Your data and privacy

Your account holds your email address and password hash; the CV you imported and the structured profile built from it, contact details included; your search criteria, home postcode and commute limit; the jobs found for you and their scores; your applications and the documents generated for them; your mailbox connection details with the secret encrypted; and your billing references, credit balance and metered usage.

For connected mail, what is kept per message is the sender, the subject, a short preview, the time it arrived and what Rolehound decided it meant — not the body. The security page sets all of this out in full, including the parts that are broader than people assume, and is the better read if you want the detail.

Every record carries the id of the account that owns it, and the filter that enforces that fails closed — with no signed-in account resolved it matches nothing rather than everything.

The audit trail

The Audit page in your account lists what has run on it and when, newest first, filtered by area: ingestion, scoring, profile, application and email. It is the place to look when you want to know why something changed — which pass touched a job, when an application moved, what the mailbox sync did on its last run.

What you can remove yourself

Two of the more sensitive things are yours to clear whenever you like. Disconnect on the Mailbox tab removes the stored connection and its encrypted secret. Clear on the Billing page removes your stored AI provider key. Neither needs anyone's help.

Export and erasure

There is no export-everything button and no delete-my-account button. Being straight about that is more useful than implying otherwise: both are done by asking whoever runs this instance, who will handle the request directly.

Some of it you can take with you today without asking. Generated CVs and cover letters download as PDFs from the application they belong to, and Download statement on the Billing page produces your payment history as a document. Anything beyond that — a full copy of your data, or its removal — is a request to the operator.

Removing an account removes it. Nothing in the erasure route is reversible, so ask for an export first if you want to keep anything.