Privacy Policy
Last updated: June 2025
InsideRole takes your privacy seriously. This policy explains what data we collect, how we use it, and your rights over it. By using InsideRole, you agree to this policy.
1. Who We Are
InsideRole is a workplace transparency and job discovery platform. We help job seekers find opportunities and share honest workplace experiences, while helping employers find the right talent. References to "InsideRole", "we", "us" in this policy refer to the InsideRole platform and its operators.
For privacy-related queries, contact us at: privacy@insiderole.com
2. Data We Collect
We collect the following types of information:
| Category | What we collect | Why |
|---|
| Account Data | Name, email, phone number, password (hashed) | To create and manage your account |
| Profile Data | Headline, skills, experience, education, avatar, resume | Job recommendations and HR discovery |
| Application Data | Cover letter, resume uploads | To process job applications |
| Review Data | Company reviews, ratings (linked to your account internally) | Platform integrity and fraud prevention |
| Usage Data | Pages visited, actions taken, IP address, device type | Platform improvement and security |
| HR Account Data | Company name, business email, designation | Recruiter verification and job posting |
3. Anonymous Reviews — Important Notice
Reviews on InsideRole are displayed publicly without your real name — only your chosen anonymous display name is shown. However, internally, each review is linked to the verified user account that submitted it. This internal link is used solely for moderation, fraud prevention, and ensuring review authenticity. Your identity is never shared with employers, companies, or any third party.
4. How We Use Your Data
- To create and manage your account securely.
- To match you with relevant job listings based on your profile and skills.
- To enable HR partners to find suitable candidates (via your public profile, only if you have one).
- To send OTP emails for account verification and password reset.
- To moderate reviews and maintain platform integrity.
- To improve our platform, fix bugs, and enhance user experience.
- To prevent fraud, abuse, and unauthorised access.
5. Data Sharing
We do not sell your personal data to any third party. We may share limited data only in the following cases:
- HR Partners: If you apply for a job, your application details (name, email, phone, resume, cover letter) are shared with the hiring company for that specific position.
- Public Profile: If you create a profile with a headline and skills, HR partners may discover your profile. You can control what information you add to your profile.
- Legal Obligations: We may disclose data if required by law, court order, or to protect the rights and safety of users or the public.
- Service Providers: We use third-party services such as email providers (Nodemailer/SMTP) solely to deliver verification emails. They do not have access to your data beyond what is needed for that purpose.
6. Data Storage & Security
- Your data is stored on secured servers hosted by MileWeb.
- Passwords are hashed using bcrypt — they are never stored in plain text.
- OTPs are time-limited (10 minutes) and deleted after use.
- We use HTTPS, rate limiting, and input validation to protect against attacks.
- Despite our efforts, no system is 100% secure. We encourage you to use a strong, unique password.
7. Cookies & Local Storage
InsideRole uses browser localStorage to store your login session token on your device. This allows you to stay logged in across page visits. We do not use third-party tracking cookies or advertising cookies.
8. Your Rights
- Access: You can view your account data from your profile page at any time.
- Correction: You can update your profile information at any time.
- Deletion: You can request account deletion by emailing privacy@insiderole.com. We will delete your account and associated data within 30 days.
- Review Removal: You may request removal of a specific review you submitted by contacting support.
- Data Export: You may request a copy of your data by contacting us.
9. Data Retention
- Active account data is retained as long as your account exists.
- Deleted account data is removed within 30 days of the deletion request.
- OTP and pending registration data is automatically deleted after 10 minutes of expiry.
- Application data may be retained for up to 1 year for record-keeping purposes.
10. Children's Privacy
InsideRole is not intended for users under the age of 18. We do not knowingly collect data from minors. If you believe a minor has created an account, please contact us immediately.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top. Continued use of InsideRole after changes are posted means you accept the updated policy.
12. Contact Us
For any privacy-related questions, requests, or concerns: