Privacy Policy

Overview

Rolespan analyses how exposed your professional role is to current AI capability, and recommends the skills that close your gaps. To do that, we have to collect and process some information about you — most importantly, your CV.

This policy explains what we collect, why we collect it, how we store it, who we share it with, and what you can do about it. We've written it in plain English. Where a clause has real legal weight, we say so clearly. Where we're making a commitment, it's in our own words.

Information we collect

We collect three categories of information.

What you give us directly

• Your name and email address when you create an account.
• Your CV or résumé when you request an analysis.
• Optional profile details — current role, years of experience, location — that improve the accuracy of your analysis.
• Payment information when you purchase a paid plan. This is processed by Stripe; we never see your card number.

What we collect automatically

• Basic error and diagnostic logs when something goes wrong, so we can fix it.
• Device and browser information needed to render the site correctly.

What we receive from third parties

• Payment confirmation events from Stripe when you complete or refund a purchase.
• Email delivery events from our transactional email provider (delivered, opened, bounced).

How we use it

We use the information above for the following purposes, and no others without your consent:

• To generate your analysis. Your CV is processed by our analysis system to produce your report.
• To deliver the service. Logging you in, sending receipts, showing your dashboard, and so on.
• To send transactional email. Receipts, password resets, account confirmations.
• To send the newsletter — only if you opt in. You can unsubscribe at any time.
• To comply with legal obligations when required (tax records, lawful requests).

We do not use your information for behavioural advertising, ad targeting, or sale to third parties. We do not profile you for purposes outside the analysis itself.

Your CV, specifically

Because uploading a CV is central to what Rolespan does — and because the contents of a CV are sensitive — we want to be explicit about how it's handled.

In practice this means:

• Your CV is associated with your account, not pooled into a dataset.
• When the analysis pipeline runs, it accesses your CV in-memory; the inputs are not retained beyond the run.
• Aggregated, fully anonymised statistics (e.g. “the median user in marketing roles has 3 skill gaps”) may be derived. Your individual CV is not.
• Deleting your account removes your CV from our primary store within 24 hours, and from backups within 30 days.

Storage and security

Your data is stored on AWS infrastructure in the Asia Pacific (Singapore) region. Access is restricted to authorised Rolespan personnel with a need to access it for operational reasons (debugging an issue you reported, processing a refund, etc.).

We use industry-standard encryption in transit (HTTPS) and at rest. We log access to sensitive operations, and we patch security updates promptly. No system is perfectly secure, and we won't pretend otherwise — but we take this seriously and we will tell you if your data is involved in a breach.

Who we share with

We share information with a small number of service providers strictly to operate the product:

• Stripe — payment processing. Stripe sees your payment details; we don't.
• AWS — hosting and storage. AWS sees your data at rest in encrypted form.
• AWS SES — transactional email and newsletter delivery.

We do not sell your personal information. We do not share your CV, your analysis, or any identifiable data with anyone outside the providers above without your explicit consent — except where required by law.

Your rights

Depending on where you live, you may have legal rights under the GDPR (EU/UK), PDPA (Singapore), CCPA (California), or other applicable law. Wherever you are, we extend the following rights to all users:

• Access. Request a copy of the personal information we hold about you.
• Correction. Ask us to fix anything that's wrong.
• Deletion. Delete your account, which deletes your CV and analysis history.
• Portability. Export your analysis as a PDF at any time.
• Withdrawal. Withdraw consent to marketing communications (unsubscribe link in every email).
• Complaint. Lodge a complaint with your local data protection authority.

To exercise any of these rights, email support@rolespan.com. We respond within 30 days, usually faster.

Cookies

We use a single strictly-necessary cookie to keep you signed in — no analytics, preference, or marketing cookies. The detail is in our Cookies Policy.

Children

Rolespan is intended for adults (18+) making professional decisions about their careers. We do not knowingly collect personal information from children. If you believe a child has provided information to us, please email support@rolespan.com and we will delete it promptly.

Changes to this policy

We update this policy when our practices change. Material changes will be announced via email or a prominent notice on the site before they take effect. Minor edits (typos, clarifications) may be made without notice. The “Last updated” date at the top of this page always reflects the current version.

Contact us

Questions about privacy, your data, or anything in this policy? Email support@rolespan.com.