Privacy Notice

ROLE UP ("RoleUp", "we", "us") is the data controller for the personal data processed through the RoleUp service at roleup.be. This notice explains what we collect, why, who we share it with, and the rights you have.

• Account data — name, email address, login credentials. Used to create and secure your account (legal basis: performance of our contract with you).
• Profile and onboarding data — city, country of origin, professional field, residence/work-permit status, language certificates and diploma recognition status you choose to provide. Used to tailor match reports and eligibility guidance (legal basis: performance of the contract; you may also give this by consent and can edit or delete it at any time in your profile).
• Application content — CVs you upload and job vacancies you paste, plus the AI-generated reports and documents derived from them. Used solely to provide the service to you (legal basis: performance of the contract).
• Usage and device data — IP address, device/browser identifiers and basic usage telemetry. Used for security, fraud prevention and product improvement (legal basis: our legitimate interests).
• Support messages — when you contact us, we keep the correspondence to help you and meet legal obligations.

Payment card and billing details are collected and processed directly by our Merchant of Record, Paddle — we never see or store your full card number.

• Service providers / subprocessors — hosting, database and authentication infrastructure, and the AI providers that generate your reports and documents, each bound by contract to protect your data.
• Paddle (Merchant of Record) — for the sale of our products, subscription management, payment processing, tax compliance and invoicing. See Paddle's privacy policy.
• Professional advisers — legal and accounting advisers where needed.
• Authorities — where disclosure is required by law.

We do not sell your personal data.

Some of our service providers process data outside the EEA. Where that happens we rely on adequacy decisions or Standard Contractual Clauses to keep your data protected to GDPR standards.

We keep your data for as long as your account is active and as needed to provide the service. When data is no longer needed — for example after you delete your account — it is deleted or anonymised, except where we must retain records to meet legal obligations.

We apply appropriate technical and organisational measures, including encryption in transit, access controls, and row-level isolation so each user can only access their own data.

You have the right to:

• Access, rectify or erase your personal data.
• Restrict or object to processing, and to data portability.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit).

To exercise any of these rights, contact us via the support details on roleup.be. We respond within one month.

RoleUp uses only essential cookies and local storage needed to keep you signed in and operate the service. We do not use marketing or third-party advertising cookies. You can clear cookies in your browser settings; doing so will sign you out.

We may update this notice from time to time. Material changes will be announced in the app before they take effect.