Privacy
Your career data is sensitive. Treat it that way.
RoleWorth stores the minimum required to operate the decision engine, the application kit, and the pipeline tracker. We do not sell job-search data. Submission to a third party never happens without your explicit approval.
Data we store
- •Profile (target roles, comp floor, locations, work modes)
- •Resume (versions you uploaded, encrypted at rest)
- •Evidence points (reusable evidence claims)
- •Jobs (postings you scored or saved)
- •Decision reports (seven-signal evaluation, rationale, confidence)
- •Application kits (resume diff, cover, DM, form answers)
- •Tracker history (stages, follow-ups, outcomes)
- •Exports (Markdown, PDF, and DOCX records; C-1 QA-backed)
Your controls
- •Download a full data archive at any time
- •Delete any resume version (and its derived kits)
- •Clear all generated drafts
- •Export documents on demand
- •Delete your account permanently
- •Disable optional analytics (we ship a flag, not a dark pattern)
FAQ
Chrome extension data handling
Review-first capture. Narrow permissions. No broad host access.
The RoleWorth Chrome extension scores job postings, builds reviewable application context, and previews actions only where the user initiates the workflow. It stops unsupported flows at manual guidance, does not request broad<all_urls>access, and has no broad host access beyond the listed job-board and RoleWorth domains. No third-party data sale: RoleWorth does not sell or share extension data for advertising.
| Permission | Justification |
|---|---|
| sidePanel | RoleWorth runs in Chrome's side panel so the score, capture review, and guidance can sit beside the job page the user is reading. |
| activeTab | RoleWorth reads the active tab when the user opens the panel and clicks Capture this job. The background service worker also subscribes to chrome.tabs.onActivated and chrome.tabs.onUpdated so the side panel can re-check the current job page after tab changes or completed page loads; it does not read page content from unrelated tabs. |
| Greenhouse host permissions | Greenhouse hosts are used to read job posting text and prepare capture, scoring, tracker, and review actions. |
| Lever host permissions | Lever hosts are used to read job posting text and prepare capture, scoring, tracker, and review actions. |
| Ashby host permissions | Ashby hosts are used to read job posting text and prepare capture, scoring, tracker, and review actions. |
| Workday host permissions | Workday hosts are used for job scoring and copy-paste guidance only; RoleWorth marks final submission manual-required. |
| Workable host permissions | Workable hosts are used for job scoring and copy-paste guidance only; RoleWorth marks final submission manual-required. |
| LinkedIn Jobs host permissions | LinkedIn Jobs hosts are used for job scoring and copy-paste guidance only; RoleWorth marks final submission manual-required. |
| Indeed host permissions | Indeed hosts are used for job scoring and copy-paste guidance only; RoleWorth marks final submission manual-required. |
| RoleWorth host permissions | RoleWorth hosts are used for authenticated API calls: session check, job capture, score, tracker save, package lookup, review gates, and privacy-filtered events. |
Requested host permissions
https://*.greenhouse.io/*https://boards.greenhouse.io/*https://job-boards.greenhouse.io/*https://*.lever.co/*https://jobs.lever.co/*https://*.ashbyhq.com/*https://jobs.ashbyhq.com/*https://*.myworkdayjobs.com/*https://*.workdayjobs.com/*https://*.workable.com/*https://apply.workable.com/*https://*.linkedin.com/jobs/*https://www.linkedin.com/jobs/*https://*.indeed.com/*https://www.indeed.com/*https://roleworth.com/*https://*.roleworth.com/*Data processing addendum
RoleWorth data handling and Chrome extension disclosure.
RoleWorth uses career-search data only to provide job scoring, proof-backed application packages, tracker history, extension capture, billing, security, support, analytics, and lifecycle communication. We do not sell career-search data.
RoleWorth may use product activity, feedback, outcome updates, and de-identified or aggregated patterns to improve Worth Score, job ranking, ghost-risk detection, application-package quality, follow-up guidance, product safety, and market benchmarks. We avoid sending raw resume text, raw job descriptions, or private notes through analytics events.
Account data
Email address, authentication provider, plan state, usage counters, and support requests.
Career data
Profile, resume text, proof points, pasted job descriptions, scored jobs, decision reports, application kits, follow-ups, exports, pipeline history, and outcome updates you choose to record.
Chrome extension data
Current supported job page URL, page title, selected text, job-posting content, detected host, and page structure needed for capture, scoring, tracker review, and manual guidance.
Billing data
Stripe customer, subscription, invoice, checkout, portal, coupon, and referral-credit identifiers. Card numbers are handled by Stripe, not RoleWorth.
Product analytics
Privacy-filtered events such as score_started, score_generated, checkout_started, checkout_completed, package_generated, referral_copied, builder feedback, follow-up activity, and extension workflow states.
Product improvement signals
Optional feedback, score-accuracy reports, outcome updates, ghost-job reports, salary/employer signals, and usage patterns such as saves, skips, stage changes, and generated-output feedback. These help improve scoring, ranking, recommendations, templates, abuse prevention, and aggregate market insights.
Email data
Transactional and lifecycle email events such as sent, delivered, bounced, complained, opened, clicked, and suppression status.
Chrome extension permission use
sidePanel
RoleWorth runs in Chrome's side panel so the score, capture review, and guidance can sit beside the job page the user is reading.
activeTab
RoleWorth reads the active tab when the user opens the panel and clicks Capture this job. The background service worker also subscribes to chrome.tabs.onActivated and chrome.tabs.onUpdated so the side panel can re-check the current job page after tab changes or completed page loads; it does not read page content from unrelated tabs.
Greenhouse host permissions
Greenhouse hosts are used to read job posting text and prepare capture, scoring, tracker, and review actions.
Lever host permissions
Lever hosts are used to read job posting text and prepare capture, scoring, tracker, and review actions.
Ashby host permissions
Ashby hosts are used to read job posting text and prepare capture, scoring, tracker, and review actions.
Workday host permissions
Workday hosts are used for job scoring and copy-paste guidance only; RoleWorth marks final submission manual-required.
Workable host permissions
Workable hosts are used for job scoring and copy-paste guidance only; RoleWorth marks final submission manual-required.
LinkedIn Jobs host permissions
LinkedIn Jobs hosts are used for job scoring and copy-paste guidance only; RoleWorth marks final submission manual-required.
Indeed host permissions
Indeed hosts are used for job scoring and copy-paste guidance only; RoleWorth marks final submission manual-required.
RoleWorth host permissions
RoleWorth hosts are used for authenticated API calls: session check, job capture, score, tracker save, package lookup, review gates, and privacy-filtered events.
External processors include Supabase for authentication and database infrastructure, Stripe for checkout and billing, Resend for email, PostHog when analytics is enabled, Sentry for error monitoring and session replay (10% prod sample), Vercel for hosting, and Cloudflare for DNS/security controls. Users can request export or deletion through Settings or support.
The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.