Privacy Policy

Last updated: 10 October 2026

RoleRadar AI ("we", "us", "our") operates the website at roleradarai.com. This policy explains what personal data we collect, why we collect it, how we use it, and your rights regarding that data under Singapore's Personal Data Protection Act (PDPA) and applicable data protection regulations.

1. Data we collect

We collect the following personal data:

• Account credentials — full name and email address (via Google OAuth or magic link).
• Candidate profile & preferences — target roles, location (inside/outside Singapore), and optional salary bands.
• Resume data — uploaded resume files (PDF, DOCX, TXT) and extracted career details (work history, skills, education, achievements).
• Usage & application records — saved searches, tracked applications, and interview feedback reports you submit.

Direct identifier scrubbing: National ID numbers (Singapore NRIC/FIN), passport numbers, credit card patterns, and full dates of birth are automatically scrubbed from resume text upon upload before storage and matching.

2. How we use your data

• To parse resume skills, qualifications, and work history into a structured profile.
• To match you against verified live Singapore job listings using semantic and hybrid retrieval.
• To calculate evidence-based fit scores, identify evidence gaps, and verify ATS parse-through readability.
• To deliver relevant job alerts and service updates you have requested.
• To improve matching algorithms in aggregate (no personal identifiers exposed).

2.1 Artificial Intelligence and Automated Processing

RoleRadar AI uses automated natural language processing and large language model (LLM) inference to analyze job descriptions and candidate resumes. This processing:

• Extracts concrete skill spans and verifies character-level evidence citations against role requirements.
• Distinguishes evidence gaps (unmentioned experience) from skill gaps (unacquired experience).
• Provides decision-support recommendations to candidates and employers. It does not make automated hiring decisions or legally binding employment determinations.

3. What we do not do

• We do not sell your personal data to third parties.
• We do not share your resume with any employer without your explicit action.
• We do not send marketing emails beyond early-access updates unless you opt in.
• We do not pass direct contact details (email or phone) to external AI models during extraction.

4. Data storage and security

Your core account and profile data are stored on encrypted infrastructure located in Singapore (Supabase, AWS Lightsail ap-southeast-1). Access is restricted to authorised personnel through multi-factor authentication. Data is encrypted in transit (TLS 1.3) and at rest (AES-256).

4.1 Cross-Border Transfers & AI Processing (PDPA S26)

Under Section 26 of Singapore's PDPA (Transfer Limitation Obligation), personal data may only be transferred outside Singapore if the recipient provides a standard of protection comparable to the PDPA.

To provide AI parsing, embeddings, and fit scoring, scrubbed career text (with NRIC, passport, contact, and account identifiers removed) is processed via secure cloud inference endpoints operated by our infrastructure and model partners (such as NVIDIA, Google Cloud, Groq, or Anthropic), located primarily in the United States. These transfers are conducted under contractual safeguards (Data Processing Addendums) or your explicit informed consent when initiating AI matching.

For candidates or organizations requiring full data localization, RoleRadar AI supports local model execution (via Ollama or self-hosted vLLM) and Bring Your Own Key (BYOK) architecture, keeping inference within your controlled perimeter.

5. Data retention

We retain your resume and account data for as long as your account remains active. If you pause matching, searches halt while your profile remains stored. You can delete individual resumes or your entire account at any time from the Account settings page. Account deletion triggers a 30-day grace window, after which all personal data is permanently purged from active systems.

6. Your rights

Under the PDPA and applicable privacy laws, you have the right to:

• Access: Request a full export of your personal data held by us (available self-service in Account settings).
• Correction: Request correction of inaccurate or outdated data.
• Deletion: Request complete deletion of your account and associated resumes.
• Consent withdrawal: Grant or withdraw individual consent purposes (e.g. matching, cross-border AI transfer, cookies) at any time.

To exercise any of these rights, use the in-app controls or email our Data Protection Officer at dpo@roleradarai.com.

7. Cookies

We use essential cookies for authentication and optional analytics cookies with your consent. See our Cookie Policy for details.

8. Third-party services and sub-processors

We engage vetted third-party service providers for hosting, authentication, database storage, email delivery, and AI inference. These processors handle data only as instructed by us and are subject to contractual confidentiality and data protection standards.

A current list of third-party processors, their locations, and data scopes is published on our Sub-processors page.

9. Changes to this policy

We may update this policy as the product evolves. Material changes will be communicated via email to registered users. The "Last updated" date at the top reflects the most recent revision.

10. Data Protection Officer

Under Singapore's Personal Data Protection Act (PDPA), we appoint a Data Protection Officer as the accountable contact for any PDPA request — access, correction, deletion, withdrawal of consent, or breach enquiry.

• Email: dpo@roleradarai.com
• Response SLA: 30 calendar days from receipt.

For a list of third-party processors that handle your personal data, see our sub-processors page.

11. General contact

For product questions unrelated to data protection, contact us at team@roleradarai.com.