Privacy policy

RoleCarta is operated by “App Box” LTD, Bulgaria. We store your account details, resume text, job descriptions, generated documents, practice answers and application notes to provide your workspace. Raw uploads are discarded after extraction. We send the necessary resume and vacancy text to OpenAI when you request AI processing; API requests use store=false. This does not mean zero provider retention: provider abuse-monitoring policies may apply. Firebase verifies Google sign-in, Stripe handles payments, Cloudflare provides delivery, security and transactional email, and our hosting is in Germany. Optional Google Analytics loads only after consent. We do not send resume contents, answers, names or emails to Analytics. You can export and delete your workspace from account settings. Guest documents expire after 7 days; account documents stay until you delete them. Encrypted backups are retained for 14 days. Payment providers may retain financial records as legally required. Contact support@rolecarta.com for privacy requests.