1 Introduction
Role Garden LLC ("Role Garden," "we," "us," "our") operates the Role Garden career development platform available at rolegarden.com and app.rolegarden.com (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your information.
This Privacy Policy is incorporated by reference into our Terms of Service. By creating an account or using the Service, you agree to the practices described in this Policy.
Questions? Contact us at support@rolegarden.com.
2 Information We Collect
2.1 Information You Provide Directly
- Account information: email address, name, and password (or OAuth credentials via Google or LinkedIn);
- Career Data: resume, work history, education, skills, career preferences, target roles, target industries, target companies, and location preferences;
- Generated Content: cover letters, outreach messages, interview preparation materials, and other content you create through the Service;
- Payment information: billing name and payment card details, processed by Stripe, Inc. (we do not store your full card number);
- Communications: messages you send us via email or support channels.
2.2 Information We Collect Automatically
- Usage data: pages visited, features used, search queries, clicks, and time spent;
- Device and browser information: IP address, browser type and version, operating system, and device identifiers;
- Analytics and conversion events: tracked via Google Analytics 4 and Google Tag Manager. Ad measurement pixels (Meta Pixel, Google Ads) are triggered only on specific account creation and subscription conversion events within the Service, not on general page views. See Section 7 for full details;
- Session data: authentication tokens stored in your browser via Supabase Auth.
2.3 Information from Third Parties
- OAuth providers: if you sign in with Google or LinkedIn, we receive your name, email address, and profile information from those providers;
- Job listing data: we source opportunity data from employer career pages and ATS providers (Workday, Greenhouse, Lever, Ashby) to power matching;
- Payment processor: Stripe provides payment confirmation and subscription status information.
3 How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Service, including matching your Career Data to job opportunities and generating personalized content;
- Process your Career Data through third-party AI services (currently Anthropic's Claude API) for job matching, scoring, resume analysis, cover letter generation, and interview preparation;
- Process payments and manage your subscription through Stripe;
- Send transactional emails (account confirmations, daily match notifications, billing notices) via Resend;
- Send marketing emails about Role Garden features and updates via Klaviyo (you may unsubscribe at any time);
- Measure the performance of advertising campaigns via Meta Pixel and Google Ads conversion tracking, triggered only on account creation and subscription activation events — not on general page views;
- Analyze aggregate usage patterns to improve the Service via Google Analytics 4;
- Detect and prevent fraud, abuse, and security incidents;
- Comply with legal obligations and enforce our Terms of Service.
4 How We Share Your Information
4.1 Service Providers
We share your information with third-party service providers contractually obligated to use it only as directed by us:
| Provider |
Purpose |
| Supabase Inc. | Database hosting, authentication, and storage |
| Netlify Inc. | Application hosting and content delivery |
| Anthropic PBC | AI language model processing of Career Data |
| Stripe, Inc. | Payment processing and subscription management |
| Resend | Transactional email delivery |
| Klaviyo | Marketing email and nurture sequences |
| Google (Analytics/GTM) | Usage analytics and conversion measurement |
| Meta Platforms, Inc. | Ad conversion measurement — event-based only |
| Render | API proxy server hosting |
4.2 What We Do Not Do
- We do not sell your personal information or Career Data to third parties;
- We do not share your Career Data with employers, recruiters, or job boards in personally identifiable form;
- We do not use your Career Data to train proprietary Role Garden machine learning models;
- We do not engage in general behavioral tracking or retargeting of anonymous visitors. Ad measurement pixels fire only on specific, consent-covered conversion events (account creation, subscription activation) for users who have agreed to our Terms of Service.
4.3 Legal Requirements
We may disclose your information if required by law, subpoena, or court order, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Role Garden, our users, or the public.
4.4 Business Transfers
If Role Garden LLC is involved in a merger, acquisition, or asset sale, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.
5 AI Processing and Anthropic
- Your Career Data (including resume content) is transmitted to Anthropic's servers for processing. As of the effective date of this Policy, Anthropic states it does not use API customer content to train its foundation models. We will notify you of material changes to this.
- Processed data may temporarily reside on Anthropic's infrastructure per their standard service operation practices.
- AI-generated outputs are returned to Role Garden and stored in your account on our infrastructure.
- We may change AI processing providers in the future and will update this Policy accordingly.
By creating an account, you consent to this AI processing as described in Section 7 of our Terms of Service.
6 Data Retention
- Account and Career Data: retained for the life of your account, plus up to 30 days after deletion;
- Payment records: retained as required by applicable law, typically 7 years;
- Usage logs and analytics: retained in aggregate or anonymized form for up to 24 months;
- Communications: retained up to 3 years for support and dispute resolution;
- Backup copies: may persist in encrypted backups for up to 90 days after active deletion.
You may request deletion of your account and Career Data at any time by contacting support@rolegarden.com. We will process requests within 30 days.
7 Cookies, Tracking, and Ad Measurement
7.1 Our Approach
Role Garden uses a conversion-event approach to ad measurement rather than general behavioral tracking. This means:
- Ad measurement pixels (Meta Pixel, Google Ads) fire only on specific, high-intent events — account creation and subscription activation — for users who have agreed to our Terms of Service. They do not fire on general page views or for anonymous visitors.
- By creating an account and agreeing to our Terms of Service, you consent to this conversion-event tracking as part of our service operations.
- Google Analytics 4 is used to measure aggregate usage patterns within the Service. GA4 data is associated with your account and subject to Google's privacy policies.
7.2 Cookie Types
Essential cookies (cannot be declined — required for the Service to function):
- Supabase Auth session token — maintains your authenticated session.
Analytics cookies (first-party, covered by Terms of Service acceptance):
- Google Analytics 4 — tracks aggregate usage patterns and Service performance.
Conversion measurement (event-based, covered by Terms of Service acceptance):
- Meta Pixel — fires on account creation and subscription activation events only.
- Google Ads conversion tags — fire on account creation and subscription activation events only.
7.3 Local Storage
Within the app, we use browser local storage (not cookies) to cache your career profile, search results, and session preferences. This is essential to app performance.
7.4 Opting Out
You may opt out of Google Analytics tracking at any time using the Google Analytics Opt-out Browser Add-on. To opt out of ad measurement tracking entirely, contact support@rolegarden.com or delete your account.
8 Your Rights and Choices
8.1 Access and Correction
You may access and update your account information through the Service settings at any time.
8.2 Account Deletion
You may request deletion of your account and Career Data by emailing support@rolegarden.com. We will process your request within 30 days.
8.3 Marketing Communications
You may unsubscribe from marketing emails at any time by clicking the "unsubscribe" link in any marketing email.
8.4 California Residents (CCPA/CPRA)
If you are a California resident, you have the following rights:
- Right to Know: request information about the categories and specific pieces of personal information we collect, use, and disclose;
- Right to Delete: request deletion of personal information, subject to certain exceptions;
- Right to Correct: request correction of inaccurate personal information;
- Right to Opt Out of Sale or Sharing: Role Garden does not sell personal information. Conversion-event tracking via Meta and Google may constitute "sharing" for cross-context behavioral advertising under CCPA. You may opt out by contacting support@rolegarden.com;
- Right to Limit Use of Sensitive Personal Information: to the extent your Career Data constitutes sensitive personal information under CPRA, you may request that we limit its use to what is necessary to provide the Service;
- Right to Non-Discrimination: we will not discriminate against you for exercising your CCPA/CPRA rights.
To exercise your California rights, contact support@rolegarden.com. We will respond within 45 days.
8.5 Other State Residents
Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and other states with comprehensive privacy laws have similar rights. Contact support@rolegarden.com to exercise them.
9 Data Security
We implement reasonable security measures including:
- Row-Level Security (RLS) on all Supabase database tables — users can only access their own data;
- Encrypted data transmission via HTTPS/TLS for all communications;
- Authentication via Supabase Auth with industry-standard session management;
- Payment data processed by Stripe using PCI-DSS compliant infrastructure — we never store your full card number.
No method of electronic storage is 100% secure. We cannot guarantee absolute security of your information.
10 Children's Privacy
The Service is not directed to individuals under 18. We do not knowingly collect personal information from children under 18. Contact support@rolegarden.com if you believe we have inadvertently collected such information.
11 International Users
The Service is operated from the United States and intended for US-based users. By using the Service, you consent to transfer and processing of your information in the United States.
12 Links to Third-Party Sites
The Service may link to employer career pages, job boards, and other third-party websites. This Privacy Policy does not apply to those sites.
13 Changes to This Privacy Policy
We may update this Policy from time to time. We will notify you of material changes by email or in-Service notice at least 30 days before changes take effect. Continued use after the effective date constitutes acceptance.
14 Contact Us
This Privacy Policy was last updated on July 1, 2026.