Privacy Policy

Effective July 25, 2026 · Draft pending legal review

This Privacy Policy explains how Synergic Solutions LLC, a North Carolina limited liability company doing business as Rolevora ("Rolevora," "we," "us"), collects, uses, discloses, and protects your information when you use the Rolevora website, web application, browser extension, and related services (the "Service"). For privacy questions or to exercise your rights, contact privacy@rolevora.com.

1. Summary

Most data we hold is what you give us to prepare and submit job applications. Your sensitive demographic (EEO) data is optional, collected only with your explicit opt-in consent, used only to fill the voluntary self-identification fields on applications when you direct us to, and never sold, used for advertising, used to profile you, or used by us to make any decision about you. We do not sell your personal information and do not use your content to train AI models.

2. Information you provide

Account information (name, email, hashed password); your résumé and its parsed contents (contact details, work history, education, skills, work authorization); job descriptions you import; application/screening answers we remember so you do not re-enter them; AI-generated cover letters and tailored résumés; recruiter emails sent to your optional Rolevora inbox alias (Response Tracking); and, when paid plans are enabled, billing identifiers and billing address from Stripe (Rolevora never receives your full card number).

3. Sensitive personal information (voluntary EEO self-identification)

Job applications often include voluntary Equal Employment Opportunity (EEO) questions. If — and only if — you choose to provide it, we store the following so we can fill those fields for you when you give separate affirmative consent: race/ethnicity; gender and gender identity (including transgender status and pronouns); sexual orientation; disability status; veteran/military status; age or date-of-birth/age-eligibility; and immigration/work- authorization status. Several of these are treated as sensitive personal information (CCPA/CPRA), sensitive data (other US state laws), or special category data (GDPR). Providing this data is entirely optional and the Service works without it.

4. How we handle sensitive data

• Opt-in only — we never require it; the Service is fully usable without it.
• Purpose limitation — used solely to populate the voluntary EEO fields of an application at your direction, and to store it so you do not re-enter it. No other purpose.
• No decisions, no profiling, no advertising, no analytics, and no AI processing using your sensitive data.
• No sale and no sharing for cross-context behavioral advertising, ever.
• You direct every disclosure — sensitive data leaves Rolevora only when you review a supported ATS page you are actively completing and then submit it to the employer.
• Withdraw anytime — view, edit, delete, or withdraw consent in Settings without losing access to the rest of the Service.
• Right to limit (CCPA/CPRA) — you may direct us to limit use of your sensitive personal information to what is necessary to provide the Service.

5. How we use your information

To provide the Service (store your materials, generate materials, remember answers, and at your direction fill and help submit applications); to communicate with you (service messages and, if you opt in, product updates); to keep the Service secure; to comply with law; and to improve the Service using aggregated, de-identified data. We do not sell your personal information and do not use your content, answers, sensitive data, or AI prompts/responses to train any AI model.

6. Recruiter replies (Response Tracking)

Response Tracking is entirely opt-in. Nothing is collected unless you choose to use your inbox alias (for example, as a reply-to address). When a message reaches your alias we store it (sender name/email, subject, body) and classify it to update your tracker and optionally notify you. A recruiter's email is their personal information, which we process on your behalf solely to provide Response Tracking; we do not sell it, and you can delete any captured message at any time. We do not connect to or read your personal email inbox.

7. Sub-processors

We share the minimum necessary data with vendors bound by data-processing agreements: Anthropic (Claude API) for AI generation; our cloud hosting, database, and encrypted object storage providers; our email provider for transactional email and inbound Response Tracking; our error-tracking and product-analytics providers (diagnostics and de-identified usage); and Stripe for checkout, recurring billing, tax calculation, receipts, and the customer billing portal when paid plans launch (Rolevora never receives full card numbers). Our current named provider list is published on the Subprocessors page.

8. Disclosure

We disclose personal information only: to the sub-processors above; at your direction— most importantly, when you submit an application, the data you chose to include (which may contain EEO fields) is transmitted to the employer or ATS you selected, whose own privacy practices then apply; to comply with valid legal requests (minimum required); to stop fraud or threats to safety; and in a merger or acquisition, with notice and a chance to delete your account first. We do not sell your personal information or share it for cross-context behavioral advertising.

9. Your rights

Depending on where you live, you may have rights to access, correct, delete, export, and restrict or object to processing of your data, and to withdraw consent (including for sensitive data). California residents (CCPA/CPRA) additionally have the right to limit use of sensitive personal information; we do not sell or share personal information for cross-context behavioral advertising. Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and other states with comprehensive privacy laws have access, correction, deletion, portability, and opt-out rights, and — where applicable — we obtain opt-in consent before processing sensitive data. EU/EEA/UK users may also lodge a complaint with a supervisory authority. Use the in-app Export and Delete controls in Settings, or email privacy@rolevora.com. We will not discriminate against you for exercising any right.

10. Data retention and deletion

We retain account, profile, and sensitive data while your account is active; sensitive/EEO data is deleted when you remove it or close your account. AI prompts/responses are retained for a limited window (about 30 days) then deleted. Sentry error-diagnostic events may have up to a 90-day lookback while our temporary Business trial is active; after the planned trial downgrade, the Developer plan provides a 30-day lookback. When you delete your account, your data is removed from our primary systems promptly and from backups within 30 days, subject to any legal retention duty.

11. Security

Passwords are stored only as salted bcrypt hashes; all traffic uses HTTPS. Documents are kept in private, encrypted storage with short-lived signed URLs (no public download links). Sensitive/EEO data receives heightened, least-privilege access. No system is perfectly secure; report vulnerabilities to security@rolevora.com.

12. Cookies, children, and transfers

We use only the cookies and local storage necessary to operate the Service (a session token on the web app; an auth token in the extension). We do not use advertising or behavioral- tracking cookies. The Service is intended for adults; we do not knowingly collect data from anyone under 18. We operate in the United States and process data there; where required we use appropriate safeguards for international transfers.

13. Changes and contact

We may update this policy; material changes will be announced by email and posted here with an updated effective date.

Synergic Solutions LLC
8030 England St, Suite B
Charlotte, NC 28209
For privacy questions or requests, contact privacy@rolevora.com. Security reports may be sent to security@rolevora.com.