Privacy policy / Datenschutzhinweise

Draft privacy notice. The controller name, postal address, and contact email are published below. Legal bases, retention periods, and provider transfer arrangements still need operator confirmation. This notice describes the implemented service; it is not a claim of GDPR compliance. Avoid uploading sensitive information while these details remain incomplete.

Who is responsible

Rolevia is operated as a personal project by Sahil Rajpurkar, the controller responsible for the processing described here.

• Postal address: Emil-Figge-Str. 21, 44227 Dortmund, Germany.
• Privacy contact: sahilrajpurkar1998@gmail.com

See the imprint for operator information.

Information processed

• Account email, authentication credentials handled by Supabase Auth, and session information.
• CV text, file name, name, professional history, education, skills, and job preferences you supply. Saved CV editor drafts include contact details, custom sections, layout settings, and an optional portrait.
• Job matches, saved applications, status, notes, follow-up dates, and cover-letter drafts.
• Service activity such as check times and results; hosting and authentication providers may process IP addresses, request metadata, and security logs.

Why this information is processed

Data supports account access, profile editing, matching, document drafting, application tracking, and protecting the service. Optional daily checks and email digests use your saved preferences when enabled and configured. The operator must confirm and publish the applicable Article 6 GDPR legal basis for each purpose before treating this draft as final. A beta notice is not consent.

CV files and account records

PDF/DOCX files are sent to the application server for text extraction. The app does not store the original upload as a file. Reviewed text and profile details are stored when you save them. Do not include identification numbers, health information, or other sensitive data that is unnecessary for a job search.

The CV editor processes photos in your browser, crops them to a portrait, and re-encodes them as a resized JPEG without the original metadata. The resulting photo is stored as part of your CV drafts when you select Save CVs. Removing a photo and saving updates the active version; the other version may still contain its own copy. Preview, PDF/Word exports and CV wording suggestions run in your browser without an external AI service. Unsaved edits stay in memory, not browser local storage. Demo edits and photos are not saved to an account.

Account records are stored in Supabase with per-user access policies. This is not end-to-end encryption: service operators and infrastructure providers may have administrative access needed to operate the service.

Optional cover-letter AI generation sends saved CV/profile text and the supplied job details to Google Gemini only after explicit consent for the generation workflow. CV text may contain contact details. Remove sensitive information first. Free-tier data-use terms vary by region and may include product improvement and human review. Read the Gemini API terms. Generated drafts are not automatically saved; review all claims before saving or sending. Generation activity is recorded for rate limiting.

Providers and international processing

Manual job searches send your saved role keywords and selected locations to Bundesagentur fuer Arbeit and StepStone from the app, and through a separate Vercel worker to LinkedIn, Indeed, Google Jobs and Xing. CV text, names and email addresses are not sent to job sources. Arbeitnow and Remotive provide public feeds without receiving your individual search preferences.

Vercel hosts the application; Supabase provides accounts and the database. Email services process delivery information when used. Hosting, processing regions, data processing agreements, and any international transfer safeguards must still be confirmed by the operator. Germany as the operator's country does not mean all processing stays in Germany or the EU. See data sharing.

Cookies and device storage

The app uses authentication/session cookies and temporary password-recovery state. Its service worker caches public assets and a reconnect page, not private workspace or API responses. No advertising or optional analytics integration is implemented in the application code. Provider infrastructure logs are separate from app analytics.

Selecting Accept on the beta notice stores the notice version in this browser's local storage so the banner stays dismissed. This preference contains no account or CV data and is not consent to data processing or acceptance of legal terms. Legal links remain available in the footer. Clearing site data, using another browser, or a revised notice may show the banner again. When browser storage is blocked, dismissal lasts only until the page is reloaded.

Retention and deletion

There is currently no implemented automatic expiry schedule for saved account records and no self-service account-deletion function. Provider log and backup retention has not been confirmed. The operator must publish retention criteria and establish a verified deletion process, including backup handling. Editing a profile does not promise immediate deletion from backups.

Your choices and rights

You can edit profile information, export profile/application data, and turn off optional checks or digests in the app. Depending on the applicable legal basis and circumstances, GDPR provides rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent where consent is used. You may complain to a competent data protection supervisory authority. For privacy questions or to exercise your rights, use the privacy contact above. Do not send passwords or recovery links by email.

Decisions and changes

Job rankings assist your review; Rolevia does not submit applications or make hiring decisions. The demo uses fictional data in memory. Material changes will be described in updated notices; a mechanism for separately notifying existing account holders has not yet been implemented.

Last updated: 12 September 2026.