Security

• Collect only the data we need to provide the product
• Treat resume and career data as sensitive by default
• Use reputable infrastructure and third-party providers
• Be transparent about what we do and do not do yet

Your resume, target roles, and application history say a lot about you. We treat this information as sensitive and use it only to provide the features you ask for, such as analyzing a role or generating tailored materials.

Accounts use secure authentication, and you stay in control of your data. You can update your profile and request deletion of your account data. We continue to harden these systems as the product grows.

Data sent between your browser and RoleSprint is encrypted in transit using HTTPS. We apply protections appropriate to the data we hold.

We follow the principle of least privilege. Access to systems and data is limited to what is needed to operate and support the product, and we aim to keep that access tight as the team and product grow.

Billing is handled by a third-party payment provider, which processes payment details under its own security practices. RoleSprint does not store your full payment card details.

We aim to collect the minimum data needed, retain it only as long as useful, and give you ways to access or delete your information. Our Privacy Policy covers data use and retention in more detail.

If you discover a security issue, we want to hear about it. Please email hello@rolesprint.io with the details and we will look into it. We appreciate responsible disclosure and ask that you give us a reasonable chance to address an issue before sharing it publicly.

We want to be clear about our current stage. As of today, RoleSprint does not claim:

• SOC 2, ISO 27001, HIPAA, or PCI certification
• Formal third-party security audits or penetration tests
• Compliance certifications under specific privacy regulations

We will update this page as our security program matures and as any of these change.