Privacy Policy

Rolemore is operated by Domware Oy, a company registered in Finland (Business ID: 3468681-4), with its registered address at Ylämyllyntie 8 D 20, 80400 Ylämylly, Finland.

Domware Oy acts as the data controller for all personal data processed through the Rolemore platform. For data-related enquiries, contact us at privacy@rolemore.com.

Account data: your email address and password hash when you register, or your email when you sign in via magic link.

Profile data: career history, skills, education, and other information you voluntarily enter into your Rolemore profile.

Usage data: pages visited, features used, and events generated while using the service. This data is collected in aggregate and is used to improve the product.

Billing data: payment processing is handled by Stripe. We store your subscription status and plan tier. We never see or store full card numbers.

Technical data: IP address, browser type, and device information collected automatically during normal operation and stored in server logs for security and debugging purposes.

To provide and operate the Rolemore service, including generating AI-tailored career documents from your profile.

To send transactional emails such as magic-link sign-in messages, password resets, and billing receipts.

To improve the product through aggregated, anonymised analytics.

To comply with legal obligations, including tax and financial reporting requirements applicable in Finland and the European Union.

Your profile data is passed to the Anthropic Claude API solely to generate the documents you request. It is not used to train AI models.

Contract performance (Art. 6(1)(b)): processing your account and profile data is necessary to deliver the service you signed up for.

Legitimate interests (Art. 6(1)(f)): aggregated analytics and security logging serve our legitimate interest in improving and protecting the platform.

Legal obligation (Art. 6(1)(c)): billing records are retained to satisfy Finnish and EU tax law.

Consent (Art. 6(1)(a)): where we send optional marketing communications, we will ask for your explicit consent first.

Your data is stored on Supabase infrastructure hosted in the European Union (Frankfurt, Germany). We do not transfer personal data outside the EEA except where necessary to deliver the service.

We use Anthropic's API (US-based) to generate documents. Only the minimum profile data required for a specific generation request is transmitted. Anthropic processes this data under its own privacy policy and does not use it for training.

Stripe (US-based) processes payments under EU Standard Contractual Clauses.

Account and profile data is retained for as long as your account is active. If you delete your account, your data is permanently removed within 30 days, except where retention is required by law.

Billing records are kept for seven years in accordance with Finnish accounting law.

Server logs are retained for 90 days.

Under the GDPR you have the right to access, rectify, and erase your personal data; to restrict or object to certain processing; and to receive your data in a portable format.

To exercise any of these rights, email privacy@rolemore.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi) if you believe we have processed your data unlawfully.

All data is encrypted in transit using TLS and at rest using AES-256. Access to production data is restricted to authorised personnel only.

Row-level security is enforced at the database layer so that each user can only access their own data.

We may update this policy from time to time. If we make material changes, we will notify you by email or by a notice within the application. The 'Last updated' date at the top of this page always reflects the most recent revision.

For any questions about this privacy policy or how we handle your data, contact Domware Oy at privacy@rolemore.com.