Privacy Policy

Roost (“we”, “us”) is operated by an individual based in New Zealand. Roost is currently in early access.

Questions or requests about your data? Contact withkhp+roost@gmail.com.

• Account info — your name and email address via Google sign-in.
• Profile info — your CV content, structured background, and work rights / visa status, as you enter it.
• Applications you create — the company, role, and job description text or link you paste in, plus your stated preferences.
• Generated content — the tailored CV versions and cover letters we produce for you, and any feedback you give on them.
• Usage events— basic in-product actions, so we can see what's working and fix what isn't.
• Signup attribution — where you came from (e.g. campaign source, referring page), captured once at signup to understand how people find us.
• Marketing preference — whether you've opted in to marketing emails. This is off by default, and we don't send marketing emails today regardless of this setting.

We use your information to generate CVs, cover letters, and job-fit analysis tailored to the role you're applying for; to keep your profile and application history available across sessions; and to understand and improve the product. We don't use your data to train AI models.

• Database — your account and profile data is stored with Supabase, hosted in Sydney, Australia.
• AI processing — when you generate a tailored CV or cover letter, the relevant text (your CV content and the job description) is sent to Anthropic (Claude API), a processor based in the United States, to produce the result. This is a disclosure of personal information overseas under the Privacy Act 2020. Anthropic processes this data to provide the response and does not use it to train its models.
• We don't currently use any third-party analytics or marketing platforms. If that changes, we'll update this policy first.

We don't sell your information. We share it only with the service providers above (Supabase, Anthropic), only as needed to run the product. We never share your CV, cover letters, or application data with employers or recruiters — only you control where that content goes.

Every table in our database uses row-level security: your data is only ever accessible to your own account, enforced at the database level. Our AI provider API key is kept server-side and never exposed to the browser.

Under the Privacy Act 2020, you can ask us to access or correct the personal information we hold about you. You can permanently delete your account and all associated data — profile, CVs, cover letters, and application history — at any time from within the product.

If you have a concern about how we've handled your information, contact us first at withkhp+roost@gmail.com. If we can't resolve it, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

We use only functional session cookies, set by Supabase Auth to keep you signed in. We don't use advertising or cross-site tracking cookies.

Roost is intended for people old enough to be entering the New Zealand workforce or job market, and is not directed at children.

We'll update the date at the top of this page whenever it changes. For material changes, we'll also notify you by email.