Data Handling
Last updated: July 2026
RoleReady handles sensitive personal information, your resume, career history, and job search activity. Here's exactly what we do with it, and what we don't.
Encrypted in transit & at rest
All data sent between your browser and RoleReady is encrypted via HTTPS/TLS. Stored data is encrypted at rest on our infrastructure provider.
Your data is yours
We never sell your personal data. Your resume and application details are used solely to provide the service to you.
Minimal data sharing
We only share data with third parties strictly necessary to operate the service (see our Privacy Policy). No data brokers, no ad targeting from your account.
AI processing transparency
When you generate a cover letter or interview prep, relevant portions of your resume and job description are sent to an AI provider. This data is not used to train AI models.
Right to deletion
You can delete your account and all associated data at any time. Data is permanently removed from our systems within 30 days of deletion.
UK GDPR compliant
RoleReady is operated in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
What data does RoleReady store?
When you use RoleReady, we store the following on secure, encrypted servers:
- Your account credentials (email + hashed password, we never store plain-text passwords)
- Your profile: name, contact details, professional headline, skills, and resume text
- Your job applications: company, role, location, job description, status, cover letters, interview notes, and personal notes
- Follow-up logs: dates, communication types, and summaries
- Uploaded files (e.g. resume PDFs), stored in encrypted object storage
How AI features use your data
When you click "Generate Cover Letter" or "Generate Interview Prep", RoleReady sends a prompt to an AI model (OpenAI or Google AI). This prompt includes:
- Your resume text (or relevant sections)
- The job description for the specific role
- Contextual instructions from RoleReady
This data is sent over an encrypted connection and processed to generate your content. Under our agreements with AI providers, your data is not used to train their models. The AI response is returned to you and stored in your application record.
Who can see your data?
- You, only you can view your profile, applications, and generated content
- RoleReady staff, may access anonymised usage data for product improvement; direct access to personal data is restricted and audited
- Infrastructure providers, Base44 (our backend platform) processes data to store and serve it; they are bound by a Data Processing Agreement
- AI providers, receive prompts as described above; do not retain or use your data beyond generating the immediate response
We do not share your data with recruiters, employers, job boards, or any third parties for marketing purposes.
Data residency
Your data is primarily stored and processed within the EEA/UK. When data is processed by AI providers (OpenAI, Google), it may be transferred to servers outside the UK. These transfers are covered by Standard Contractual Clauses (SCCs) to ensure adequate protection under UK GDPR.
Deleting your data
You can delete individual applications or your entire account at any time from within the app. Account deletion permanently removes all your personal data, including your profile, all job applications, follow-up logs, and generated content. This action is irreversible. Data is fully purged from our systems within 30 days.
Contact & data requests
To request a copy of your data, ask for corrections, or request deletion, email paula-townsend@hotmail.com. We will respond within 30 days. For more detail on your rights, see our Privacy Policy.