Candidate privacy notice
What happens to your CV
Short version: the employer receives your application. We read it for them,
work out which of their jobs you fit, and a person at the employer decides what
happens next.
Who holds your information
The employer you applied to decides why your application is kept and what is
done with it. They are the controller.
Sirin OÜ (Estonia, registry code 16315993) runs Rolefit
(rolefit.eu), the service you applied through, which reads and scores your
application, acting only on the employer's instructions. We are the processor.
Ask the employer first about anything to do with your application. If you write
to us we will pass it to them and tell you we have.
What we collect, and why
| What | Why |
|---|---|
| The CV you upload | To work out what you have done and what you can do |
| Your answers to our questions | Because the CV did not answer them, and guessing would be worse |
| Contact details you give at the end | So the employer can reach you |
| A covering note, if you write one | To understand why you want the job |
| An attachment, if you add one | Only if the employer asked for one |
We only ask about things the advert actually requires. **You never have to give
a photograph or a date of birth, and please do not include health information.**
What we do not do
We do not use your application to train any AI model. We do not sell it. We do
not share it with other employers. We do not use it for advertising.
A person decides, not the software
We produce a ranking and a written explanation of it. It is advice.
Nobody is rejected by the software. No decision about you is made automatically.
A person at the employer reads and decides — and you can ask them for a human
review of any outcome, explain your side, and contest it.
There is more detail in our AI transparency statement.
The legal basis
The employer relies on their legitimate interest in filling the role, and on
taking steps at your request before entering a contract — you applied.
If you separately opt in to being kept for future roles, that part is
consent, and you can withdraw it at any time without affecting the
application in front of you.
How long it is kept
| Situation | Kept for |
|---|---|
| You started but never submitted | 1 day |
| You submitted | 240 days, or 180 days from the day the role is filled, whichever comes first |
| You opted in to future roles | 12 months, and you can withdraw at any time |
| You asked us to erase it | Purged within 30 days |
The reason submitted applications outlive the vacancy is that a complaint about
a hiring decision can be brought after the fact, and the record is what answers
it — for you as much as for the employer.
Who else sees it
The people at the employer doing the hiring. On our side, the companies listed
in sub-processors.md: Supabase (database and files, EU), Cloudflare (serving
the pages and sending the emails you receive), Anthropic (the model that reads
the CV) and Resend (a backup route for those emails). None of them use your
application for anything else.
What you can ask for
You can ask for a copy of what is held, correction of anything wrong, deletion,
restriction, or that we stop using it — **and you do not need an account to
ask.**
Write to the employer, or to us at privacy@rolefit.eu and we will pass it
on. We answer within 30 days.
If you are not satisfied you can complain to the **Estonian Data Protection
Inspectorate** — aki.ee — or to the authority where you
live.
Reaching us
privacy@rolefit.eu · Sirin OÜ, Nõmmiku/1, Kibuna küla, Saue vald, 76313 Harju maakond, Estonia