Data Protection & GDPR Rights

1. About This Page

This page explains how RoleReady complies with the General Data Protection Regulation (GDPR) and the UK GDPR, and covers similar rights under other laws (such as the CCPA/CPRA for California residents). It's an addendum to our Privacy Policy, which describes in plain language what we collect and why. Where this page and the Privacy Policy cover the same topic, read them together.

2. Who Is Responsible

RoleReady is the data controller responsible for your personal data when you use the Service. We operate roleready.me and app.roleready.me from the United States. You can reach us at privacy@roleready.me or through our contact page, and we will provide a postal address on request.

We don't have a formal Data Protection Officer, but we handle all data-protection requests through the contact details above. Email is the fastest way to reach us.

3. Lawful Bases for Processing

We rely on the following lawful bases to process your personal data:

• Performance of a contract: processing needed to set up and run your account and deliver the features you signed up for (for example, storing your jobs and resumes, and running the AI features you request).
• Legal obligation: where we have to keep records to meet legal, tax, or regulatory requirements.
• Legitimate interests: to operate, secure, and improve the Service, prevent fraud and abuse, fix errors, and send service-related communications. We balance these interests against your rights and only rely on them where they don't override your interests.
• Consent: for optional things that aren't necessary to run your account, such as optional marketing emails. You can withdraw consent at any time without losing access to the Service.

4. Your Rights

Under the GDPR and UK GDPR you have the right to:

• Be informed: know what we collect and why (see our Privacy Policy and this page).
• Access: request a copy of the personal data we hold about you.
• Rectification: correct data that's inaccurate or incomplete. You can also edit most of your profile directly in the app.
• Erasure: ask us to delete your personal data in certain circumstances (for example, when it's no longer needed).
• Restrict processing: ask us to temporarily limit how we use your data while a request is being resolved.
• Data portability: receive the personal data you provided in a structured, commonly used format, and transmit it to another service.
• Object: object to processing based on legitimate interests or carried out for direct marketing.
• Withdraw consent: where we rely on consent, withdraw it at any time without affecting processing that was lawful before.
• Not be subject to automated decision-making with legal effects: see section 5.

These rights aren't absolute. We may need to keep or process some data to comply with a legal obligation, establish or defend legal claims, or protect the rights of others.

5. Automated Decision-Making

RoleReady uses AI to help generate and tailor content (resumes, letters, interview prep, company research, job extraction). These are tools that support your job search; they don't make decisions about you that produce legal effects or similarly significantly affect you. You review AI output before anything is saved or sent, so there is always a human (you) in the loop. We don't carry out solely automated decision-making with legal or similarly significant effects.

6. Making a Request

• How to ask: email privacy@roleready.me with what you'd like to do (for example, "access request" or "please delete my data"). You can also delete your account and much of your data directly in the app under Settings > Privacy & Data.
• Verifying it's you: to protect your data, we'll confirm your identity before responding. We may ask for information from your account to do this.
• How long it takes: we respond within one month of receiving a complete, verified request. If a request is complex or you've made several, we may extend by up to two further months and we'll let you know within the first month.
• Cost: we provide information free of charge. For clearly unfounded or excessive requests, we may charge a reasonable fee or decline to act, and we'll explain why.
• If you have an agent: someone can make a request on your behalf with your written authority.

7. Data Portability & Export

The Service includes a self-service data export that produces a structured file of your personal data (your profile, Knowledge Bank, jobs, applications, contacts, interview prep, and other content you added). You can download it from within the app. The download link expires after a short time for security. This helps you exercise your right to data portability and to keep a copy of your information.

8. Deletion (Right to Erasure)

You can delete your account at any time from Settings > Privacy & Data in the app. Deleting your account removes your personal data from the live Service promptly and cancels any active subscription. We may keep limited records where we're required to by law (for example, certain billing or tax records) or to protect rights, and residual backup copies are overwritten on our normal schedule. If you'd prefer to ask us to delete data instead, email privacy@roleready.me.

9. Retention

We keep your personal data only as long as needed for the purposes described in this policy and our Privacy Policy, and no longer than necessary. While your account is active, we keep your data so the Service works. After your account is deleted, we remove your data as described above, except for limited records we're legally required or entitled to retain. See our Privacy Policy for more detail.

10. International Transfers

Because RoleReady and its providers are based mainly in the United States, your personal data may be transferred to and processed in the US and other countries. For transfers out of the EU/UK/EEA, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, and require our providers to apply comparable protections. We're happy to provide a copy of the safeguards on request.

11. Cookies & Consent

The Service sets only an essential session cookie (to keep you signed in) and uses first-party local storage for functional preferences. Our analytics are cookie-less and aggregated, and we don't use advertising or cross-site tracking cookies. Because we don't rely on consent for non-essential cookies, you don't need to opt in, and you can manage cookies and local storage in your browser settings. See our Privacy Policy for the full details.

12. Complaints

We want to resolve any concerns directly, so please contact us first at privacy@roleready.me. You also have the right to lodge a complaint with your local data protection authority. In the EU, you can find your supervisory authority through the European Data Protection Board, and in the UK with the Information Commissioner's Office (ico.org.uk). Lodging a complaint doesn't affect your other rights.

13. Contact

Data protection requests: privacy@roleready.me
Anything else: our contact page.