Privacy policy

The short version

We use your CV and details to score jobs, write CVs and letters for you, and run your account. We do not sell your data. We do not log into any of your accounts on other sites. Your CV goes to a recruitment agency only when you choose to apply to that agency's job and agree on the screen.

What we collect

• Account details: your email address, name, and optionally a phone number you verify.
• Your profile and CV: the file you upload and the profile we build from it (contact details, roles, skills, education, certifications), your saved answers (such as notice period), and the target country for your CV.
• Jobs you add: the job text or link, your notes, and the status you give it. The text of a job is stored once and may be reused for other people checking the same job.
• What we generate: match scores, reports, tailored CVs and cover letters.
• Applications: which agency jobs you applied to, what you consented to, and the status the recruiter sets.
• Payments and credits: your credit history and purchase records. Card and bank details are entered with our payment provider and never reach us.
• Usage and security data: events such as sign-ins and feature use, device and abuse-prevention signals, and email delivery records.
• Messages you send us: support conversations, and jobs you forward by email or WhatsApp.

Our CV templates do not include a photo or a date of birth. You can add an optional profile photo, but it is used only in the talent database, where an employer sees it after unlocking your profile if you have chosen to be found. It is a private file, you can remove it at any time, and it is deleted with your account. We do not collect sensitive categories on purpose. If you put them in your CV, they stay in your profile and are handled like the rest of it.

Why we use it, and on what basis

• To provide the service you asked for: scoring, tailoring, tracking, applying, credits (performance of a contract).
• To send you account emails such as sign-in links, receipts and status updates (performance of a contract).
• To send job highlights and reminders, only if you have not opted out (consent, withdrawable any time in Settings or with the unsubscribe link).
• To share your profile with an agency when you apply (your consent, given for each agency).
• To let verified employers and recruitment agencies find you, only if you turn on "Let employers find me" in Settings (your consent, separate from sign-up, withdrawable at any time). Employers and agencies who are hiring then see your first name and last initial, current role, city, skills and years of experience. They see your email and phone only if they unlock your profile, and we tell you when that happens. Employers and agencies never receive your CV file. An agency that unlocks your profile adds your name, contact details, role, skills and experience to its own candidate records, and is then responsible for them as that agency's own data.
• To keep the service safe, prevent abuse and fraud, measure cost and quality, and meet legal duties (legitimate interests and legal obligation).

Under India's Digital Personal Data Protection Act, 2023 we act as the data fiduciary for the data you give us. Where the UK or EU GDPR applies, we act as the controller.

Who processes your data

We share data only with providers that help us run the service, and only what each needs for its function:

• a hosting and database provider, which stores your account, profile and files;
• an AI processing provider, which receives the text of your CV and of the job to produce scores, reports, tailored CVs and letters. We send only what the task needs. Under our agreements these providers do not use your content to train their models;
• a payment provider, which handles card and bank details and tells us whether a payment succeeded;
• an email delivery provider, which sends our emails and tells us about bounces and complaints;
• a messaging provider, if you link WhatsApp, which carries the messages you send and receive;
• a sign-in provider, if you choose to continue with your Google account.

Recruitment agencies on Rostrium receive your profile and CV when, and only when, you apply to one of their jobs. From then the agency is responsible for how it uses that information under its own policy. Some providers are located outside India, the UK and the EU. Where that happens we rely on contractual safeguards.

How long we keep it

• Your profile, CVs, jobs and reports stay until you delete them or delete your account.
• When you delete your account we remove your profile, uploaded and generated CVs, jobs, reports, letters and messages straight away. We keep the minimum payment and audit records the law requires (reference, amount and date, without your CV or profile).
• A copy of an application you sent to an agency stays with that agency.
• Stored AI sample outputs used for quality checks are cleared after 30 days. Data export links expire after 7 days. Unused cached job text is cleared after 90 days.
• An account that has been inactive for a long time may be closed after we email you first.

Your rights

You can see, correct, download and delete your data. In the app: edit your profile in Profile; download a copy or delete your account in Settings. You can also withdraw consent for emails and WhatsApp there. Under the DPDP Act, GDPR and similar laws you may also ask us to restrict or stop processing, object, nominate someone to act for you, or complain to the regulator in your country. Write to support@rostrium.com and we will respond within 30 days, usually much sooner.

Automated decisions

A match score is an estimate to help you improve your CV. It is not shared with agencies as a verdict, and we never reject, rank or select you for a job. Only a human recruiter at an agency moves your application, and the status you see is theirs.

Security

Your files are stored privately and shared only through short-lived links. Access to your data is restricted by account at the database level. Staff access is limited, and any support access to your account is recorded. No system is perfectly secure; if a breach affecting you occurs we will tell you and the authorities as the law requires.

Children

Rostrium Jobs is for people aged 18 and over. We do not knowingly collect data from children.

Cookies

We use only the cookies needed to keep you signed in and protect your account. We do not use advertising cookies.

Contact and grievances

Questions, requests and grievances: support@rostrium.com. We will update this page when our practices change and tell you by email about changes that matter.