Privacy
Your career data is sensitive. Treat it that way.
RoleWorth stores the minimum required to operate the decision engine, the application kit, and the pipeline tracker. We do not sell job-search data. Submission to a third party never happens without your explicit approval.
Data we store
- •Profile (target roles, comp floor, locations, work modes)
- •Resume (versions you uploaded, encrypted at rest)
- •Evidence points (reusable evidence claims)
- •Jobs (postings you scored or saved)
- •Decision reports (seven-factor evaluation, rationale, confidence)
- •Application kits (resume diff, cover, DM, form answers)
- •Tracker history (stages, follow-ups, outcomes)
- •Exports (Markdown, PDF, and DOCX records; C-1 QA-backed)
Your controls
- •Download a full data archive at any time
- •Delete any resume version (and its derived kits)
- •Clear all generated drafts
- •Export documents on demand
- •Delete your account permanently
- •Disable optional analytics (we ship a flag, not a dark pattern)
FAQ
Chrome extension data handling
Review-first capture. Narrow permissions. No broad host access.
The RoleWorth Chrome extension scores job postings, builds reviewable application packages, and previews fields only where the user initiates the workflow. It does not auto-submit without explicit confirmation, does not request broad<all_urls>access, and has no broad host access beyond the listed job-board and RoleWorth domains. No third-party data sale: RoleWorth does not sell or share extension data for advertising.
| Permission | Justification |
|---|---|
| sidePanel | RoleWorth runs in Chrome's side panel so the score, package preview, and review-first guidance can sit beside the job page the user is reading. |
| activeTab | RoleWorth reads the active tab when the user opens the panel and clicks Capture this job. The background service worker also subscribes to chrome.tabs.onActivated and chrome.tabs.onUpdated so the side panel can re-check the current job page after tab changes or completed page loads; it does not read page content from unrelated tabs. |
| Greenhouse host permissions | Greenhouse hosts are used to read job posting text and preview application fields on supported review-first flows. |
| Lever host permissions | Lever hosts are used to read job posting text and preview application fields on supported review-first flows. |
| Ashby host permissions | Ashby hosts are used to read job posting text and preview application fields on supported review-first flows. |
| Workday host permissions | Workday hosts are used for job scoring and copy-paste guidance only; RoleWorth marks final submission manual-required. |
| Workable host permissions | Workable hosts are used for job scoring and copy-paste guidance only; RoleWorth marks final submission manual-required. |
| LinkedIn Jobs host permissions | LinkedIn Jobs hosts are used for job scoring and copy-paste guidance only; RoleWorth marks final submission manual-required. |
| Indeed host permissions | Indeed hosts are used for job scoring and copy-paste guidance only; RoleWorth marks final submission manual-required. |
| RoleWorth host permissions | RoleWorth hosts are used for authenticated API calls: session check, job capture, package lookup, autofill preview, review-submit gate, and privacy-filtered events. |
Requested host permissions
https://*.greenhouse.io/*https://boards.greenhouse.io/*https://job-boards.greenhouse.io/*https://*.lever.co/*https://jobs.lever.co/*https://*.ashbyhq.com/*https://jobs.ashbyhq.com/*https://*.myworkdayjobs.com/*https://*.workdayjobs.com/*https://*.workable.com/*https://apply.workable.com/*https://*.linkedin.com/jobs/*https://www.linkedin.com/jobs/*https://*.indeed.com/*https://www.indeed.com/*https://roleworth.com/*https://*.roleworth.com/*Data processing addendum
RoleWorth data handling and Chrome extension disclosure.
RoleWorth uses career-search data only to provide job scoring, proof-backed application packages, tracker history, extension capture, billing, security, support, analytics, and lifecycle communication. We do not sell career-search data.
Account data
Email address, authentication provider, plan state, usage counters, and support requests.
Career data
Profile, resume text, proof points, pasted job descriptions, scored jobs, decision reports, application kits, follow-ups, exports, and pipeline history.
Chrome extension data
Current supported job page URL, page title, selected text, job-posting content, detected ATS host, and application-field structure needed for capture, scoring, package generation, and autofill preview.
Billing data
Stripe customer, subscription, invoice, checkout, portal, coupon, and referral-credit identifiers. Card numbers are handled by Stripe, not RoleWorth.
Product analytics
Privacy-filtered events such as score_started, score_generated, checkout_started, checkout_completed, package_generated, referral_copied, and extension workflow states.
Email data
Transactional and lifecycle email events such as sent, delivered, bounced, complained, opened, clicked, and suppression status.
Chrome extension permission use
sidePanel
RoleWorth runs in Chrome's side panel so the score, package preview, and review-first guidance can sit beside the job page the user is reading.
activeTab
RoleWorth reads the active tab when the user opens the panel and clicks Capture this job. The background service worker also subscribes to chrome.tabs.onActivated and chrome.tabs.onUpdated so the side panel can re-check the current job page after tab changes or completed page loads; it does not read page content from unrelated tabs.
Greenhouse host permissions
Greenhouse hosts are used to read job posting text and preview application fields on supported review-first flows.
Lever host permissions
Lever hosts are used to read job posting text and preview application fields on supported review-first flows.
Ashby host permissions
Ashby hosts are used to read job posting text and preview application fields on supported review-first flows.
Workday host permissions
Workday hosts are used for job scoring and copy-paste guidance only; RoleWorth marks final submission manual-required.
Workable host permissions
Workable hosts are used for job scoring and copy-paste guidance only; RoleWorth marks final submission manual-required.
LinkedIn Jobs host permissions
LinkedIn Jobs hosts are used for job scoring and copy-paste guidance only; RoleWorth marks final submission manual-required.
Indeed host permissions
Indeed hosts are used for job scoring and copy-paste guidance only; RoleWorth marks final submission manual-required.
RoleWorth host permissions
RoleWorth hosts are used for authenticated API calls: session check, job capture, package lookup, autofill preview, review-submit gate, and privacy-filtered events.
External processors include Supabase for authentication and database infrastructure, Stripe for checkout and billing, Resend for email, PostHog when analytics is enabled, Sentry for error monitoring and session replay (10% prod sample), Vercel for hosting, and Cloudflare for DNS/security controls. Users can request export or deletion through Settings or support.
The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.
Product proof
See the product surface behind the claim.
Each page carries the matching RoleWorth surface in a glass-framed proof card: the radar, extension overlay, ATS matrix, review queue, dashboard, or package flow behind the promise.
The public promise, visible above the fold: score first, package second, approve before anything leaves.
Batch scan, ghost-risk skipped count, high-worth jobs, and Apply/Maybe/Skip routing in one product surface.