Privacy Policy

Rolepath is operated by Kaj Aleksander Kulik, a sole trader in Australia, ABN 76 899 516 534. This policy explains what personal information Rolepath collects, why it is collected, who else handles it, and how you can reach us about it. We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth).

Rolepath is a web dashboard paired with a Chrome extension. It stores your resume and search preferences, collects SEEK job ads, screens them against your profile using AI, and drafts cover letters and suggested answers to the employer’s questions for you to review.

With the extension installed and your account signed in, opening a job ad on seek.com.au saves that listing to your account automatically, without you clicking anything. On SEEK application pages the extension fills in your cover letter and shows suggested answers to the employer’s questions for you to review and copy in yourself.

You can also run a search from the dashboard instead of browsing SEEK yourself. That is described under “When you run a search” below.

• Account email. Used to sign you in, either with a one-time code sent to your address or with your Google account if you choose Continue with Google. There are no passwords to store.
• Profile and resume details. Your name, contact details, location, availability, key achievements, your standing answers to common employer questions, your answers to the optional “How you like to work” questions, and the resume you paste or upload. Resume text or page images are sent to one of our AI providers to be read into a structured form, and we store that structured result on your profile. We do not keep the original file. Before resume text is sent, we replace your email address and phone number with placeholders, and your name too once your profile holds it. We remove recognised referees sections where possible, but some referee details may remain. We put your own name, email and phone details back when the answer returns. A scanned or picture-only resume is sent as the page images, so nothing in it can be replaced.
• Search preferences. The job titles, locations, distance, work types and classifications you save as your search config, plus what you set as a hard no, your minimum pay and the things you would rather avoid.
• Job listings. Title, company, location, work type, salary, apply type, ad text and the employer’s questions from SEEK ads captured by the extension or returned by a search you run, along with the ad’s web address and the time it was captured, stored in your own private rows. An ad captured by the extension also includes SEEK’s “How you match” summary where the ad shows one. SEEK builds that summary from your own SEEK profile, so it describes you rather than the job.
• AI output. Screening verdicts and scores, draft cover letters, suggested answers to the employer’s questions, and the stage you set on each job.
• Support messages. When you use the “Need help?” button, we store your message, your account email address and the page and browser details in our app database, and we email a copy to our support address. If a screen stops working, the app also stores a short automatic report of the error and the page it happened on, and may email a copy, with your account email address, to our support address, so we can fix it. Deleting your account removes the database copy. Copies already sent by email are not removed by that automatic deletion.
• Sign-in tokens. The browser extension keeps a session token and a refresh token in its own extension storage so it can save captured jobs to your account. It sends them only to our servers and to Supabase, our authentication provider, to keep your session signed in. They are never shared with anyone else.

When you run a search from the dashboard, your saved search criteria, meaning your job titles, locations, distance, work types, classifications and minimum pay, go to Rolepath’s servers, and Rolepath retrieves matching listings on your behalf. The listings that come back are saved to your account so you can screen them, and they are covered by the rest of this policy in the same way as listings captured by the extension.

To read an ad in full, the extension fetches that ad from SEEK in your own browser. This can happen when a search scores your top matches, and when you open or screen a job in the dashboard. It sends no SEEK cookies and asks only for the ad’s own address on SEEK. The ad text, its employer questions and how it is applied for are then saved to your account like any other listing.

• Screen job ads against your profile and score them for fit.
• Draft cover letters and suggested answers to the employer’s questions for a job you choose.
• Fill in your cover letter and show suggested answers to the employer’s questions on SEEK when you start an application.
• Retrieve listings that match your saved search criteria.
• Run and support your account, including counting AI actions against the usage limits on your plan.

We do not sell your information, and we do not use it for advertising or disclose it for anyone else’s marketing.

Your data is stored in a Supabase Postgres database with row level security, so an account can only read its own rows. Traffic between the extension, the web app and the database uses HTTPS.

Some of the providers Rolepath relies on handle information outside Australia. Under Australian Privacy Principle 8 we tell you who they are and where that happens:

• AI providers: Anthropic, OpenRouter, DeepInfra and Novita AI. Process the AI requests. The job ad, the relevant parts of your profile or resume, and your instructions are sent to one of these providers to produce the output. Before a request that uses your profile is sent, including the one that writes your cover letter, we replace your name, email address and phone number with placeholders, and we put your real details back in the answer before it is saved or shown to you. Your work history, location and the rest of your profile are sent as written, because the AI needs them to do the job. Anthropic, OpenRouter and DeepInfra process these requests in the United States. Novita AI is based in San Francisco, United States, and its privacy policy, read on 8 September 2026, names the United States as a country it may transfer personal information to. See Anthropic's privacy policy, OpenRouter's privacy policy, DeepInfra's privacy policy and Novita AI's privacy policy.
• Supabase. Hosts the database and the authentication service. The database runs in Sydney, Australia (ap-southeast-2), confirmed from the project dashboard on 9 August 2026.
• Google. If you choose Continue with Google, Google confirms who you are and passes your name, email address and profile picture link to Supabase so you can sign in. We never receive your Google password. Google LLC is based in the United States. See Google's privacy policy.
• Cloudflare. Runs the check on the sign-in page that tells people from automated scripts before a code is emailed; it reads technical details of your browser and connection for that alone. Cloudflare, Inc. is based in the United States. See Cloudflare's Turnstile privacy addendum.
• Resend. Delivers the sign-in emails and the support messages you send from inside the app. Sending runs in Resend’s Tokyo, Japan region (ap-northeast-1), so your email address, and anything you write in a support message, is handled there for that purpose.
• SMTP2GO. The backup sender for the same sign-in and support emails, used only when Resend cannot send one.
• ImprovMX. Forwards mail sent to our support address on to the operator’s mailbox, so anything you write to us, including an access or deletion request, passes through it. ImprovMX Incorporated is based in the United States, and its privacy policy states that it may process information on computers in the United States and Europe, read from its published policy on 9 August 2026.
• Stripe. Will process subscription payments once subscriptions launch. Until then, Rolepath takes no payments and does not collect or store card details.

Rolepath does not run third-party analytics or tracking scripts, and it does not use advertising cookies. The providers that host and serve the app keep their own operational request logs, as any web host does, and those logs are governed by their policies rather than by our code.

The dashboard keeps some information in your browser so it loads quickly and keeps you signed in: your sign-in session, your theme and view preferences, and a cached copy of your jobs and AI answers. These local copies stay until that browser storage is cleared, which is separate from deleting data from our servers.

The extension keeps a separate set of its own: your sign-in token and refresh token, your account email and account id, the address of the dashboard it sends requests to, and a copy of your drafted cover letters and answers to the employer’s questions so they can be shown back to you on a SEEK application form. It does not keep captured job ads. Everything except the dashboard address is removed from the extension when you sign out, and when your session is rejected.

• Your account data is kept for as long as your account is active.
• Removing a job from your list deletes the job and its AI answers from our servers. We keep only the job’s number from SEEK and the date you removed it, so that a later search does not add the job back to your list. If you open the job’s ad on SEEK again with the extension signed in, the job comes back to your list and we forget that you removed it. Otherwise we keep the number for as long as your account exists.
• A job you have not acted on is deleted automatically once it is more than 14 days old, together with its AI answers, unless it scored 7 or more. A job you saved, started or applied for is kept. If SEEK still lists a deleted job, a later search can find it again as a new job.
• “Clear all jobs” on the Settings tab deletes from our servers every job you have not saved or acted on, together with its AI answers. It keeps the jobs you saved, started or applied for, any job with a cover letter, answers, a tailored resume or a screening result, and the numbers of the jobs you removed.
• If you ask us to delete your account, we remove the data we hold for you on our servers, including the numbers of the jobs you removed.

You can view and edit your profile and search preferences at any time in the dashboard, remove individual jobs, or use “Clear all” on the Jobs tab to delete every captured job you have not saved or acted on, with its AI answers.

There is no self-serve account deletion yet. To request access to the personal information we hold about you, to have it corrected, or to have your account and its data deleted, email support@rolepath.com.au.

If you are not satisfied with how we handle a privacy matter, you can raise it with the Office of the Australian Information Commissioner at oaic.gov.au.

If this policy changes, the updated version is published on this page and the date at the top is changed with it.

Privacy questions, access requests and deletion requests go to support@rolepath.com.au.