Privacy Policy
At getArole, your data ownership, resume privacy, and control over AI-generated profiles are fundamental principles. This policy explains what information we collect, how our matching algorithms process it, and how you retain full control over your personal data.
Sections
We strictly do not use candidate resume uploads, contact details, or job application dossiers to train public AI foundation models.
1. Information We Collect
When you interact with getArole, we collect information you provide directly to deliver semantic job matching and resume optimization services:
- Account Identifiers: Name, verified email address, phone number, and Firebase authentication tokens.
- Career Information: Uploaded resume files (PDF, DOCX), employment history, academic qualifications, portfolio URLs, and declared skills.
- Job Preferences: Target compensation ranges, preferred work locations (e.g. Remote, Bengaluru, Hyderabad), and roles.
- Telemetry & Usage Logs: Anonymous IP address, browser User-Agent, and SRE request duration logs retained for up to 30 days.
2. AI & Resume Parsing Ethics
Our automated parsing processes convert PDF documents into structured JSON objects using dedicated PyMuPDF and FastEmbed vector embeddings:
Match percentages are computed via deterministic cosine vector similarity (BAAI/bge-small-en-v1.5) and validated lexical overlap. We do not use proprietary opaque black-box models to disqualify candidates.
3. Your Data Protection Rights
Under the European Union General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA), you retain full sovereignty over your information:
| Right | What It Means | How to Exercise |
|---|---|---|
| Right of Erasure (GDPR Art. 17) | Permanently purge your account, uploaded resumes, and application history. | Via Profile Settings or emailing privacy@getarole.com |
| Right of Access (GDPR Art. 15) | Receive a machine-readable JSON copy of all data stored about you. | Available in Profile Settings with 1-click export |
| Do Not Sell My Info (CCPA) | getArole does not sell candidate data to third-party data brokers. | Enforced by default |
4. Security & Encryption Standards
We implement enterprise security defenses to safeguard your personal documents:
- AES-256 encryption at rest for all database tables and resume archives.
- TLS 1.3 encryption in transit across all HTTP/REST and WebSocket connections.
- Sliding-window IP rate limiting to prevent credential stuffing and enumeration attacks.
- OWASP Top 10 automated security regression test suites executed prior to every code release.
5. DPDP Act 2023 Compliance & Grievance Redressal
Under India’s Digital Personal Data Protection Act (DPDP Act 2023), you are designated as a Data Principal with enforceable rights of consent withdrawal, grievance redressal, and data erasure.
6. Contact Our Data Protection Team
If you have any questions or wish to file a data deletion request, please reach out to:
Data Protection Officer, getArole Engineering
Bengaluru, Karnataka, India