Privacy Policy

Pathrole ("we," "us," "our") helps you search for jobs, tailor your resume and cover letter to each listing, and — if you choose to install our Chrome extension — autofill job application forms. This page explains what information we collect, how we use it, what we send to third-party services, and the choices you have.

If anything here is unclear, email us at hello@pathrole.ai and we'll answer directly.

1. Information we collect

Account information

When you sign up, we store your email address, name, and a salted, hashed version of your password — we never store your password in plain text and can't read it back. We also keep your plan/subscription status and, if you subscribe, a masked payment summary (card brand, last 4 digits, expiry) plus the subscription/customer reference IDs from our payment processors. We never see or store your full card number — see Payments below.

Profile, resume, and job-search data

Your profile details (work history, skills, target roles, work-authorization and preference answers), the resume file(s) you upload, and the jobs you've viewed, approved, or skipped are stored primarily in your own browser's local storage on the device you're using — not in a central database we control. When you ask Pathrole to tailor a resume or cover letter, generate an AI highlight, or run a mock interview, the relevant text is sent to our backend for that one request (see Third-party services below for how AI processing works) and the result is returned to your browser; it is not retained in a separate server-side profile database afterward.

Payments

If you subscribe to a paid plan, your card or PayPal details are entered directly into Stripe's or PayPal's own secure interface — they never pass through our servers. We only receive back a masked summary (brand, last 4 digits, expiry) and the subscription/customer IDs needed to manage your subscription (e.g., to process a cancellation).

Communications

We send account-related emails — verification codes, password resets, purchase confirmations — via our transactional email provider. We don't send marketing email unless you separately opt in somewhere we make that clear.

Chrome extension data

Covered in detail in Section 3 below.

2. How we use your information

• To create and secure your account, and to authenticate you when you log in.
• To match you with relevant job postings and let you review, approve, or skip them.
• To generate an AI-tailored resume, cover letter, or job highlight for a specific listing, on your request.
• To process payments and manage your subscription, including trial eligibility and cancellation.
• To send you account-related emails (verification, password reset, purchase confirmation).
• To autofill a job application form on your behalf, only when you trigger it via the Chrome extension, and only with data from your own Pathrole profile/tailored draft.
• To diagnose bugs and keep the service running (basic server logs — see Security).

We do not sell your personal information, and we do not use it to serve you ads. We don't run third-party advertising or analytics trackers on pathrole.ai — see Cookies and tracking.

3. The Chrome extension: permissions, in plain language

The Pathrole Autofill extension exists to do one thing: take the tailored resume, cover letter, and profile answers you already approved on Tailor, and fill them into a job application form on the site you're actually applying to — so you don't retype the same information by hand. Here's exactly what each permission it requests is for:

Permission	What it's for
activeTab / scripting / tabs	Read the form fields on the job-application tab you're currently on, so the extension can fill them in, and know which tab to act on when you have more than one application open at once.
storage	Remember your extension's own settings locally in your browser (nothing account-related, no resume content).
clipboardRead	Only used on the manual fallback path: when you click "Submit application" on Tailor, a formatted text block is copied to your clipboard. If you then click the extension's floating button, it reads that clipboard text — and only that — to fill the form. It never reads your clipboard in the background or outside that click.
host permissions (Indeed, LinkedIn, Dice, ZipRecruiter, Greenhouse, Lever, Workday, iCIMS, SmartRecruiters, Taleo, Jobvite, Workable, AshbyHQ, pathrole.ai)	Needed so the extension's code can actually run on those specific job-board and applicant-tracking-system pages to detect and fill the form, and on pathrole.ai to talk to your logged-in Tailor/Hunter session. It does not run on, or collect anything from, any other site you visit.

The extension only ever sends data to pathrole.ai's own backend (the same one the website uses) and to the job-application page you're actively on, to fill its form fields. It never sends your resume, profile, or clipboard content to any third-party server, and it never reads or reports which other sites you browse.

4. Third-party services we rely on

We use a small number of specialized providers to run Pathrole. Each only receives the specific data it needs to do its job:

• Cloudflare — hosts our website, backend, database, and the AI models used for resume tailoring, cover-letter drafting, and job highlights. Text you ask us to process (e.g., "tailor this resume for this job") is sent to Cloudflare's AI service for that one request.
• Stripe and PayPal — process card and PayPal payments directly; we never see or store your full card number. See Payments above.
• Resend — sends our transactional emails (verification codes, password resets, purchase confirmations).
• Job-listing data providers — we source publicly posted job listings (title, company, location, description) through third-party job-search APIs to populate Hunter's matches. This is public listing data, not your personal information.
• HeyGen — was used to pre-produce a fixed library of short avatar video clips for Nova's mock-interview feature. It does not process your personal data live; the clips are static and reused for every user.

None of these providers are permitted to use your data for their own advertising or marketing purposes.

5. Cookies and tracking

Pathrole does not use cookies, and we don't run third-party analytics, advertising, or social-media tracking scripts on pathrole.ai. Where the app needs to remember something between visits (your profile, resumes, job matches, sticky notes), it uses your browser's local storage, which stays on your device and isn't accessible to us or anyone else.

6. Data retention and deletion

Most of your job-search content (profile, resumes, matches, tailored drafts, sticky notes) lives in your browser's local storage — it's never stored server-side in the first place, and is deleted the moment you clear your browser data for pathrole.ai. Your account record (email, name, hashed password, subscription status) is kept for as long as your account is active.

To request deletion or an export of your account data, email hello@pathrole.ai from the address on your account — we'll confirm once it's done, typically within a few business days.

7. Security

Passwords are salted and hashed, never stored or logged in plain text. All traffic between your browser, our servers, and the extension runs over HTTPS. Payment card details are handled entirely by Stripe/PayPal's own PCI-compliant systems and never touch our servers. No online service can guarantee absolute security, but we design storage to hold as little sensitive data as possible in the first place — most of it simply never leaves your browser.

8. Children's privacy

Pathrole is intended for job seekers and is not directed at children. We don't knowingly collect information from anyone under 16. If you believe a child has provided us information, contact us and we'll remove it.

9. International users

Pathrole is hosted on Cloudflare's global network, which may process data in multiple regions to keep the service fast and reliable. By using Pathrole you understand your information may be processed outside your home country.

10. Changes to this policy

If we make material changes to this policy, we'll update the effective date above and, where appropriate, let you know via email or an in-app notice.

11. Contact us