Privacy Policy

We collect information you provide directly, including: • Account Information: Email address, name, and password when you create an account. • Resume Data: The content of resumes you upload, including skills, work history, education, and contact details. • Profile Preferences: Desired role, location, salary range, and job type preferences. • Application Data: Job applications you track, including notes, statuses, and dates. • Payment Information: Billing details processed securely through our third-party payment provider. We do not store full credit card numbers on our servers. Some of this information may reach us through the optional GlideRole browser extension. Section 2 below describes exactly what the extension collects, what it sends us, and where it runs.

The GlideRole browser extension is optional, and it does nothing until you connect it to your account using an extension token that you generate yourself. This section describes how the extension handles your data. It applies in addition to the rest of this policy. What the extension stores on your device The extension stores your extension token, your autofill and submit preferences, and the counters that enforce your application limits in your browser's local extension storage. This data stays on your device. It is not synchronised to your browser profile, and we cannot read it. What the extension sends to us When you use the extension, it sends the following to your own GlideRole account, authenticated with your extension token: • The job posting you are viewing or applying to — its title, company, link, and description text — so we can score it against your resume and record it in your tracker. • Any notes you type into the extension. • The outcome of an application: whether it was submitted, filled in and left for you, or skipped. In return, the extension receives your own resume and profile data from your account so that it can fill in application forms. Where the extension runs The extension asks your permission before running on any website, and you can decline it or withdraw it at any time from your browser's extension settings. Until you grant it, the extension runs on no third-party website at all. Your browser will describe what it asks for as access to all sites. We want to be straightforward about why. It is the only form of that permission which lets us add support for a new job board without asking every existing user to reinstall the extension. What the extension actually does is narrower, and does not change: it runs only on the job boards and applicant tracking systems on its site list, which is published at gliderole.com/extension-config.json and shipped inside the extension itself. It does not run on your bank, your email, or anywhere else you browse. It does not collect your browsing history, and it contains no advertising or third-party analytics code. Applying on your behalf By default the extension fills in application forms and then stops, and you press Submit yourself. The extension can be configured to submit applications for you. Every such setting is off unless you switch it on, each one gives you five seconds to cancel before anything is sent, and per-week and per-employer limits are enforced on every path. Applications submitted this way go to the employer's own application system, not to us. Removing the extension Uninstalling the extension deletes everything it stored on your device. Anything it saved to your GlideRole account remains in your account, and can be deleted there or by deleting your account as described under "Your Rights" below.

We use your information to: • Parse and analyze your resume to extract relevant skills and experience. • Generate personalized Intelligence-powered job recommendations based on your profile. • Maintain and improve your application tracking board. • Process subscription payments and manage your account. • Send transactional emails (account verification, password resets, billing receipts). • Improve our Intelligence matching algorithms and overall service quality. • Comply with legal obligations.

Our Intelligence analyzes the content of your uploaded resume solely to provide personalized job matching. Specifically: • Your resume data is processed by Intelligence models to extract structured information such as skills, experience level, and preferences. • This extracted data is compared against job listings to generate match scores. • We do not use your personal data to train Intelligence models. • We do not sell or share your resume content with employers or recruiters without your explicit consent.

We take the security of your data seriously: • All data is encrypted in transit (TLS/SSL) and at rest. • Resume files are stored in secure, access-controlled cloud storage. • Access to personal data is restricted to authorized personnel and systems. • We conduct regular security reviews and monitoring. • Passwords are hashed and never stored in plain text.

We do not sell your personal information. We share only the minimum data needed to perform each function, under confidentiality, with: • Stripe: To process subscription and credit-pack payments securely. We never receive or store your full card number. • Supabase: Our database, authentication, and file-storage provider — hosts and delivers the Service. • Anthropic and Google: Process the resume and job text you submit to generate matches, tailored documents, and other Intelligence outputs. Neither uses your data to train their own models. • Lovable: Routes our Intelligence requests to the above providers through its AI gateway at ai.gateway.lovable.dev, and sends our transactional email. • Google (speech recognition): A separate use from the one above. Our live transcription features — the Live Interview Assistant, the live co-pilot, meeting transcripts, voice commands and voice onboarding — use your browser's built-in speech recognition. In Chrome, that feature uploads the captured audio to Google to turn it into text. That capture can include other people's voices, which is why we ask you to confirm you have their consent before it starts. • Sentry: Receives error and crash reports, and browser security-policy violation reports, so we can find and fix faults. This runs in every build. Crash reports carry error details and a URL with its query string and fragment stripped, not your resume or account data. • Firecrawl (api.firecrawl.dev): When you give us a job URL, or when we search for job postings, Firecrawl fetches the page text on our behalf. It receives the URL, or the search terms we build from your target role and location — not your resume or your contact details. • SendGrid (Twilio): Receives mail sent to your @inbox.gliderole.com forwarding address — sender, subject, body and any attachments, including résumés — and posts it to us so we can file it against your tracker or your organization's candidate inbox. Inbound only; it is not used to send our email. • IP-geolocation providers (ipapi.co and ipwho.is): Resolve an approximate location (country/region/city) from your IP address, used for market and currency defaults and visit analytics. • Legal Authorities: When required by law, regulation, or valid legal process. None of these providers is authorised to use your data for their own purposes.

We use essential cookies to: • Maintain your login session and authentication state. • Remember your preferences (e.g., theme selection, active account). These run regardless of the choice on our cookie banner — they're required for the Service to function. Page-view analytics (which pages you visit, referrer, approximate location) is optional: it only runs after you choose "Accept all" on the cookie banner, never before, and never if you choose "Essential only." You can change your choice at any time by clearing it in your browser. No personally identifiable information is shared with analytics providers.

Recording a mock interview or a meeting room requires an explicit action from the person recording, and every other participant in that room is shown a notice the moment it starts. Where you record a call with someone outside GlideRole (for example, a real job interview), you are responsible for obtaining their consent as required by the law of your and their location — some places require it before you may record at all.

Depending on your jurisdiction, you may have the right to: • Access the personal data we hold about you. • Correct inaccurate or incomplete information. • Delete your account and all associated data. • Export your data in a portable format. • Withdraw consent for optional data processing. • Object to certain types of processing. To exercise any of these rights, visit the Settings page or contact our support team.

• Active accounts: We retain your data for as long as your account is active. • Deleted accounts: Requesting deletion from Settings removes your personal data — including resumes, profile information, and application history — from the live product at the time of the request. The backup copies of your files are removed as part of the same erasure, not left to age out on the backup schedule. Your authentication record is then purged after a 30-day grace period, which exists so an accidental or disputed deletion can be raised before the account is gone for good. This is separate from suspending an account for a Terms violation, where the account record is kept (not deleted) for audit purposes. • Billing records: We may retain billing transaction records as required by applicable tax and financial regulations.

GlideRole is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email or an in-app notice. Your continued use of the service after changes take effect constitutes acceptance of the updated policy.

If you have any questions or concerns about this Privacy Policy or our data practices, including how the browser extension handles your data, email us at support@gliderole.com, call +1 (469) 536-4259, or use the support options available in the application.