Privacy Policy

Effective August 9, 2026 · RoleHunter Technologies Inc.

This policy explains what RoleHunter ("we", "us") collects when you use rolehunter.com, why, and the rights you have over it — including under the EU/UK GDPR and US state laws such as California's CCPA/CPRA.

What we collect

Account data — if you sign up: your email address, name, and either a hashed password (bcrypt — we never store your actual password) or your Google account ID if you use "Sign in with Google".

Resume data — the resume file you upload and the profile we extract from it (work history, skills, location, seniority), used to rank jobs for you.

Usage data — standard server logs (IP address, user agent, pages requested) kept briefly for security and debugging, and privacy-respecting analytics (Google Analytics) measuring aggregate page usage.

Anti-abuse data — if you use the contact form, a Cloudflare Turnstile token confirming you're human (Cloudflare processes this per its own privacy policy).

Guests vs. accounts

You can use RoleHunter without an account. In that case we create a temporary guest identity so your resume and matches work; guest resume profiles and files are deleted automatically after 3 days. Registered accounts keep their resume until they delete it or their account.

How we use it

To operate the service: authenticating you, parsing your resume (via an LLM provider acting as our processor), ranking jobs, sending transactional email (verification, password reset) via AWS SES, and preventing abuse. We do not sell your personal data, and we do not share it with advertisers or data brokers.

Where it's stored & who processes it

Data lives in AWS (us-east-1): account/resume records in DynamoDB, resume files in S3, the jobs database in Aurora Postgres. Resume text is processed by Anthropic's API to extract your profile. Email is sent via AWS SES. These providers process data on our behalf under their respective data-processing terms; for EU users, international transfers rely on their Standard Contractual Clauses.

Your rights (GDPR — EU/UK)

You have the right to access, correct, export, and erase your personal data, to restrict or object to processing, and to data portability. Our lawful bases are performance of the service you requested (contract) and legitimate interest (security, abuse prevention).

Your rights (CCPA/CPRA — California & other US states)

You have the right to know what we collect, to delete it, to correct it, and to opt out of sale or sharing — we don't sell or share personal data for cross-context advertising, so there's nothing to opt out of. We don't discriminate against you for exercising any of these rights.

Delete your data

Signed-in users can delete everything themselves: delete your resume from the upload page, or delete your entire account (profile, resume record, and stored file) from your account settings — it takes effect immediately. You can also email admin@rolehunter.com from the address on the account and we'll delete it for you. Guest data self-destructs after 3 days. Server logs roll off within 30 days; backups within 35.

Cookies

One strictly-necessary cookie (rolehunter_session, httpOnly) keeps you signed in. Analytics may set its own cookie; no advertising trackers.

Children

The service is not directed at children under 16 and we don't knowingly collect their data.

Changes

We'll post updates here and change the effective date above.

Contact

Privacy requests: admin@rolehunter.com or via the contact page.