Privacy policy
Last updated: 1 October 2026
Who we are
Rolestash is a browser extension and web service operated by a sole trader business in New South Wales, Australia ("Rolestash", "we", "us"). Contact us at support@rolestash.com. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth) and, for people in the EU and UK, the GDPR.
The extension on the free plan
- What it reads: the content of a browser tab, only when you click the Rolestash icon, use its menu item or press its shortcut on that tab. It does not track the sites you visit.
- What it stores: the job details you choose to save (title, company, location, salary, dates, description, posting link) and your own notes, tags and board. These stay in your browser's extension storage on your device.
- What it sends: nothing. On the free plan the extension makes no network requests except to the page you are capturing. Data leaves your browser only when you export a file yourself.
Capture from a pasted link (Pro)
When you paste a job link into Add job, Rolestash asks Chrome for access to that one site. It then fetches that one page, without your cookies, and reads the job details from it on your device. If the page needs JavaScript, Rolestash briefly opens it in a background tab instead and closes it when done. Access to the site is removed straight afterwards. Nothing about the page is sent to us.
Accounts (Pro and Advanced)
Accounts are launching soon. When you create one, we collect:
| Information | Why |
|---|---|
| Email address, and your Google account ID if you sign in with Google | To create your account, sign you in and contact you about it |
| Subscription status (plan, trial and renewal dates) from our payment provider | To give you the features you pay for. We never receive your card details. |
| Your board data (jobs, notes, tags, columns, settings) if you use sync (Pro and Advanced) | To keep your board in sync across your devices |
| The devices you sync: a name such as "Chrome on Windows", and when each last synced | To show your synced devices and apply your plan's device limit |
| Reminder settings, if you turn on email reminders | To send the reminders you asked for |
| Messages you send to support | To help you |
| Technical logs (such as IP address and request times) kept by our hosting provider | Security and abuse prevention; kept for a short period |
We use this information only to provide, secure and support Rolestash. We do not sell it, use it for advertising, build profiles, or use it to train AI models.
Automatic status updates (Advanced)
If you use automatic status updates, you get a private forwarding address and choose which emails to forward to it. Rolestash never connects to your mailbox.
- What we process: each forwarded email, in memory on our email service, to work out what it means for your application (received, interview, assessment, rejection or offer) using plain rules, no AI.
- What we keep: the extracted update: the job it matched, the outcome, any interview time, meeting link and location, and the email's subject, sender and date so you can see why a card moved. We do not keep the email itself.
- Shared learning: when you confirm or correct an update, we may add non-personal knowledge to a shared list that improves updates for everyone. That knowledge is which email domain belongs to which company, and a one-way fingerprint of the email's template (with names, dates, titles and links removed) with its meaning. It never includes email text, subjects or which jobs you applied for. It is used only after several different accounts confirm it. You can turn this off in the extension.
- Stopping it: stop forwarding, rotate or turn off the address in the extension, or delete your account. Updates are deleted with your account.
Service providers
We use a small number of providers to run Rolestash. They process information only on our instructions, except Paddle, which is the seller of record for your purchase.
| Provider | Role | Location |
|---|---|---|
| Supabase | Account database, authentication, sync and the launch list | Hosted in Sydney, Australia |
| Paddle.com | Payments, tax and invoicing, as merchant of record (Paddle's privacy notice) | United Kingdom and other regions |
| Resend | Sign-in, reminder and launch-list emails | United States |
| Cloudflare | This website, our email forwarding, and processing emails you forward for automatic status updates | Global network |
| Only if you choose "Sign in with Google" | Global |
Some providers are outside Australia, so your information may be processed overseas. We choose providers with strong security and contractual privacy commitments.
The web board (Advanced)
The web board at rolestash.com/board/ keeps a copy of your synced board in that browser's storage, so it works offline. It talks only to our database in Sydney. Signing out of the web board removes that browser from sync and deletes its copy. It uses no cookies and no analytics.
This website
rolestash.com uses no cookies and no analytics, and its pages load no third-party scripts, with one exception: the checkout page (rolestash.com/pay/). To take your payment, it loads Paddle.js from Paddle, our merchant of record, which opens Paddle's secure checkout window. Paddle's checkout may set its own cookies and use its own services, such as error reporting, web fonts and translation. Paddle's privacy notice covers these. Our host, Cloudflare, processes technical information such as IP addresses to deliver and protect the site.
Launch and product news emails
If you use the "Notify me at launch" form on rolestash.com, we keep your email address, the plan you said you're interested in (if any), when you signed up and confirmed, and which of our emails we last sent you. We store it in our database in Sydney and send the emails through Resend. We send:
- one email asking you to confirm your address;
- one email saying you're on the list, once you've confirmed;
- one email when Rolestash launches;
- occasional product news, such as major new features: a few emails a year at most.
We only email you after you confirm, and you can opt out at any time:
- One click: every email, including the first, has an unsubscribe link. It works straight away, with no sign-in and no questions.
- From your mail app: Gmail, Outlook and Apple Mail show their own "Unsubscribe" button for our emails.
- By email: reply to any of our emails, or write to support@rolestash.com, and we'll remove you.
Unsubscribing deletes your address from our list immediately. We keep a confirmed address until you unsubscribe. If you never confirm, we delete it within 30 days. We never share, rent or sell the list, and we don't use it for advertising or tracking: our emails have no tracking pixels or tracked links.
How long we keep information
- Account and synced data: while your account is open. When you delete your account, we delete it from our systems within 30 days.
- Paddle keeps transaction records for as long as tax law requires.
- Launch and product news emails: until you unsubscribe, or 30 days if you never confirm.
- Data in your browser stays until you delete it or remove the extension. Deleting your account does not delete the copy on your device.
Your choices and rights
You can export your board at any time from the extension and delete your account from its settings. You can also ask us to access, correct, export or delete your information by emailing support@rolestash.com; we reply within 30 days. If you are in the EU or UK you also have the rights to restrict or object to processing. Our legal bases are performing our contract with you, and our legitimate interest in keeping the service secure.
If you're unhappy with how we handled your information, contact us first. You can also complain to the Office of the Australian Information Commissioner or your local data protection authority.
Security
Data is encrypted in transit. Account data is protected by row-level access rules, so each account can reach only its own records. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.
Children
Rolestash is not intended for anyone under 16.
Changes
If we change this policy, we'll update the date above. For significant changes we'll tell account holders, and people on our email list if the change affects them, by email before they take effect.