Privacy

Privacy at RoleFinder

RoleFinder reads your CV once, keeps only what it needs to match you to jobs, and lets you delete everything from Settings. This page says exactly what that means. Last updated 29 October 2026.

Who runs RoleFinder

RoleFinder (jobs.urbanodx.com) is run by Urbano DX, a one-person software business in Poland, which decides how your data is used. Write to urbano@urbanodx.com about anything on this page. This page covers RoleFinder only; the Urbano DX website has its own policy.

Browsing without an account

You can search and read every job without signing in. Our servers and Cloudflare, which sits in front of the site, keep standard technical logs: IP address, browser, the page requested and the time. We count page visits from those logs, without cookies or identifiers, and run no advertising or cross-site tracking.

Your browser keeps two small notes for us: your light or dark theme, and the site you first arrived from (for example chatgpt.com). The second is sent to us only if you upload a CV, so we know which channels bring people to RoleFinder.

Your CV

• When you upload a CV, we pull its text out in memory and send it once to OpenAI, through our own AI gateway, to read your roles, skills, seniority, years of experience, preferred locations and a short summary.
• Then the file and its text are discarded. We do not store your CV. We keep the profile read from it and a fingerprint of the text (a hash), which only tells us if you upload the same CV again. The fingerprint cannot be turned back into your CV.
• OpenAI does not use your CV to train its models: training is switched off on the account we use.
• Our AI gateway does not store the content of what passes through it.
• Until October 29, 2026 the CV text was also kept. That day we deleted it from our database; our backups drop it by November 5, 2026.

What we keep for your account

• Sign-in: an account ID from Google Firebase, your email address and how you sign in (Google, or email and password). Firebase holds the password; we never see it.
• Profile: what was read from your CV and the job preferences you set.
• Activity: jobs you open, save, hide or apply to, and the match lists we build for you.
• Email settings and the code in your unsubscribe link.
• Plan: free or Pro and, for Pro, your Stripe customer reference.
• Where you came from in one word (such as "chatgpt") and the last day you visited.

Who else handles your data

These companies process data for us, only to run RoleFinder:

• Google Firebase: sign-in and the account emails (verify your address, reset your password).
• OpenAI: reads your CV once. Later, only the profile read from it, never the CV, is sent to rank your matches and explain them. Model training on what we send is switched off.
• Jina AI: turns your profile (not your CV) into numbers we compare with jobs.
• Resend: sends our emails.
• Stripe: takes Pro payments. Card details go to Stripe, never to us.
• Cloudflare: delivers the site and stores our encrypted backups.
• Hetzner (Germany): hosts our AI gateway.

The RoleFinder app and its database run on our own server in Krakow, Poland. Some providers above are in the United States; transfers rely on their standard contractual clauses or the EU-US Data Privacy Framework.

We never sell your data. Employers never see your CV or profile. You apply on the employer's site, with whatever you choose to send them.

Emails

With a free account you get one email a week with new matches; Pro can add a daily digest. Every email has a one-click unsubscribe link, and Settings turns each one off.

Why we may use your data

• Reading your CV, matching jobs and running your account: to provide the service you signed up for.
• The weekly matches email: our legitimate interest in telling you about new roles that fit, with a one-click way out.
• Technical logs: our legitimate interest in keeping the site working and safe.

How long we keep it

Until you delete your account. Do it from Settings at any time: that removes your profile, CV records, saved jobs, match history and your sign-in, and cancels any subscription. Stripe keeps payment records as long as tax law requires. Deleted data can stay in our encrypted backups for up to 7 days.

Your rights

Write to urbano@urbanodx.com to get a copy of your data, correct it or delete it. Under the GDPR you can also object to processing, ask us to restrict it, take your data elsewhere, and complain to a supervisory authority (in Poland, the UODO). RoleFinder is not meant for children under 16.

Job listings

Jobs come from public employer career pages and public job boards. If you are an employer and want a listing corrected or removed, write to urbano@urbanodx.com.

Changes

When what we do with your data changes, this page and its date change with it.