Privacy Policy
At RoleWin AI, your career data is sacred. We believe you should never have to compromise your personal privacy to accelerate your job search.
We never sell your data, and we never feed your master resume, employment dates, or achievements into public AI training corpuses. Your Profile Vault belongs solely to you.
1. Information We Collect
We collect only information essential to providing resume tailoring and recruiter discovery services:
- Account Information: Name, email address, and profile photo provided during Google OAuth authentication.
- Profile Vault Data: Work experience, job titles, companies, dates, education, skills, and portfolio links you explicitly enter or import from your master resume.
- Target Job Data: Job description text or URLs you submit to calculate ATS match scores and customize resumes.
- Payment Information: Subscription transaction IDs and billing records processed directly through Razorpay (we never store credit card numbers on our servers).
2. How We Use Your Information
Your information is used strictly to execute requested features:
- Aligning quantifiable bullet points from your Profile Vault with target job requirements.
- Compiling single-column ATS-compliant PDF resumes and drafting contextual cover letters.
- Inferring target hiring personas and finding verified public LinkedIn profiles for recruiter outreach.
- Tracking application stages and calculating business-day follow-up reminders.
3. Data Security & Storage Architecture
We implement enterprise-grade security controls:
- Row-Level Security (RLS): Every database row in Supabase is guarded by strict PostgreSQL RLS policies ensuring only your authenticated session can read or write your records.
- Encryption at Rest & Transit: End-to-end TLS 1.3 encryption in transit and AES-256 encryption at rest.
- Isolated Ephemeral Processing: PDF parsing and AI tailoring occur in memory within secure serverless execution boundaries.
4. Data Retention & Your Deletion Rights
Under the Indian Digital Personal Data Protection Act (DPDP Act 2023) and GDPR principles, you have complete sovereignty over your data:
- Access & Export: You can export your Profile Vault and tailored resumes at any time in standard JSON or PDF formats.
- Atomic Account Deletion: If you delete your account, our database immediately triggers a cascade deletion permanently erasing your profile, resumes, applications, and reach-out history.
5. Cookies & Third-Party Services
We use strictly necessary cookies to maintain secure authenticated sessions. We integrate trusted third-party providers bound by data processing agreements:
- Supabase: Hosted PostgreSQL database and authentication infrastructure.
- Razorpay: PCI-DSS certified payment gateway for subscription billing.
- Google Gemini / Jina Reader: AI API providers adhering to strict non-retention enterprise terms.
6. Contact Our Data Protection Officer
For privacy-related inquiries, data requests, or compliance questions: