Privacy Policy
Last updated 17 October 2026 · Draft for legal review.
What we collect
Your account details, the resume you upload, your job preferences, saved answers, and a log of the applications you approve.
How we use it
To find matching jobs, tailor your resume and cover letters with AI, and send applications only after you approve them. We never sell your data.
AI processing
Resume text and job descriptions are processed by AI models to parse, score and tailor content. Every AI action is recorded in your audit log.
Consent and processors
Separate choices cover the core service, AI processing, Gmail sending, reply tracking and product updates. Infrastructure uses Lovable Cloud; AI requests use Lovable AI, and job discovery uses Firecrawl. Google processes connected Gmail activity. Resend notification delivery is not configured. Exact processor contracts and processing regions must be confirmed before launch.
Google Limited Use
Information received from Google APIs is used only to provide the approved Gmail sending and application-reply tracking features. Use and transfer of Google API data will adhere to the Google API Services User Data Policy, including its Limited Use requirements. Gmail data is not used for advertising or general model training.
Retention
Reply snippets and email logs are scheduled for deletion after 12 months. Closed applications default to 24 months, with 6, 12, 24 month or never options. Audit logs are retained for 24 months. Per-user discovery and AI usage records have a 12-month retention target. Export downloads expire after 7 days. Automated retention deployment is subject to operational verification.
Support access
Administrators must verify an authenticator code. Access to your documents requires a recorded reason, visible to you in the Privacy center.
Deletion and transfers
You may request deletion with a 14-day grace period or immediate processing after a fresh sign-in. Your personal records and files are removed; shared job listings remain and required security records are anonymized. Processing may occur outside your country, subject to applicable safeguards and provider agreements.
Adults only
Dash Role is intended for people aged 18 and over, not children.
Reply tracking — forwarding
If you turn on forward-to-track, you get a personal address. Only emails you choose to forward there are read. We keep the sender, subject, date and the first 500 characters — never the full email or attachments.
Reply tracking — Gmail (optional)
If you turn on automatic tracking, you grant read-only Gmail access. We only check threads of applications you sent and emails from companies (and their hiring systems) you applied to, and store the same limited metadata and 500-character snippet. AI suggests status changes; nothing changes until you approve. You can turn it off and delete stored replies at any time.
Storage & security
Resumes are stored in a private, access-controlled bucket. Every database table is protected so only you can access your rows.
Your rights
You can access, export, correct or delete your data at any time from Settings. Deleting your account removes your resumes, connections and records.
Contact
Dash Role handles questions, corrections and grievances by email at info@dashrole.com or through Settings → Privacy center. Requests are answered within 30 days.