Privacy Policy
Rolen™ (operated by Zaghood LLC, doing business as Rolen.ai) is committed to protecting your personal information. This Privacy Policy describes what data we collect, how we use it, and your rights.
In this policy, "Rolen," "we," "us," and "our" refer to Zaghood LLC d/b/a Rolen.ai and the Rolen™ platform. "Service" refers to the Rolen.ai website, application, and all related features.
1. Information We Collect
Information You Provide
- Name and email address when you create an account.
- Password stored as a secure bcrypt hash — we never store your password in plain text.
- Phone number (optional) if you enable SMS features.
- Resumes and professional documents that you upload or create within the Service.
- Job search preferences including target roles, locations, geographic zones, and industry preferences.
- Professional background summary generated from your resumes and reviewed by you.
Information Collected Automatically
- Usage data — pages visited, features used, and general interaction patterns within the Service.
- Log data — IP addresses, browser type, device information, and timestamps used for security and debugging.
- Passkey credentials — if you register a passkey for passwordless sign-in, we store a cryptographic credential identifier and public key associated with your device. We do not store biometric data — biometric verification happens entirely on your device.
Information from Third Parties
- Google OAuth — if you sign in with Google, we receive your name, email address, and profile picture from Google. We do not receive your Google password.
- Google Drive — if you connect Google Drive, we access your Drive solely to create, read, and sync documents within a dedicated folder structure that we create in your Drive. We store encrypted OAuth tokens to maintain this connection.
2. How We Use Your Information
We use the information we collect to:
- Create and maintain your Rolen account
- Power AI-driven job discovery, scoring, and matching
- Generate and manage cover letters and application materials
- Provide personalized job search configuration and recommendations
- Process subscriptions and token-based usage
- Send transactional messages (verification codes, account notices)
- Improve and develop our Service
- Detect and prevent fraud and abuse
- Comply with applicable legal obligations
We do not sell your personal information to third parties.
3. AI Processing
Rolen uses artificial intelligence to analyze your resumes, score job postings, generate cover letters, and provide career recommendations. When we process your data with AI:
- Your resume content and professional background are sent to our AI provider for analysis.
- AI-generated results (scores, cover letters, recommendations) are stored in your account.
- We do not use your personal data to train third-party AI models.
Our AI provider processes data under strict contractual obligations regarding data handling and confidentiality.
4. Third-Party Services
We rely on trusted third-party providers to deliver our Service:
| Provider | Purpose |
|---|---|
| OAuth sign-in and optional Drive integration | |
| Anthropic | AI-powered job analysis and content generation |
| Stripe | Payment processing |
We share only the minimum data necessary for each integration. Each provider operates under its own privacy policy.
5. Data Retention
- Active accounts — data is retained while your account remains active, including job postings, scores, resumes, and cover letters.
- Deleted accounts — personal data is removed within 30 days of account deletion. Anonymized aggregate data may be retained for analytics.
- Job postings — job posting data discovered through our Service is retained indefinitely to support historical analysis and prevent duplicate processing.
- Verification tokens — SMS and email codes expire within 10 minutes and are deleted after use.
- Passkey challenges — WebAuthn challenges expire within 5 minutes and are automatically deleted.
6. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete information
- Delete your account and associated data
- Export your data in a portable format
- Opt out of non-essential communications
To exercise any of these rights, contact us through the Service.
7. Cookies and Local Storage
We use essential cookies and local storage solely to maintain your authenticated session and remember your interface preferences (such as selected view modes and filters). We do not use third-party advertising or tracking cookies.
8. Children
Rolen is not directed at users under the age of 16. We do not knowingly collect personal information from minors. If you believe a minor has created an account, please contact us through the Service.
9. Security
We implement industry-standard safeguards including:
- HTTPS/TLS encryption for all data in transit
- Bcrypt hashing for stored passwords
- AES-256-GCM encryption for stored third-party tokens
- Secure, HttpOnly session tokens
- WebAuthn/FIDO2 for passwordless authentication
- Regular security reviews
No system is completely secure. If you discover a security vulnerability, please report it responsibly through the Service.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will post the updated version with a new effective date. For material changes, we will notify you by email or in-app notice.
Rolen™ and Rolen.ai™ are trademarks of Zaghood LLC. All rights reserved.