Privacy Policy — Between Roles

Overview

Between Roles (“we,” “us,” “our”) is a job-search tool suite operated at between-roles.com. This policy describes what information we collect when you use our service, how we use it, and the choices you have about your data. We handle resume data and salary information — we take that seriously and keep this policy plain and specific.

Information we collect

Account information

When you sign in via Google OAuth, we receive your Google account email address and name. We store your email and a user ID in our database (Firebase / Google Cloud Firestore). We do not receive or store your Google password.

Resume bullets (Skills Database)

When you upload a resume through the Skills Database feature, we extract individual accomplishment bullets and store them in your account (Firestore, keyed to your user ID). The raw resume file is processed entirely in your browser — it is never transmitted to or stored on our servers. Only the extracted text bullets reach our servers, where they are passed to the Anthropic Claude API for tagging and then stored in your Skills Database.

Profile information (education, skills, recognition)

If you choose to save profile sections (education history, certifications, technical skills, recognition), this data is stored in your account in Firestore. You can delete it at any time via the Skills Database page.

Job descriptions and generated resumes

Job postings you paste into the Resume Generator are sent to our server and passed to the Anthropic Claude API to generate your resume. Neither the job description nor the generated resume is stored on our servers after your session — only the bullets used to generate it (which are already in your Skills Database).

Free Trial usage

If you use the Free Trial (no account required), your email address is stored in a Firestore collection solely to enforce the one-trial-per-email limit. Your resume text and job description are analyzed and immediately discarded — they are not stored.

Usage and billing

We store the number of resume generations and Skills Database parses you have used in the current billing period. Payment is processed by Stripe; we do not store payment card numbers. Stripe provides us a customer ID and subscription status.

Analytics

We use Google Analytics 4 (measurement ID G-Q6MG9R2R84) to understand how the site is used. GA4 collects standard web analytics data (page views, session duration, general geographic region). We do not use GA4 to track individuals across sites.

How we use your information

To operate the service and authenticate your account
To store and retrieve your Skills Database bullets and profile
To generate tailored resumes on demand using your stored bullets
To enforce per-plan usage limits
To enforce the one-trial-per-email limit on the Free Trial
To process subscription payments via Stripe
To understand usage patterns and improve the product (via GA4)

We do not sell your data. We do not use your resume content to train AI models. We do not send marketing emails beyond transactional receipts.

Third-party services

Anthropic Claude API — processes resume text and job descriptions to extract bullets, generate resumes, and analyze skill gaps. Anthropic's privacy policy governs data sent to their API. We do not send your name, email, or account ID to Anthropic.

Google Firebase / Firestore — stores your account data, Skills Database, and profile. Firebase is a Google Cloud product; Google's data processing terms apply.

Stripe — processes subscription payments. Stripe's privacy policy governs payment data.

Google Analytics 4 — collects anonymized usage analytics. You can opt out via browser extensions such as the Google Analytics Opt-out Add-on.

Data retention and deletion

Your Skills Database bullets and profile remain in your account until you delete them or close your account. You can delete individual bullets, clear your entire Skills Database, or delete your profile from the Skills Database page at any time.

To delete your account entirely, email us at support@between-roles.com. We will remove all personally identifiable data from our systems within 30 days.

Security

All data is stored in Google Cloud Firestore, protected by Firestore security rules that restrict access to the authenticated user who owns the data. Our server runs over HTTPS. Session tokens are stored as HttpOnly, Secure, SameSite=Strict cookies and contain only a user ID — no personal information. We use Google Cloud Secret Manager to store API keys and credentials; no secrets are stored in our codebase.

Your rights

You have the right to access the data we hold about you, to correct inaccurate data, to request deletion, and to object to processing. To exercise any of these rights, email support@between-roles.com. We will respond within 30 days.

Changes to this policy

We may update this policy as the product evolves. Material changes will be communicated via the email address associated with your account. Continued use of the service after changes take effect constitutes acceptance of the updated policy.

Contact

Questions about this policy: email support@between-roles.com.