Privacy policy
Last updated: 30 September 2026
Who we are
Rolestash is a browser extension and web service operated by a sole trader business in New South Wales, Australia ("Rolestash", "we", "us"). Contact us at support@rolestash.com. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth) and, for people in the EU and UK, the GDPR.
The extension on the free plan
- What it reads: the content of a browser tab, only when you click the Rolestash icon, use its menu item or press its shortcut on that tab. It does not track the sites you visit.
- What it stores: the job details you choose to save (title, company, location, salary, dates, description, posting link) and your own notes, tags and board. These stay in your browser's extension storage on your device.
- What it sends: nothing. On the free plan the extension makes no network requests except to the page you are capturing. Data leaves your browser only when you export a file yourself.
Pro accounts
Pro accounts are launching soon. When you create one, we collect:
| Information | Why |
|---|---|
| Email address, and your Google account ID if you sign in with Google | To create your account, sign you in and contact you about it |
| Subscription status (plan, trial and renewal dates) from our payment provider | To give you the features you pay for. We never receive your card details. |
| Your board data (jobs, notes, tags, columns, settings) if you use sync | To keep your board in sync across your devices |
| Reminder settings, if you turn on email reminders | To send the reminders you asked for |
| Messages you send to support | To help you |
| Technical logs (such as IP address and request times) kept by our hosting provider | Security and abuse prevention; kept for a short period |
We use this information only to provide, secure and support Rolestash. We do not sell it, use it for advertising, build profiles, or use it to train AI models.
Service providers
We use a small number of providers to run Rolestash. They process information only on our instructions, except Paddle, which is the seller of record for your purchase.
| Provider | Role | Location |
|---|---|---|
| Supabase | Account database, authentication and sync | Hosted in Sydney, Australia |
| Paddle.com | Payments, tax and invoicing, as merchant of record (Paddle's privacy notice) | United Kingdom and other regions |
| Resend | Sign-in and reminder emails | United States |
| Cloudflare | This website and our email forwarding | Global network |
| Only if you choose "Sign in with Google" | Global |
Some providers are outside Australia, so your information may be processed overseas. We choose providers with strong security and contractual privacy commitments.
This website
rolestash.com uses no cookies, no analytics and no third-party scripts. Our host, Cloudflare, processes technical information such as IP addresses to deliver and protect the site.
How long we keep information
- Account and synced data: while your account is open. When you delete your account, we delete it from our systems within 30 days.
- Paddle keeps transaction records for as long as tax law requires.
- Data in your browser stays until you delete it or remove the extension. Deleting your account does not delete the copy on your device.
Your choices and rights
You can export your board at any time from the extension and delete your account from its settings. You can also ask us to access, correct, export or delete your information by emailing support@rolestash.com; we reply within 30 days. If you are in the EU or UK you also have the rights to restrict or object to processing. Our legal bases are performing our contract with you, and our legitimate interest in keeping the service secure.
If you're unhappy with how we handled your information, contact us first. You can also complain to the Office of the Australian Information Commissioner or your local data protection authority.
Security
Data is encrypted in transit. Account data is protected by row-level access rules, so each account can reach only its own records. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.
Children
Rolestash is not intended for anyone under 16.
Changes
If we change this policy, we'll update the date above. For significant changes we'll tell account holders by email before they take effect.