacy-policy) |
| **Anthropic, PBC** | Only when you press "Search with AI": the company name, website and job title you typed. Never your resume, name or email | AI web search for company research | [Privacy](https://www.anthropic.com/legal/privacy) |
| **Hetzner Online GmbH** | Everything, at rest — they run the machine the database sits on, in Nuremberg, Germany. Your data is stored there, not in the United States | Hosting | [Terms](https://www.hetzner.com/legal/privacy-policy) |

**Live job listings** on the Salary page come from The Muse. The server asks them for the
job categories and cities you picked; your resume, name and email are not sent.

**Company research** is read from a library built in advance from public sources — SEC
filings, Wikidata and USCIS records. Looking a company up does not send your details
anywhere.

**"Search with AI"**, when it is offered and only if you press it, sends the company name,
its website and the job title you typed to **Anthropic** (the maker of Claude), whose AI
searches the web for that company. Nothing about you goes with it — not your resume, not
your name, not your email. The brief that comes back holds public facts about the employer
only, so it is kept and shown to the next person who asks about the same company.

**If you use the "your own chatbot" option**, you copy a prompt containing your resume
into ChatGPT, Claude or another assistant yourself. That transfer is between you and that
service, under your agreement with them. The app only checks the answer you paste back.

**Nobody else.** No resume marketplaces, no employers, no recruiters, no data brokers,
no advertisers. **I do not sell or share your personal information**, for money or for
anything else, as those words are defined in the California Consumer Privacy Act or
anywhere else.

I will disclose information if a court or the law requires it, and I will tell you if I am
permitted to.

## How long I keep it

- **Resume text: 30 days** after you import or save it. After that the text of each
  version — the words, the formatted copy and the parsed structure — is erased by a
  scheduled job. The file name, the date and a fingerprint of the file remain, so your
  history still makes sense and the same file is recognised if you import it again.
- **Compose drafts, reports and your saved facts: until you delete them or your
  account.** The 30-day erasure covers imported and saved resume versions only.
- **Applications you logged: until you delete your account.** Removing one from the
  tracker hides it; its record stays in your account, and in your data export, until the
  account is deleted.
- **Company research:** a library lookup is not saved or recorded against your account. An
  AI search is counted against your allowance, and its result (public employer facts, with
  no link to you) is kept for 14 days and shown to anyone who asks about that company.
- **Your account: until you delete it.** Deleting it erases your resumes, versions,
  drafts, reports, applications, research, extension tokens and sessions at once. What
  remains is an account number, the date the account was opened, any invite code that
  opened it, and which version of the terms you agreed to and when — the record that you
  consented, with no name or email attached.
- **Backups:** the database is copied every hour, and each copy is deleted within 14
  days, so anything you delete is gone from every backup within 14 days. During early
  access the copies are kept on the same server; if an off-server copy is added, this
  section will say where and for how long before it starts.

This is enforced by scheduled jobs, not by memory.

## Your choices

The first three are buttons on your account page, not an email you have to send:

- **Download everything I hold about you** — one file, one click.
- **Delete your account and everything in it** — immediate, no reason needed, no retention
  pitch. You type your email address to confirm, so it cannot happen by accident.
- **Revoke the browser extension** — each token can be revoked on its own.
- **Fix something wrong** — tell me and I will correct it.
- **Forgotten password** — ask for a reset link on the sign-in page; it is emailed to the
  address on your account.

You have these regardless of where you live. **California residents:** these are the CCPA
rights to know, delete, correct and opt out of sale/sharing; I do not sell or share, and I
will not treat you differently for exercising any of them.

**If you are in the EEA or the UK:** Rolevero is **not offered in the European
Economic Area or the United Kingdom**, and accounts cannot be created from there. This is
deliberate. Meeting the GDPR properly — a lawful-basis analysis, a representative in the
Union, data-processing agreements with every subprocessor, 72-hour breach notification —
is a standing obligation that a one-person service cannot honestly promise, and an unmet
promise would be worse for you than a clear refusal. If that changes, this section changes
with it.

## Security

- Passwords are stored as scrypt hashes, never in a readable form.
- Sessions are stored server-side and can be revoked; signing out actually revokes.
- The site is served over HTTPS only, with HSTS. The server accepts no web traffic except
  through Cloudflare.
- The database is backed up hourly.
- The extension token is stored as a hash and you can revoke it from your account page.

No system is perfect. If your information is ever exposed, I will tell you promptly and
directly, as New Jersey law requires (N.J.S.A. 56:8-163).

## Children

This service is not for anyone under 18. Creating an account requires you to confirm you
are 18 or older, and I do not knowingly collect information from children.

## Changes

If this notice changes in a way that matters, I will email you at the address on your
account before it takes effect. Older versions are kept and dated.

## Questions

[email protected]. I answer these myself.