Privacy Policy

1. About This Privacy Policy

This Privacy Policy explains how ROLELY LIMITED ("Rolely", "we", "us", or "our") collects and uses personal information when you access or use Rolely's websites, applications, browser extension, AI-powered tools, automation features, and other services that link to this Privacy Policy (collectively, the "Services").

ROLELY LIMITED is a private limited company incorporated in England and Wales under company number 17410059.

For the purposes of applicable UK data protection law, ROLELY LIMITED is the controller of personal information described in this Privacy Policy unless we state otherwise.

This Privacy Policy should be read together with any additional privacy information or notices we provide when collecting personal information for a particular feature or purpose.

2. Information We Collect

The information we collect depends on how you use Rolely.

2.1 Account and profile information

We may collect:

• Your name.
• Email address.
• Location or country information you provide.
• Language and timezone preferences.
• Profile settings and preferences.
• Authentication and account identifiers.
• Session and security information used to protect your account.
• Other information you choose to add to your Rolely profile.

2.2 Career and application information

When you use Rolely's career tools, we may collect and process:

• Resume and CV content.
• Work history.
• Education history.
• Skills and qualifications.
• Projects and professional achievements.
• Professional profile links.
• Imported profile information.
• Job descriptions and job links.
• Saved jobs.
• Job Match information and analyses.
• Application records and status information.
• Cover letters and other application materials.
• Interview preparation materials.
• Interview responses or practice information.
• Career-related preferences and instructions.

Some career information you provide may reveal personal characteristics or other sensitive information. You should only provide information that is necessary for the feature you are using.

2.3 AI, chat, and automation information

When you use AI-powered features, AI Agents, Agent Rules, chat, or automated workflows, we may process:

• Prompts and messages.
• Instructions.
• Uploaded or selected documents.
• Resume and job context.
• Application context.
• Interview context.
• Agent Rules.
• Approvals and confirmations.
• Workflow preferences.
• Information required to perform an action you request.
• Generated responses and workflow results.

2.4 Browser Extension information

If you install or use the Rolely Browser Extension, we may process information from supported pages when needed to provide the feature you request.

This may include:

• Job listing information.
• Application-form fields.
• Information needed for autofill.
• Information required for a user-authorised AI Agent or application workflow.
• Extension settings and preferences.
• Technical information needed to operate or troubleshoot the extension.

Rolely is not designed to collect or maintain a general history of unrelated websites you browse.

2.5 Credits, purchases, and billing information

We may collect:

• Your credit balance.
• Credit transaction history.
• Credit purchase records.
• Auto Top-Up settings.
• Billing status.
• Currency and purchase information.
• Payment transaction identifiers.
• Saved-payment-method status supplied by our payment provider.
• Information needed to investigate payment or billing issues.

Payment card information is processed by payment providers such as Stripe.

We do not store full payment card numbers or card security codes on Rolely servers.

2.6 Support and communications

When you contact us or communicate with Rolely, we may collect:

• Your name and email address.
• Contact-form messages.
• Support requests.
• Correspondence with us.
• Account or transaction information relevant to your request.
• Administrative and transactional communication records.

2.7 Technical and usage information

We may automatically collect certain technical and usage information when you use the Services, including:

• IP address.
• Device type.
• Browser type and version.
• Operating system.
• Pages and features accessed.
• Interaction and usage events.
• Error and diagnostic information.
• Referral or signup source.
• Locale and timezone.
• Country or approximate location signals.
• Security-related events.
• Cookie and local-storage identifiers where applicable.

We may use analytics technologies to understand how users interact with Rolely and to improve reliability and product quality.

3. Information We Receive From Other Sources

In some circumstances, we may receive personal information from third parties or external services.

These sources may include:

• Authentication providers such as Google or LinkedIn when you choose to use those services to sign in or connect information.
• Payment providers such as Stripe.
• Job-data providers.
• Professional-profile or import services you choose to connect.
• Third-party websites that you instruct the Browser Extension or an authorised workflow to interact with.
• Service providers supporting security, analytics, communications, hosting, AI, or other Rolely functionality.

The information received depends on the service involved, your settings, and the permissions you grant.

4. How We Use Personal Information

We may use personal information to:

• Create and manage your account.
• Authenticate you and maintain secure sessions.
• Provide Rolely's job-search and career tools.
• Create, edit, analyse, store, share, and export resumes and application materials.
• Provide Cover Letter Generator, Job Match, Interview Prep, and related features.
• Maintain Application Tracker and job-search workflow information.
• Provide AI chat and AI-assisted career features.
• Operate AI Agents, Agent Rules, and automated or assisted workflows you request.
• Operate the Browser Extension.
• Process credit balances and credit usage.
• Process purchases and Auto Top-Up.
• Send transactional and administrative messages.
• Respond to support and privacy requests.
• Prevent fraud, abuse, security incidents, and unauthorised access.
• Diagnose technical problems.
• Maintain and improve the reliability, safety, usability, and performance of the Services.
• Analyse how features are used.
• Localise the Services.
• Maintain accounting, tax, and transaction records.
• Comply with legal and regulatory requirements.
• Establish, exercise, or defend legal rights.

We do not use personal information for purposes that are incompatible with the purpose for which it was collected unless permitted by applicable law.

5. Our Lawful Bases for Processing

Under UK data protection law, we must have a lawful basis for processing personal information.

Depending on the purpose and circumstances, we may rely on the following lawful bases.

5.1 Contract

We may process personal information where it is necessary to provide the Services you request or to take steps at your request before entering into a contract.

This may include processing needed to:

• Create and maintain your account.
• Provide career and job-search features.
• Process documents and workflows you request.
• Provide AI and automation features you choose to use.
• Process purchases and credit-related functionality.
• Respond to requests relating to the Services.

5.2 Legitimate interests

We may process personal information where necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights and interests.

These interests may include:

• Securing the Services.
• Preventing fraud and misuse.
• Maintaining service reliability.
• Troubleshooting problems.
• Improving Rolely.
• Understanding product usage.
• Protecting our users, business, systems, and legal rights.

Where we rely on legitimate interests, we consider whether the processing is necessary and whether your rights and interests outweigh those interests.

5.3 Legal obligation

We may process personal information where necessary to comply with applicable legal obligations.

This may include obligations relating to:

• Accounting.
• Tax.
• Fraud prevention.
• Lawful regulatory requests.
• Legal claims.
• Other requirements imposed by applicable law.

5.4 Consent

Where required, we may rely on your consent for specific processing.

This may include certain optional cookies, analytics, communications, permissions, or other processing where consent is the appropriate lawful basis.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

6. AI and Automated Processing

Rolely uses artificial intelligence and automated systems to provide certain features.

To operate these features, we may send relevant information to AI providers or managed AI services.

Depending on the feature, this information may include:

• Resume or CV content.
• Job descriptions.
• Cover letters.
• Application information.
• Interview materials.
• Chat messages.
• Prompts and instructions.
• Agent workflow context.
• Other information required to perform the task you request.

We aim to limit information provided to AI systems to information reasonably necessary for the relevant feature.

Generated content and workflow results may be stored in your Rolely account so that you can review, edit, export, or reuse them.

Rolely does not use your personal information to train or fine-tune Rolely-owned general-purpose AI models.

Third-party AI providers may process information on Rolely's behalf subject to our arrangements with them and their applicable contractual obligations.

7. Automated Decisions and Profiling

Some Rolely features may use automated analysis to generate scores, recommendations, suggestions, classifications, or other outputs.

For example, Job Match or AI-assisted workflows may analyse information you provide and generate recommendations or assessments.

These features are designed to assist users rather than make legally binding employment decisions on behalf of employers.

Rolely does not itself decide whether an employer hires, interviews, rejects, or otherwise selects you.

Where applicable law gives you rights in relation to solely automated decisions that produce legal or similarly significant effects, those rights will apply.

8. Browser Extension and Device Permissions

If you use the Rolely Browser Extension, the extension may request permissions required for the features you choose to use.

Depending on the feature, the extension may:

• Read information from supported job or application pages.
• Populate application fields.
• Capture job information you choose to save.
• Provide information to an AI-assisted workflow.
• Perform actions that you expressly approve or authorise.

Rolely processes information accessed through the extension only as reasonably necessary to provide, secure, and support the relevant functionality.

Features involving microphone access will request device or browser permission where required.

Rolely does not intend to collect general browsing-history information unrelated to the functionality you use.

9. How We Share Personal Information

We may share personal information where reasonably necessary to operate Rolely.

9.1 Service providers

We may use service providers for functions such as:

• Cloud hosting and storage.
• Artificial intelligence and managed AI services.
• Interview, voice, or video functionality.
• Payment processing.
• Email delivery.
• Product analytics.
• Authentication.
• Job data.
• Browser automation.
• Security and monitoring.
• Customer support.
• Communications and infrastructure.

These providers may process personal information on our behalf where necessary to provide their services to us.

9.2 Payment providers

Payment information may be shared with payment providers such as Stripe to process transactions, manage payment methods, prevent fraud, and provide related payment services.

9.3 Authentication and connected services

If you choose to use a third-party authentication or connected service, such as Google or LinkedIn, information may be exchanged with that service according to the permissions you grant and the applicable service terms.

9.4 Legal, safety, and compliance

We may disclose personal information where reasonably necessary to:

• Comply with applicable law or a lawful request.
• Protect the rights, property, or safety of Rolely, our users, or others.
• Investigate fraud, abuse, or security incidents.
• Establish, exercise, or defend legal claims.
• Enforce applicable agreements.

9.5 Business transfers

If Rolely is involved in a merger, acquisition, financing, corporate reorganisation, sale of assets, or similar transaction, personal information may be disclosed or transferred as part of that transaction, subject to applicable legal requirements.

We do not sell personal information in the ordinary meaning of selling personal information for money.

10. Cookies, Analytics, and Local Storage

Rolely may use cookies, local storage, and similar technologies to operate and improve the Services.

These technologies may include:

• Authentication and session cookies.
• Security cookies.
• Locale or language-preference cookies.
• Local storage used for drafts, preferences, and product state.
• Analytics cookies, scripts, or similar technologies where enabled.

We may use analytics providers such as Google Analytics and Umami where configured.

Where applicable law requires consent before using a non-essential cookie or similar technology, we will request consent before using it.

You may also control cookies through your browser settings.

Blocking or deleting certain cookies or storage may affect authentication, localisation, saved preferences, analytics, or other functionality.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to provide the Services and meet legal, accounting, security, and operational requirements.

Retention periods vary depending on the type of information and the reason we hold it.

For example:

• Account and profile information may generally be retained while your account remains active.
• Resume, cover letter, job, application, interview, and workflow information may generally be retained while stored in your account.
• AI and Agent workflow results may be retained so that you can access or reuse them.
• Credit and transaction records may be retained for accounting, tax, fraud-prevention, and legal purposes.
• Support correspondence may be retained for an appropriate period to manage requests and maintain records.
• Security and diagnostic information may be retained for limited periods appropriate to security and operational needs.
• Analytics data may be retained according to the configuration of the relevant analytics service and our operational requirements.

When information is no longer reasonably required, we may delete or anonymise it, subject to legal obligations and legitimate retention needs.

If you request account deletion, some information may need to be retained where required or permitted by law, including records relating to transactions, fraud prevention, disputes, security, or legal claims.

12. Data Security

We use technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure.

Measures may include:

• Encryption in transit.
• Appropriate storage safeguards.
• Authentication controls.
• Session validation.
• Access controls.
• Security monitoring.
• Infrastructure and application-security practices.
• Measures designed to prevent unauthorised access to production systems.

No internet transmission, storage system, or security measure is completely secure.

You are also responsible for protecting your Rolely account credentials and for notifying us if you believe your account has been compromised.

13. International Transfers

ROLELY LIMITED is established in the United Kingdom, but some of our service providers and technical infrastructure may process personal information in other countries, including the United States.

Where personal information is transferred outside the United Kingdom and UK data protection law requires safeguards for that transfer, we use an appropriate transfer mechanism.

Depending on the destination and provider, this may include:

• UK adequacy regulations.
• The UK Extension to the EU-US Data Privacy Framework where applicable.
• The UK International Data Transfer Agreement.
• The UK Addendum to the EU Standard Contractual Clauses.
• Another lawful transfer mechanism permitted under applicable data protection law.

Where required, we also consider whether additional measures are necessary to protect transferred information.

14. Your Data Protection Rights

Depending on the circumstances and applicable law, you may have rights relating to your personal information.

These may include the right to:

• Be informed about how your personal information is used.
• Request access to your personal information.
• Request correction of inaccurate or incomplete personal information.
• Request deletion of personal information in certain circumstances.
• Request restriction of processing in certain circumstances.
• Object to certain processing.
• Receive certain personal information in a portable format where the right to data portability applies.
• Withdraw consent where processing is based on consent.
• Exercise applicable rights relating to automated decision-making.

These rights are not absolute and may apply differently depending on the lawful basis and circumstances of the processing.

We may need to verify your identity before completing a request.

You can submit a privacy request through our contact page.

We will respond to valid requests in accordance with applicable data protection law.

15. Complaints

If you have a concern about how Rolely handles your personal information, please contact us first so that we can try to resolve the issue.

You also have the right to make a complaint to the UK Information Commissioner's Office (ICO).

You can find information about the ICO and how to make a complaint through the ICO's official website.

If you live outside the United Kingdom, you may also have the right to contact the data protection authority responsible for your location.

16. Children's Privacy

Rolely is not intended for children under 16.

You must not create or use a Rolely account if you are under 16.

We do not knowingly seek to collect personal information from children under 16.

If we learn that we have collected personal information from a child under 16 in circumstances where we should not have done so, we will take appropriate steps to delete or otherwise address the information.

If you believe a child has provided personal information to Rolely, please contact us.

17. Third-Party Websites and Services

Rolely may contain links to, connect with, or interact with third-party websites and services.

Those third parties operate independently and may collect or process information under their own privacy policies.

This Privacy Policy does not govern the privacy practices of third parties acting as independent controllers.

You should review the privacy information provided by a third-party service before providing personal information directly to that service.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

• Rolely's products and features.
• Our processing activities.
• Our service providers.
• Applicable laws or regulatory requirements.
• Security, technical, or operational practices.

The Privacy Policy will display the date on which it was last updated.

If we make a material change to how we use personal information, we will take reasonable steps to bring the change to your attention where required by applicable law.

Text Message Privacy

If you choose a Rolely text message program, we collect the U.S. mobile number you provide, the programs you select, consent and withdrawal timestamps, the disclosure version shown to you, limited request metadata used to document consent, and inbound keywords such as STOP or HELP. We may also process delivery and failure information needed to operate the service.

We use this information to send only the text programs you selected, operate HELP and STOP requests, prevent messages after an opt-out, secure the service, troubleshoot delivery, and maintain consent and compliance records.

We do not sell, rent, or share mobile numbers or text-message opt-in and consent data with third parties for their own marketing. We may provide this information to communications and infrastructure providers only as needed to deliver Rolely messages and operate the program on our behalf.

Text consent is optional and is not a condition of purchase. You can withdraw consent at any time in Rolely Settings or by replying STOP. We retain consent, re-consent, withdrawal, STOP, suppression, and related audit evidence for the active messaging relationship and for five years after the most recent relevant consent or withdrawal event, or termination of that relationship, whichever is later. After that period, we delete or appropriately anonymise data that is no longer required, while keeping suppression controls operational for as long as needed to prevent unintended messaging.