Privacy policy
Last updated: 17 October 2026 (draft)
1. Who we are
The RolePrive ("the service", "we") is operated by Zevron Global, Ajman, United Arab Emirates. Zevron Global is the controller of the personal data described here under the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ("PDPL"). Contact us about privacy at the email address on your welcome email, or reply to any email we send you.
2. What we collect
| Data | Where it comes from |
|---|---|
| Your CV (PDF) and what it contains | You upload it at intake |
| Intake answers: target roles, cities, salary floor, notice period, things to avoid | You, at intake and later in Telegram |
| Your name and email address, Stripe customer and subscription ids, payment status | Stripe, when you pay (we never see your card number) |
| Your Telegram chat id and the buttons you tap | Telegram, when you open our bot |
Optional: a Google OAuth token limited to the gmail.send scope | Google, only if you connect Gmail |
| Job alert emails you choose to forward to us | You |
| Emails you approve and send through the service, and replies you tell us about | You |
We do not collect passwords, passport or Emirates ID numbers, or access to your inbox.
3. Why we use it, and on what basis
- To provide the service you pay for: find roles, judge fit and eligibility, check for scams, draft emails, send the ones you approve, and track replies. Basis: performance of our contract with you (PDPL Article 4) and your consent given at intake (PDPL Articles 4 and 6).
- To bill you and keep accounting records. Basis: contract, and legal obligations.
- To keep the service safe: scam warnings, abuse prevention, sending limits. Basis: contract and consent.
You can withdraw consent at any time (PDPL Article 6). Withdrawal does not affect processing already done, but without it we cannot run your search, so we will cancel your subscription.
We do not sell your data, use it for advertising, or use it to train AI models.
4. Hiring contacts
For a role you choose, we may look up one named work contact at the employer (for example the hiring manager or the person who posted the role) so your email reaches the right person. We look up only work email addresses, never personal emails or phone numbers, and only when you act on that role. We do not build or sell a contact database.
Hiring-contact details are kept for 30 days and then deleted. Every email sent through the service tells the recipient how their address was found and how to opt out. Anyone who opts out goes on a suppression list and is never contacted through the service again, by any user.
5. Who processes data for us
| Provider | What for | Where |
|---|---|---|
| Supabase | Database and file storage | Mumbai, India |
| Vercel | Web hosting and the worker that runs your search | Mumbai, India |
| Anthropic | AI reading of job posts and drafting emails (not used to train their models) | United States |
| Stripe | Payments | United States / Ireland |
| Resend | Service emails such as your welcome email | United States |
| Telegram | Delivering your daily list | Telegram's data centres |
| Sending emails you approve from your Gmail (optional) | Google's data centres | |
| Apollo, Bouncer (only if enabled) | Finding and verifying a hiring contact's work email | United States / European Union |
Some of these providers are outside the UAE. We transfer data to them only as needed to run the service and under their data-protection terms (PDPL Articles 22 and 23).
6. How long we keep it
- Your profile, intake answers and activity: while you subscribe, plus 30 days after you cancel, then deleted.
- Your CV: deleted on request at any time, and in any case with your profile.
- Your Gmail token: deleted when you disconnect, when you cancel, or when you revoke it in your Google account.
- Hiring-contact details: 30 days.
- Payment records: as long as accounting law requires.
7. Your rights
Under the PDPL you can ask us to tell you what data we hold and how we use it (Article 13), give you a copy or move it (Article 14), correct or delete it (Article 15), restrict it (Article 16), stop processing it (Article 17), and object to decisions made only by automated processing (Article 18). The service never decides anything for you: every email needs your approval. To use any of these rights, email us from the address you signed up with. We reply within 30 days. You may also complain to the UAE Data Office.
8. Google user data
If you connect Gmail, we request only the https://www.googleapis.com/auth/gmail.send scope. We use it only to send emails that you have approved, from your own address. We cannot read, search or delete your email.
The RolePrive's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In particular: we do not use Google user data for advertising; we do not sell it or transfer it to others except as needed to send your email or as required by law; no human at Zevron Global reads it unless you ask us to for support, it is needed for security, or the law requires it; and we do not use it to train AI models.
9. Security
Data is encrypted in transit and at rest by our providers. Each user's data is separated by row-level security in the database, and access is limited to the people who run the service (PDPL Article 20).
10. Changes
We will email you before any change that affects how your data is used.