Privacy Policy

1. Who is responsible

RoleDawn (operated by an independent developer) is responsible for the personal data described in this policy ("we", "us"). You can reach us about privacy at any time through https://roledawn.com/contact.

2. Job posting data (not personal data about candidates)

RoleDawn uses only job postings that companies publish publicly on their applicant tracking system (ATS) job boards — such as job title, department, location, posting date and the link to the original posting. We do not scrape LinkedIn, and we do not collect, enrich or sell personal contact details (names, emails or phone numbers) of employees, recruiters or candidates.

3. Data we collect about our users

• Account data: your email address, sign-in timestamps, plan, trial and subscription status.
• Monitor settings: monitor names, selected role families, locations, title keywords and company watch-lists you configure.
• Delivery settings: whether you receive the email digest, and the Slack incoming-webhook URL you provide (which we use only to post your digests to Slack).
• Billing records: identifiers and status information that Dodo Payments sends us about your subscription (for example customer and subscription IDs, plan and renewal status). We never receive or store your full card number or payment credentials.
• Support messages: the email address, optional name, topic and message you send through our contact form, plus a salted one-way hash of your IP address used only for spam and rate limiting.
• Technical data: standard server logs (such as IP address, user agent, requested URL and errors) processed by our hosting provider for security and reliability.

We do not use advertising trackers or third-party analytics cookies.

4. How we use data and legal bases

• To provide the Service — sign-in, monitors, digests by email and Slack, CSV exports (performance of a contract).
• To manage trials, subscriptions and billing together with Dodo Payments (performance of a contract; legal obligations for tax and accounting records).
• To answer support requests (performance of a contract or our legitimate interest in helping users).
• To keep the Service secure, prevent abuse and fix problems (legitimate interests).
• To send essential service emails, such as sign-in links, digests you enabled and notices about changes to these policies (performance of a contract). We do not send marketing emails without your consent.

5. Service providers (processors)

We share data only with providers that help us run the Service, under their data-processing terms:

• Cloudflare — hosting, database (Cloudflare Workers and D1), network security and logs.
• Resend — delivery of sign-in emails and email digests (your email address and email content).
• Dodo Payments — checkout, payment processing, invoicing and tax as our Merchant of Record. When you pay, Dodo Payments collects your payment and billing details directly under its own privacy policy.
• Slack — only if you add a Slack webhook; digests are posted to the Slack workspace you choose.

We do not sell or rent personal data, and we do not share it for cross-context behavioural advertising. We may disclose data if required by law or to protect our rights and users.

6. International transfers

Our providers may process data in countries other than yours, including the United States. Where required, transfers rely on appropriate safeguards such as the providers' Standard Contractual Clauses.

7. Cookies

We use only strictly necessary cookies:

• a session cookie that keeps you signed in (HTTP-only, up to 30 days, removed when you log out);
• a CSRF protection cookie on the contact form (HTTP-only, about 2 hours).

We do not use advertising, tracking or analytics cookies, so no cookie consent banner is needed.

8. Retention

We keep account data, monitors and delivery settings while your account exists. Sign-in links expire after 20 minutes; sessions expire after 30 days. Support messages are kept as long as needed to handle your request and for a reasonable period afterwards. Billing records may be retained as required for tax and accounting purposes (mostly by Dodo Payments as Merchant of Record). When you delete your account, we delete or anonymize your personal data within 30 days, except where we must keep it by law.

9. Your rights (GDPR, UK GDPR, CCPA/CPRA)

Depending on where you live, you may have the right to:

• access the personal data we hold about you and receive a portable copy;
• correct inaccurate data;
• delete your data and account;
• restrict or object to certain processing, and withdraw consent where processing is based on consent;
• under the CCPA/CPRA, know what categories of personal information we collect and why, request deletion and correction, and not be discriminated against for exercising your rights. We do not sell or "share" personal information as defined by the CCPA;
• lodge a complaint with your local data-protection authority.

How to exercise your rights or delete your account: send a request through https://roledawn.com/contact (choose the "Something else" topic) from, or mentioning, the email address of your account. We may verify the request by emailing that address. We respond within 30 days (or the period required by applicable law). Deleting your account also stops all digests; if you have an active subscription, please cancel it first so that it does not renew.

10. Security

We use HTTPS everywhere, passwordless one-time sign-in links, HTTP-only cookies, CSRF protection and least-privilege access to production data. No method of transmission or storage is completely secure, but we work to protect your data and will notify you of a breach where required by law.

11. Children

The Service is for business use and is not directed to children under 16. We do not knowingly collect their personal data.

12. Changes to this policy

We may update this Privacy Policy. We will post the new version here with a new "Last updated" date and, for material changes, notify you by email or in the dashboard.

13. Contact

RoleDawn (operated by an independent developer). Privacy questions and requests: https://roledawn.com/contact.