Privacy Policy

Information we collect

Stale Roles checks (one-time packs): the email address you verify before buying, a record of each purchase (the Stripe session and payment identifiers, the pack size and amount, and whether it was refunded or disputed), and, for each check you spend, the posting it was spent on — the job identifier, the company, and the link you pasted — with the time it was spent and the 7-day window it stays open for. We keep these with your account so your balance and ledger are correct; "Delete my data" removes them, leaving only the non-personal Stripe identifiers needed to stop an erased purchase being recreated by a late payment event.

FreshRoles collects the email address you provide, the companies and filters you choose, alert cadence settings, portal session data, and operational records needed to deliver alerts.

When you subscribe, payment details are handled by Stripe. FreshRoles stores Stripe customer, subscription, checkout, and billing identifiers, and records the price and billing interval you chose at checkout. It does not store card numbers — Stripe is the system of record for billing.

We also collect basic technical and operational data such as request logs, monitoring run telemetry, delivery status, and error records to keep the service reliable.

If you submit a bug report or feature request through the in-app form, we store your message and — so a report is useful without you having to describe your setup — automatically capture the page you were on, your browser user-agent, and your window size. Supplying an email address there is optional; we only use it to reply to you.

If you arrive from an advertisement, we record the advertising click identifier from the link you followed (a Google, Microsoft or Reddit click id) and any campaign labels in the link's address (the utm parameters), together with the page you landed on. If you arrive by following a link in an AI assistant's answer (such as ChatGPT or Perplexity) and the link carries no such labels, we record only which assistant it was, taken from the site name your browser reports as the referring site — never the rest of that address or what you asked it. This is kept in your browser for the current tab only, and is stored by us only if you go on to subscribe, alongside that subscription.

FreshRoles sets one first-party cookie: an HTTP-only portal session cookie (24-hour lifetime) after you sign in via a magic link. There are no advertising or third-party tracking cookies.

How we use information

We use account and subscription data to send job alerts, manage your subscriptions, process billing through Stripe, provide portal access, and support customer requests.

When you subscribe, we email you once to confirm what you subscribed to, and we record the date we sent it so you receive it once.

If you hold a subscription for a year or more, we email you once a year to remind you that it renews automatically, what it costs, and how to cancel. We record the date we sent it so you receive it once, not repeatedly.

We use operational data to monitor reliability, prevent duplicate notifications, troubleshoot failures, and improve the service.

We do not sell customer contact information.

FreshRoles does not use artificial intelligence or large language models to process your data, and makes no automated decisions about you. Job classification is done with fixed, human-written rules.

There are no advertising networks, analytics platforms, or third-party tracking scripts on this site. If you arrive from an ad, we record the advertising click identifier from the link you followed and, when we run advertising, tell that ad platform that a subscription happened. That report contains the click identifier, the time of the purchase, its amount and currency, the number of alerts bought, and our own reference for the checkout — never your email address or anything else that identifies you. We send it from our own servers; no advertising code runs in your browser. Error monitoring is likewise first-party — it runs on our own infrastructure and is not sent to an outside service.

Public job data

FreshRoles monitors publicly available company career pages and job endpoints. Job titles, locations, IDs, posting URLs, and job availability signals may be stored and analyzed as part of the service.

FreshRoles is not affiliated with any monitored company unless explicitly stated.

Service providers

FreshRoles uses third-party providers to operate the service: Railway (hosting and database), Resend (email delivery), and Stripe (payment processing). If you subscribe after clicking an ad, the ad platform you came from receives the conversion report described above.

These providers may process data only as needed to provide their services to FreshRoles.

Retention and deletion

We keep your subscription record while the subscription is live, and after you cancel, so that resubscribing restores your companies and filters rather than making you set them up again.

Operational records age out automatically: notification delivery logs after 180 days, processed and undeliverable alert queues after 90 and 30 days respectively, expired sign-in tokens 30 days after they expire, and advertising measurement records 400 days after the purchase they belong to.

You can cancel a subscription yourself at any time from the customer portal, and delete your data there too: the portal has a 'Delete my data' option that removes your subscription records, sign-in tokens, advertising measurement records, and any bug reports you filed, without waiting on us. You can also email the support address below and we will do it for you. Deletion is only blocked while a subscription is still live — cancel it first, so Stripe is not left billing an address we can no longer reach.

Two things deliberately survive a deletion request. Stripe keeps its own payment records to meet financial record-keeping obligations, and that data is under Stripe's control rather than ours. And if your address previously bounced or you marked our email as spam, we keep it on a suppression list — that record exists solely to make sure we never email you again, so deleting it would defeat its own purpose.

Security

FreshRoles keeps production secrets in managed service environments, limits access to operational pages, and delegates payment card handling to Stripe.

No internet service can guarantee perfect security. If we discover a security issue affecting customer data, we will investigate and take appropriate action.

Changes

We may update this policy as the product, providers, or legal requirements change. The latest version will be posted on this page.