Back to RoleVault
Privacy & legal

Clear about your data and our independence.

This policy explains how RoleVault handles personal information across the website, dashboard, resume and cover-letter tools, and Chrome extension.

Effective 23 August 2026

Applies to all RoleVault services

Independent product notice

RoleVault is an independent product and is not affiliated with, endorsed by, sponsored by, approved by, or operated by SEEK Limited or any member of the SEEK Group. SEEK and its associated names, logos, and trade marks belong to their respective owners. References to SEEK only identify a third-party website with which RoleVault is designed to work.

You stay in control

Review and edit AI-generated resumes and cover letters before using them.

No data sales

We do not sell or rent your personal information.

No automatic applications

RoleVault does not submit job applications for you.

01

Scope and who we are

RoleVault (referred to as “RoleVault”, “we”, “us”, or “our”) operates a job-search organisation and resume-tailoring service. This policy applies when you visit our website, create an account, use the dashboard or resume tools, or use the RoleVault Chrome extension.

We aim to handle personal information transparently and consistently with applicable privacy laws, including the Australian Privacy Principles where they apply. This policy does not limit any rights you have under law.

02

Our relationship with SEEK

RoleVault is not part of SEEK and has no authority to speak or act for SEEK. SEEK does not operate, review, warrant, or support RoleVault. RoleVault’s website, extension, payments, AI features, and handling of information are solely our responsibility.

Your use of SEEK remains subject to SEEK’s own terms, settings, and privacy practices. RoleVault does not control SEEK’s website or the accuracy, availability, or continued format of third-party job listings. You can review the independent SEEK Privacy Policy.

03

Information we collect and hold

The information we handle depends on the features you choose to use and may include:

  • Account and identity information: name, email address, account identifier, authentication provider, account dates, document-credit balance, and generation usage.
  • Resume, cover-letter, and professional information: uploaded DOCX files, filenames, extracted and edited resume text, employment and education history, contact details, optional instructions you provide for a cover letter, generated drafts, and saved application documents.
  • Job-search information: the job identifier, title, company, location, work type, advertised pay, logo URL, description, sync date, application status, and resume category for jobs you save.
  • Billing information: Stripe customer, Checkout Session, PaymentIntent, event, credit-pack, amount, currency, purchase, and refund references. Stripe handles full payment-card details; RoleVault does not store your full card number.
  • Technical and security information: authentication sessions, necessary cookie data, request and device information made available to our infrastructure providers, and privacy-filtered error diagnostics.
  • Communications: information you include when making a support request, privacy request, or complaint.

Resume content may contain sensitive information if you choose to include it. Please only provide information that is relevant to your job search and that you are comfortable asking us and our service providers to process.

04

How the Chrome extension works

The extension is permitted to run on https://au.seek.com so it can display the RoleVault sync control on supported job pages. When you choose “Sync to RoleVault”, it reads the currently displayed job listing and sends the relevant listing fields to your authenticated RoleVault account.

RoleVault does not use the extension to submit applications, read your SEEK password, or collect an entire browsing history. The extension communicates with RoleVault’s website and API to check your signed-in session, sync jobs, display your saved jobs, and report limited, privacy-filtered technical failures.

05

How we collect and use information

We collect information directly from you, from the job page you choose to sync, from Google if you use Google sign-in, and automatically from the operation and security of the service. We use it to:

  • create and secure your account and keep you signed in;
  • sync job listings and operate your application pipeline;
  • store, extract, edit, classify, tailor, and export resumes and cover letters;
  • manage document credits, one-time purchases, billing, refunds, and transaction records;
  • provide support and respond to access, correction, or privacy requests;
  • detect misuse, protect the service, diagnose failures, and improve reliability; and
  • comply with legal obligations and enforce our rights.

We do not sell or rent personal information, and we do not use it for third-party targeted advertising.

06

AI processing and automated suggestions

RoleVault uses artificial intelligence to classify a saved role into a resume category and to create tailored resume and cover-letter drafts. For classification, the job title and description are sent to our AI provider. For document generation, relevant job information, the text of your master resume, an available tailored resume, and any optional cover-letter note you provide may be sent to our AI provider so it can produce a structured draft.

These features create recommendations and editable content; they do not make recruitment decisions, determine your eligibility for work, or submit an application. AI output can be incomplete or inaccurate. You remain responsible for reviewing the category, correcting the draft, and deciding whether and where to use it.

07

When we disclose information

We disclose information only as reasonably necessary to operate RoleVault, including to:

  • Supabase for authentication, database, and file storage services;
  • OpenAI for job classification, resume generation, and cover-letter generation;
  • Stripe for one-time checkout, payment processing, refunds, and billing management;
  • Sentry for production error reporting with request content, credentials, cookies, and user-entered text removed by our diagnostic filters;
  • Google when you choose Google authentication, and to browser-extension distribution services when you install the extension;
  • infrastructure, professional advisers, or contractors that need limited access to provide services to us and are subject to appropriate obligations;
  • courts, regulators, law enforcement, or other parties where required or authorised by law; and
  • a purchaser or successor in connection with a genuine business restructure, financing, merger, or sale, subject to appropriate confidentiality and notice where required.

SEEK is not our service provider and does not receive your RoleVault account, resume, credit, or payment information from us merely because a job was synced.

08

Overseas processing

Some providers operate global infrastructure. Personal information may therefore be processed outside Australia, including in Ireland or elsewhere in the European Union, the United States, and other countries in which a provider or its approved subprocessors operate. The exact locations may change as providers update their infrastructure.

Where applicable, we take reasonable steps to use reputable providers and contractual or technical safeguards appropriate to the information and service involved. Overseas privacy protections may differ from Australian law.

09

Retention and security

We generally keep account, job, resume, cover-letter, credit-purchase, transaction, and generation records while your account is active or for as long as reasonably needed to provide the service, maintain billing and security records, resolve disputes, and comply with legal obligations. Draft resumes and cover letters carry a one-month product expiry and stop appearing in the active draft library after expiry; technical deletion may occur later.

Deleting a saved job also removes its associated draft, generated-resume, and generated-cover-letter records from the active service. Residual copies may remain temporarily in protected backups, provider systems, or security logs before routine expiry. Information may also be retained where law requires it or where reasonably necessary to establish, exercise, or defend legal claims.

We use measures such as authenticated access, user-scoped database controls, restricted storage links, provider access controls, and diagnostic redaction. No internet transmission or storage system is completely secure, so we cannot guarantee absolute security.

10

Access, correction, deletion, and control

You can review much of your account, job, resume, cover-letter, credit, and billing information in the dashboard. Available controls let you edit document text, change job status, replace content, and delete individual jobs or generated application documents.

You may also ask us for access to personal information we hold about you, request correction of information that is inaccurate or incomplete, or request deletion of your account and associated information. We may need to verify your identity and may retain limited information where legally required or reasonably necessary. If we cannot fulfil a request, we will explain why where required by law.

11

Cookies, sessions, and diagnostics

RoleVault uses cookies and similar session mechanisms that are necessary for authentication, security, and extension sign-in. We do not currently use advertising cookies. Your browser settings can block cookies, but blocking required cookies may prevent account and extension features from working.

Production error reporting is configured to remove request bodies, headers, cookies, query strings, user-entered content, and direct user identity from diagnostic events. Providers may still process limited technical information needed to receive and secure those events.

12

Questions, privacy requests, and complaints

Contact us if you have a privacy question, want this policy in another accessible form, wish to exercise a privacy right, or believe your information has been mishandled. Include enough detail for us to identify the account and understand the request, but do not send passwords or unnecessary sensitive information.

We will acknowledge a complaint, investigate it, and explain the outcome within a reasonable period. If you are not satisfied, you may be able to complain to the Office of the Australian Information Commissioner or another regulator with jurisdiction over your complaint.

We may update this policy when the service or legal requirements change. Material changes will be identified by updating the effective date and, where appropriate, providing additional notice.

This policy is written to provide the information commonly expected in an Australian privacy policy. The OAIC privacy-policy guide provides more information about Australian requirements.