Privacy

• Nothing inside your account is tracked. No advertising tag, no session recording, and nothing about you is sold or shared with anyone for their own purposes. Visits are counted without cookies, and only as totals.
• The public job board, at /jobs and /companies, carries Google ads, and Google may use cookies there if you allow it. Nothing from your account is on those pages, and nothing else on the site loads an ad.
• Your resume and your records go to an AI model, because reading them is the product. Which parts, for which job, is set out below.
• Alerts are deleted thirty days after the posting went up. The record of what was matched to you is kept for as long as your account exists, so you can look back at it.
• Your card never reaches Roliii. Polar takes the payment and sends back a status.
• One address answers all of it: support@roliii.com.

Roliii is run by an individual established in Cameroon, reachable at support@roliii.com. That is the person answerable for everything on this page the controller, if you are somewhere that uses the word.

Roliii is market-agnostic on purpose, so people use it from everywhere. Where the General Data Protection Regulation applies to you, it applies to this processing, and the rights further down are the ones it gives you rather than a summary of them.

Everything below comes from you, or from something you did in the app. Nothing is bought from a data broker, and nothing is inferred about you from anywhere else on the web.

Your accountwhile the account exists

The email address you signed up with, your name, and your password stored as a hash that cannot be read back. Also the sessions that keep you signed in and the codes behind the confirmation and reset links, which expire after thirty minutes.

Your profilewhile the account exists

The contact details on it, your headline and summary, your skills, how soon you could start, and what you are looking for: titles, work mode, employment type, pay expectation, the responsibility band, industries and locations.

Your recordswhile the account exists

Roles you have held, projects, education, languages and links whatever you entered or accepted from a resume read. These feed the drafts. They are not used to match you to anything.

Your resumeuntil you replace or delete it

The PDF itself, its name, its size and when it landed, plus whatever a read of it proposed while that proposal is waiting for you to accept or discard it. There is one resume per account and no history: replacing the file destroys the old one.

What was matched to youwhile the account exists

For each posting scored against your profile: the score out of 100, the five factors behind it, and whether you saved or dismissed the role. Kept after the posting leaves your feed, so you can see what was found for you over time.

What you were told30 days

Each alert raised for you, whether you have read it, and whether it went out by email. Deleted thirty days after the posting was published, because an alert about a posting that has left your feed is no longer news.

Your draftsuntil you delete them

The tailored resume, the cover letter and the screening answers written for a posting, with the log of every instruction you gave and what it changed. Deliberately not deleted with the posting: it is your own writing about a job you may well have applied for.

Your applicationsuntil you delete them

Which postings you told us you applied to, when, and what happened next. Roliii never submits anything, so this exists only because you said so.

Your planwhile the account exists

Which plan you are on, and if you pay the subscription identifier and status Polar sends back, plus the renewal date. No card number, expiry or billing address ever reaches Roliii.

What the models costkept as the spending record

One row per model call made for you: which workload it was, how many tokens it used and what it cost. It is the only thing bounding what an account can spend, so it survives the postings it was about.

When you were last hereone timestamp, overwritten

A single time, rewritten when you open the app. It is what stops a realtime alert interrupting you about a role already on your screen.

Request logsheld by the host, not by Roliii

Serving a page writes the usual line: an IP address, the path asked for, and the browser's user-agent string. Roliii keeps no copy and reads nothing from it. There is no session recording anywhere on roliii.com, and the only advertising tag is on the public job board (see Ads on the public job board).

Alerts are not deleted on request; they are deleted by the sweep that runs every ten minutes, whether anyone asks or not, once the posting they are about is thirty days old.

To run the thing you signed up forperformance of a contract

The account, the profile, the hunt, the scoring, the drafts, the alerts you asked for, and the plan you chose. Without this data there is no service to provide a hunter with no profile has nothing to hunt for.

To send you emailconsent, withdrawable

Role alerts go out only to candidates who left that channel switched on. Every one of them carries a link that turns it off from the inbox, without signing in. The confirmation and reset emails are not this: they are part of running the account, and they are the only two that go out regardless.

To keep it working and stop it being abusedlegitimate interests

Sessions, the spend ledger, and the limits on how much one account can cost. The interest is keeping the service up for everybody, and it is weighed against a record that says what a model call cost rather than anything about you.

To keep the bookslegal obligation

Payment records, kept for as long as tax law requires wherever the operator and Polar are established.

Six companies, each doing one job under instruction. None of them may use what they receive for anything of their own. Nothing is sold, and nothing from your account is handed to an advertiser, a data broker, or a recruiter. The ads on the public job board are the one thing on the site not done under instruction, and they have their own section below.

Convexthe backend

Holds the database, the resume file, the scheduled sweeps and every function that runs behind a sign-in. Everything in the list above except the request logs lives here. Based in the United States.

Anthropicreading, scoring and writing

Receives your resume when you ask for it to be read, a narrow slice of your profile when a posting is scored, and your records when you ask for a draft. Which slice, in each case, is the next section. Based in the United States.

Googlefinding postings

Runs the search half of discovery. It is sent a job title and a market the question a group of candidates has in common and never a name, an address, a resume or a record. Based in the United States.

Resendevery email

Sends the confirmation link, the reset link and the role alerts. It receives your email address and the contents of the message. Based in the United States.

Vercelcounting visits

Web Analytics counts page views as totals: which page, the referring site, the browser, the kind of device and the country. It sets no cookie and keeps no identifier that follows you from one day to the next. Based in the United States.

Polarthe sale

The merchant of record for a paid plan. It takes the payment, holds the card details Roliii never sees, and sends back a subscription status. Based in the United States.

The site itself is served by a hosting provider, which sees the request log described above and nothing from inside your account.

Data is also handed over where the law requires it. If that ever happens you are told, unless telling you is itself against the law.

The pages under /jobs and /companies list every posting Roliii has found in the last thirty days, for anybody, signed in or not. They are paid for by Google AdSense, and those pages are the only ones on the site that load it.

On them Google acts for itself, not for Roliii: it decides which ad to show, and if you allow it, it may set cookies and use what it already knows about you to choose one. In the EU, the UK and Switzerland it asks first, through its own consent message, and the Ad privacy choices link at the foot of every board page reopens that message so you can change your answer. What Google does with it is governed by its own policy, at policies.google.com/technologies/ads.

What Google can see there is what any site you visit can see: the page, your browser, and your IP address. It is never sent your profile, your resume, your matches or your drafts. Those are not on the board's pages to send.

This is the part most services leave vague, and it is the part worth being exact about. Three workloads send a model something about you, and each sends a different slice.

Reading your resumethe whole document

The PDF is handed to the model as it is, because that is the only way to read a document. It runs once per file, only when you press the button, and what comes back is a proposal you either accept or discard.

Scoring a postingheadline, location, skills, preferences

And nothing else. Not your experience, not your projects, not your education or languages, and not the summary you wrote about yourself. The score is five factors, a career cannot be one of them, and the only version of that rule which can be checked is not sending the career at all.

Writing a draftyour records, and only when you ask

The opposite slice, for the opposite reason: a cover letter with no career behind it is the paragraph nobody reads. This runs when you press a button on one posting, never on a schedule.

Both providers are used through their paid API, whose terms say the content of a call is not used to train their models. Roliii trains nothing of its own on anything, ever.

A model reads each posting against your profile and returns a number out of 100 with five factors behind it. No human looks at it, which is what makes it automated processing, and every score in the app comes with the breakdown so it can be argued with.

It is a decision about a posting, not about you. It does not restrict anything: you set the threshold yourself, you see every match that clears it, and you can apply to whatever you like whatever the number says. Nothing here decides anything with a legal effect on anyone, and nothing is passed to an employer.

Roliii is run from Cameroon and every provider above processes in the United States. Whatever country you are in, your data leaves it.

Where you are in the EEA or the UK, those transfers rest on the standard contractual clauses each provider offers, which are part of the agreement the operator holds with them. A copy of what covers a particular provider can be asked for at the address below.

Most of them are a screen rather than a request. Your profile and every record on it are editable at any time on the profile screen there is no read-only copy of anything the notification schedule is on the settings screen, and every email carries an unsubscribe link.

The rest are a message. You can ask for a copy of everything held about you, for something to be corrected, for the whole account to be deleted, for processing to be restricted, or to object to it. Withdrawing consent to email stops the alerts and changes nothing else.

Deleting the account is not yet a button in the app, and that is a gap rather than a policy. Write to support@roliii.com and everything is deleted within thirty days the account, the profile, the records, the resume file, the drafts and the applications. What is kept afterwards is the payment record the tax rules require, and nothing else.

Requests are answered within thirty days and cost nothing. If you are in the EEA or the UK and the answer is unsatisfactory, you can complain to the data protection authority where you live.

• Passwords are stored as a hash and cannot be read back, by anyone, including the operator.
• Every query for a candidate's own data is reached through that candidate's identity. No function takes an owner as an argument, which is what stops one account reading another by guessing an identifier.
• Traffic is encrypted in transit, and the resume file is reachable only through your own signed-in session.
• Confirmation and reset links expire after thirty minutes, and asking for a reset never reveals whether an address has an account.

None of that makes a breach impossible. If one happens and it puts you at risk, you are told, and so is the relevant authority, inside the deadline that applies.

Roliii is not for anyone under 16 and is not aimed at them. If an account turns out to belong to someone younger it is deleted. Tell us at support@roliii.com if you believe one does.

The date at the top changes when something on this page changes. Where a change affects what is done with data already held, you are told by email before it takes effect rather than after.