Privacy Policy

Last updated: July 2026 · Draft — pending legal review

Who we are

DiscoverRoles ("we", "us") is a job application platform operated in South Africa. This policy explains how we collect, use, and protect your personal information in line with the Protection of Personal Information Act, 2013 (POPIA).

What we collect

Account details (name, email, phone), your professional profile, CV files and the structured data we extract from them, your job preferences, the applications we prepare on your behalf, and technical logs (IP address, actions taken) kept for security. If you use optional integrations, we also hold an encrypted access token for any mailbox you connect and your phone number for WhatsApp alerts (both described below).

Why we collect it

Solely to provide the service: parsing and improving your CV, matching you to jobs, preparing applications, notifying you, and processing your subscription. We do not sell your personal information. We do not share your CV with anyone except as needed to submit applications you approve.

AI processing

Your CV content and job descriptions are processed by third-party AI infrastructure to provide parsing, matching, and writing features. Payment processing is handled by PayFast; we never store your card details.

Connected email accounts (optional)

If you choose to connect your Gmail or Outlook mailbox, you grant permission (via Google or Microsoft's secure OAuth) only to send email on your behalf — we do not read, store, or access the contents of your inbox. The access tokens are stored encrypted and are used solely to send a recruiter outreach email when you click send. You can disconnect your mailbox at any time in Settings, which deletes the stored tokens; you may also revoke access from your Google or Microsoft account.

DiscoverRoles' use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We only request the gmail.send scope, use it solely to send recruiter outreach emails you explicitly approve, do not use Google user data for advertising, do not transfer or sell it, and do not allow humans to read it except with your consent, for security, or as required by law.

WhatsApp (optional)

If you add your phone number and opt in to WhatsApp alerts, we use Meta's WhatsApp Business API to send you match and application notifications and to process the commands you reply with (for example, approving a draft). Your number is used only for these messages. You can opt out at any time by unticking WhatsApp alerts in Settings.

Browser extension (optional)

The optional DiscoverRoles Autofill browser extension fills job application forms in your browser using your own profile and CV data, fetched securely from our API when you sign in. It activates only when you click its button. When you use the “Answer questions” feature, the extension sends the current page's address and the specific questions you ask it to answer to our API, so we can draft answers grounded in your CV and the job post; it does not otherwise collect or transmit the content of pages you visit.

On your device, the extension stores only your DiscoverRoles session token and your auto-submit preference. By default it does not submit anything — you review every field and click submit yourself. If you switch on the optional auto-submit setting, the extension can submit a form you have filled, in your own browser, after a visible countdown you can cancel, subject to daily per-site limits. You can turn auto-submit off, or disconnect the extension, at any time from its popup. The extension does not sell your data or use it for anything other than filling your own applications.

Your rights under POPIA

You may access, correct, or request deletion of your personal information at any time. Account deletion is available directly in Settings and permanently removes your data, including CV files, within 30 days. You may also lodge a complaint with the Information Regulator of South Africa.

Security

CV files and connected-mailbox access tokens are stored encrypted. Access is role-restricted and logged. Consent choices (terms, privacy, autopilot) are recorded with timestamps.

Contact

Privacy questions: privacy@discoverroles.com