Privacy Policy

1. What RolePathways is

RolePathways is a career intelligence and navigation platform. You tell us where you are and where you want to go; we build and maintain a personalised Pathway (a score, a set of gaps, a route, and an action plan) from your career profile and your stated destination.

2. What we collect

You give us directly:

• Account details: name, email, password (via Supabase Auth).
• Career profile: employment history, education, credentials, skills, achievements, and anything extracted from an uploaded CV/résumé (PDF or DOCX).
• Destination data: target role, timeframe, compensation aspiration, location, industry, lifestyle preferences.
• Target-person input: a name, profile URL, or bio you supply for the “career like this person” feature.
• Network contacts: people you add by hand, or select from a LinkedIn connections export you upload. Only the ones you tick are stored. See section 5.
• Reputation items: talks, articles, awards and media you record.
• Payment information: collected and processed directly by Stripe. We do not store your card details ourselves.
• Anything you type to the AI Pathway Strategist.

We generate from what you give us:

• Career Capital scores (Experience, Skills, Credentials, Leadership, Network, Reputation, Market), gaps, a Pathway Route, and an action plan.
• Usage and product-analytics events, to understand what’s working.

3. How we use it

• To generate and maintain your Pathway Score, gaps, route, and action plan.
• To produce your Pathway Blueprint if you purchase one.
• To power the AI Pathway Strategist’s answers to your questions.
• To research publicly available, compliantly-sourced information for a target person or benchmark cohort you ask us to analyse.
• To process payments and manage your subscription.
• To improve the product, in aggregate wherever practical.
• To communicate with you: verification, receipts, service updates, and, only with consent, marketing.

We do not sell your personal data.

4. AI processing

Career analysis, gap explanation, and Blueprint narrative generation are produced with a third-party AI model provider (currently Anthropic). Relevant parts of your career profile and destination are sent to that provider to generate your results. We do not send payment details to the AI provider. Every AI-generated recommendation distinguishes fact, inference, and recommendation, and shows a confidence level. We do not present inferred content as guaranteed fact about you or any third party.

5. Researching other people

When you ask RolePathways to analyse a named target person or generate a benchmark cohort, we draw only on sources classified as commercially and legally appropriate: official biographies, public company/government pages, professional association listings, conference materials, public filings, and similar. We do not build the product around automated scraping of platforms whose terms prohibit it (for example, LinkedIn).

Uploading a connections export

You can upload the Connections.csv file from your own LinkedIn data archive so we can help you work out who in your network can help you reach your destination. That file describes other people, most of whom have no relationship with us and have not agreed to us holding their details, so we handle it more narrowly than the rest of your data:

• We keep only the people you pick. The file is read in memory, sorted by who is most relevant to your destination, and shown to you for selection. Rows you don’t tick are never written to our database at all. The uploaded file itself is not retained.
• We store a name, job title and employer for each contact you keep, enough to tell a recruiter from an executive. We do not store their email address, phone number or profile URL from the export.
• There is a hard limit on how many contacts you can keep, because an address book is not a professional network and scoring it as one would be misleading.
• Your contacts are yours alone. They are never pooled with other users’ data, never used to build benchmark cohorts, never shown to another account, and never sold. We do not contact them, and uploading a file does not cause anyone to hear from us.
• They are not sent to our AI provider. Working out who is a recruiter, an executive or a peer is done by rules running on our own servers.
• Deleting a contact removes it immediately, and deleting your account removes all of them along with everything else.

If you are subject to the GDPR or a similar regime, you are the controller of the contact data you choose to upload, and we process it on your behalf for the purposes described above.

6. Third parties we share data with

We do not share your data with advertisers or data brokers.

7. International data transfers

Some processors above may store or process data outside Australia. Where that happens, we rely on the processor’s own compliance mechanisms (e.g. standard contractual clauses).

8. Analytics

We track product usage (signup, onboarding completion, feature use, conversion events) to understand what’s working and fix what isn’t. It’s used in aggregate for product decisions, not to build an advertising profile of you.

9. Your rights

• Access: request a copy of the personal data we hold about you.
• Correct: edit your profile directly, or ask us to fix something you can’t.
• Export: download everything we hold about you as a single JSON file, from Account → Your data. No request needed.
• Delete: permanently delete your account and everything in it, from the same place. If you have an active subscription we cancel it first, so you are not charged again. We keep a de-identified record of past payments (the amount, the product and the payment reference, with no name, email or account reference) because tax and dispute rules require it. Nothing in that record identifies you.
• The separate “delete profile data” control removes your saved profile fields only. It does not close your account, and it says so.
• Withdraw consent: for anything requiring separate consent, at any time.

Export and deletion are self-serve in your account settings. Anything else can be requested by contacting us.

10. Data retention

We retain your data for as long as your account is active, plus a limited period after deletion to satisfy legal, tax, and dispute-resolution obligations. In practice that means one thing: a de-identified payment record (amount, product, payment reference, date) with no name, email or account reference attached. Everything else is deleted outright: profile, career history, destination, assessments, gaps, route, action plan, network contacts, reputation items and your login. Backup purges follow our infrastructure provider’s standard cycle.

11. Security

We use industry-standard measures: encryption in transit (TLS), encrypted credential storage, database-level row security so you can only access your own records, least-privilege access, and secret management for API keys. No system is perfectly secure; we will disclose material breaches as required by law.

12. Children

RolePathways is not directed at, and should not be used by, anyone under 18.

13. Changes to this policy

We’ll update the effective date and, for material changes, notify active users directly.

14. Contact

hello@rolepathways.com