RoleReady privacy policy

Last updated: October 4, 2026

Design X Develop LLC operates RoleReady. This policy explains how we handle information when you use our website or connect an AI assistant to RoleReady.

Information we handle

We handle account details such as your name, email, sign-in credentials and sessions; resumes, career facts, job postings, answers, approved edits and saved drafts you provide; optional public GitHub profile information you choose to import; and support messages. We also handle subscription status, payment-provider identifiers, usage counts, connection permissions and technical information used to operate and protect the service.

Please avoid uploading government identifiers, financial account details, health information, or personal information about other people that is unnecessary for your resume.

How we use information

We use this information to manage your account, map and review career evidence, generate and export tailored resumes, maintain your saved work, process billing, respond to support requests and prevent abuse. RoleReady does not submit applications to employers. Employer research is kept separate from your career evidence.

Service providers and connected assistants

Cloudflare hosts the service and its database. Model-backed generation and evidence review send submitted resume, evidence, job, answer and draft content to OpenRouter and the selected model provider, and to TypeSafe (Jev) for model-backed assessment of improvements, gap answers and evidence suggestions. Those providers process requests under their own policies; this policy does not promise how a third-party model provider retains data.

Optional services include Stripe for payments, Resend for sign-in emails, Google for sign-in, GitHub for public profile imports, and Exa and TypeSafe for public employer research. RoleReady stores billing status and identifiers rather than full payment-card numbers. Providers receive the information needed for the features you use.

When you connect Claude, ChatGPT, Codex or another assistant through MCP, that assistant can receive and act on account information within the permissions you approve. Your conversations, attachments and exported files may also be handled by that assistant's provider under its own policy. Disconnect an app from Account → Connected apps to stop further RoleReady access; this does not erase information already received by the assistant.

Storage and retention

Signed-in career profiles, confirmed evidence, job postings, drafts, review state, saved employer research and generation requests are stored in our database until you delete the account. Individual saved drafts, postings and bases do not currently have a deletion control; archiving a base keeps its content available for restoration. Public-demo and guest workspace content is kept in the browser for that workflow; model requests still send the submitted content to OpenRouter, the selected model provider and TypeSafe for the model-backed features used. If you choose to continue demo work in an account, this tab retains a temporary copy for up to 30 minutes. You choose what to import before it becomes saved account content. Usage and abuse-prevention records may be stored separately.

MCP file bytes are parsed without being stored as original files. Temporary extracted imports and cached tool results expire after 24 hours, with physical cleanup on requests and a scheduled cleanup. Upload credentials expire after 15 minutes. Non-content identifiers, hashes, idempotency receipts and generation receipts are kept until account deletion to prevent duplicate writes or charges. OAuth client registrations, consent, token and connection records support connected assistants; disconnecting revokes access, and account deletion removes account-linked authorization records. Client registration metadata may remain independently of an account. Saved account content follows the normal account retention described above.

Billing, security, support and operational records may be retained when needed for their purpose, resolving disputes or legal obligations. Third-party systems may retain their own records independently.

Cookies and browser storage

We use cookies and browser storage for sign-in, access controls, preferences and workflow continuity. Cloudflare Turnstile may process technical information for abuse prevention. Blocking essential storage can prevent sign-in or other features from working.

Your choices

You can review and edit career evidence, export resumes, disconnect assistants and delete your account in the app. Contact austin@designxdevelop.com to request access, correction or deletion, or ask about information you cannot manage in the interface. We may verify account ownership before acting. Rights and available exceptions depend on applicable law.

Security, children and changes

We use account authentication, permission checks and other safeguards to limit access. No service can guarantee absolute security. RoleReady is intended for people managing their careers and is not directed to children under 13. Contact us if you believe a child has provided personal information.

We may update this policy as the service changes and will revise the date above. For questions, contact Design X Develop LLC at austin@designxdevelop.com.