Privacy Policy

Last updated: 17 July 2026 · Beta version. This policy describes how RoleReply processes personal data under the GDPR and applicable Swiss/Kosovar data-protection law.

Who we are

RoleReply is operated by [OWNER: full legal name / company], [OWNER: address], contact: [OWNER: email] (the “controller”).

What we process, and why

Account data (name, email, hashed password) — to operate your account. Legal basis: contract performance.

Your CV text, job descriptions, and company notes — solely to build your practice interviews and feedback reports. Passed to our AI provider (OpenAI) as processing input for your session; never used to train models, never sold, never used for any other purpose. Legal basis: contract performance.

Interview audio and transcripts — your voice is streamed directly from your browser to OpenAI's realtime service to conduct the interview; our servers receive the text transcript, which is the basis of your feedback report. Audio is not recorded or stored by us unless you explicitly opt in to recording (feature not yet enabled in beta). Legal basis: contract performance.

Payment data — handled entirely by Stripe; we never see card numbers. We store your credit balance and transaction history. Legal basis: contract performance and legal obligations.

Technical logs — IP addresses and request metadata for security (rate limiting, abuse prevention), retained briefly. Legal basis: legitimate interest.

Processors we use

OpenAI (interview AI — API data is not used for model training per OpenAI's API terms), Stripe (payments), Cloudflare (network security/CDN). Server hosting: [OWNER: hosting location statement].

Retention

Interview transcripts are automatically deleted after 365 days; any opt-in recordings after 30 days. You can delete any individual interview, or your entire account with all data, at any time from within the app — deletion is immediate and irreversible.

Your rights

You have the right to access, rectify, delete, and export your data, to restrict or object to processing, and to lodge a complaint with a supervisory authority. Deletion and access are self-service in the app (Account page); for anything else contact [OWNER: email].

Cookies & local storage

We use no advertising or tracking cookies. Your browser's local storage holds only your login token and language preference — both strictly functional.

This page is provided in English during the beta; Albanian and German versions will follow.