Privacy notice

Who we are

RoleSort AI (https://rolesort.app/) is a trading name of Finopt Solutions Limited, registered in England and Wales, company number 15278150, registered office 71–75 Shelton Street, London WC2H 9JQ, United Kingdom. Finopt Solutions Limited is the data controller for RoleSort AI. Contact us about privacy at hello@rolesort.app.

What we process

• Account details: the email address you give Stripe at checkout, used to create your account and send you sign-in links.
• Payment details: payments are taken by Stripe. We receive your Stripe customer and subscription references and the subscription status. We never see or store your full card number.
• Your CV: used once to build your Career Profile. The file and the text taken from it are processed in memory and are not stored by us.
• Your Career Profile: the career details you check, edit and confirm, including your name and contact details.
• Vacancies: job descriptions you paste and vacancy links you supply. When you supply a link we fetch that public page to read the advert.
• Applications: generated CVs and cover letters, their status, and any feedback you give us about them.
• Usage records: a record of each AI request (its type, the number of words processed, cost estimate and whether it succeeded, but never its content), used for security, abuse prevention and cost control.
• Product analytics: first-party events such as "checkout started" or "documents downloaded", with device type and time zone, linked to your account. We do not use analytics cookies or third-party trackers, and we never include CV contents, job descriptions or documents in analytics.

Please do not include sensitive information such as health, religion, ethnicity or political opinions in your CV or Career Profile unless you want it to appear in your applications.

Why we use it and our lawful bases

• To provide RoleSort to you (building your profile, analysing vacancies and writing your applications): performance of our contract with you.
• To take payments and keep accounting records: performance of our contract and our legal obligations.
• To keep the service secure, prevent abuse, control costs and understand how the product is used: our legitimate interests in running a safe and sustainable service. You can object to this use by contacting us.

Match scores are an indication to help you decide; they do not make decisions about you and you choose what to do with every result.

AI processing

Extraction, matching and document writing are performed by AI models that we call from our servers. Your CV text, your Career Profile and the vacancy text are sent to OpenAI (our main provider) and, if it is unavailable, to Anthropic. Under their business API terms these providers do not use this content to train their models, and they may keep it for a limited period (generally up to 30 days) to detect misuse before deleting it.

Who we share it with

We use these service providers, who process data on our instructions:

• Supabase: database, sign-in and sign-in emails.
• Lovable and Cloudflare: website hosting.
• Stripe: payments and the billing portal. Stripe also keeps payment records as a controller in its own right.
• OpenAI and Anthropic: AI processing, as described above.
• Google Fonts: our web fonts are loaded from Google, which receives your IP address when the font files are requested.

We do not sell your data or share it for advertising.

International transfers

Some of these providers process data in the United States or other countries outside the UK. Where they do, the transfer is protected by UK adequacy regulations or by the UK International Data Transfer Agreement or Addendum in our agreements with them.

How long we keep it

• Your account, Career Profile, vacancies and applications: until you delete them or your account.
• Uploaded CV files and the text taken from them: not kept.
• When you delete your account we delete your data from the live service straight away. Copies in our database provider's backups are overwritten as the backups expire.
• Analytics events are de-identified when your account is deleted.
• Payment and invoice records are kept by Stripe and in our accounts for as long as the law requires (normally six years).

Cookies and similar technologies

We store your sign-in session in your browser so you stay signed in. This is strictly necessary for the service. We do not use advertising or analytics cookies.

Storage and security

Every record is stored against your account and protected by row-level security so that no other customer can read your Career Profile, vacancies or documents. Data is encrypted in transit.

Your rights

You have the right to:

• get a copy of your data (use Download my data in My account, or ask us);
• correct it (edit your Career Profile at any time);
• have it deleted (use Delete account and data in My account);
• restrict or object to how we use it, and take it to another service.

Email hello@rolesort.app to exercise any right. We reply within one month. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Changes

We will update this notice when our processing changes and show the date at the top.