Privacy Policy

This Privacy Policy describes how RightRole collects, uses, and shares information when you use the service. RightRole is maintained by the RightRole team and is currently a commercial SaaS in active development.

1. Information We Collect

Account and profile data

Name, email address, authentication identifiers, and optional profile details you provide.

Job descriptions

Text, links, and metadata for roles you analyze, score, or pursue.

Resumes and CVs

Files and parsed content you upload for scoring, tailoring, or artifact generation.

Generated artifacts

Cover letters, referral messages, champion briefs, and other AI outputs produced through the service.

Pursuit and champion data

Companies, pursuits, stages, notes, activity, champion contacts you choose to add, and information about outreach you send through the service.

Usage and analytics events

Pages viewed, actions taken, performance metrics, error reports, request identifiers, and other diagnostic data used to operate and improve the service. When product analytics is configured, RightRole sends a small set of explicit events (such as signup_completed, pursuit_saved, artifact_generated, champion_invite_created) to PostHog. Properties are limited to a strict allowlist (user id, pursuit id, company id, route, source, artifact type, bucketed role-fit score, tier, payment pack key, invite id). The contents of your CV, job descriptions, prompts, AI completions, cover letters, champion/referral messages, and email bodies are never sent to PostHog. Raw role-fit scores are bucketed to low / medium / high before transmission. Autocapture and session recording are disabled. When the analytics key is not configured, the analytics wrapper is a no-op.

Support and billing data

Communications you send to support, and, when paid plans are enabled, billing information processed through our payment provider. RightRole does not store full payment card numbers.

2. How We Use Information

• Provide, secure, and operate the service.
• Generate AI outputs you request.
• Improve product quality, reliability, and safety.
• Communicate updates, security notices, and support replies.
• Comply with legal obligations and enforce our Terms.

3. AI Provider Processing

To generate scores, tailoring suggestions, cover letters, and other artifacts, RightRole sends relevant content (such as the job description, selected resume content, and prompts you submit) to third-party AI providers acting as our processors. We aim to send only the data needed to complete the request and do not knowingly send sensitive identifiers that are not necessary for the task.

4. Data Sharing

• Service providers: hosting, database, AI inference, email delivery, error monitoring, and similar infrastructure used to run RightRole.
• Champions you contact: when you send outreach or share a champion link, the relevant content is visible to the recipient you choose.
• Legal requests: when required by law or to protect rights, safety, or the integrity of the service.
• Business transfers: in connection with a merger, acquisition, or sale of assets, with notice where required.

We do not sell your personal information.

5. Retention

We keep account and pursuit data while your account is active and for a reasonable period afterward to support recovery, fraud prevention, and legal obligations. You can delete individual pursuits, companies, and artifacts inside the app.

6. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing.

• Export: sign in and go to Settings → Data & Account → Download my data to download a JSON file containing your profile, pursuits, champions, generated artifacts, and activity.
• Deletion: sign in and go to Settings → Data & Account → Request account deletion. Deletion requests are reviewed and processed manually by our team; data is not removed immediately.
• Other requests: contact privacy@rightrole.ai and we will respond within a reasonable time.

7. Security

RightRole uses industry-standard practices including role-based access controls, row-level security on user data, encrypted transport, structured logging with redaction of sensitive content, and continuous security scanning. No system is perfectly secure; we work to detect and respond to issues promptly. See our Trust page for current security practices.

8. International Transfers

RightRole and our service providers may process data in countries other than your own. Where required, we use appropriate safeguards for cross-border transfers.

9. Children's Privacy

RightRole is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

10. Changes

We may update this policy. Material changes will be communicated through the service or by email.

11. Contact

Privacy questions: privacy@rightrole.ai.

This policy is a startup-stage template and is not legal advice.