Who processes your information
Nailrole processes information to provide account access and the resume and job-preparation tools you request. Nailrole is operated by Nailrole. This policy covers the overseas edition. Operator and contact details are listed below.
Information we process
| Information | Purpose |
|---|---|
| Email address and linked Google account details | Sign-in, verification, account security and recovery. |
| Resume text/files, JD text/links/files and experience you enter | Parse your materials, improve the general resume and prepare the selected job package. |
| Edits, confirmations, interview answers and generated results | Save your work, keep outputs tied to your evidence and support interview preparation. |
| Plan, order, billing-provider references and support correspondence | Deliver purchased access, administer cancellation, investigate payment or refund questions and reconcile transactions. |
| Session, necessary technical/security records and preferences | Keep you signed in, isolate accounts, prevent abuse and remember language or drafts. |
Resume materials and AI processing
When you request a generation or analysis, relevant resume evidence, your selected JD and necessary context are sent to the configured AI processing service. Company research may retrieve public company and role information. We use the resulting content to provide and save the service you requested.
AI services receive the input needed for the requested task. This can include personal information in your resume and interview answers. Review material before submitting it and remove information that is unnecessary for the task. The providers and their data practices are described in the processing-provider section.
We do not treat registration as permission to publish your resume, use it as a marketing case or enroll you in an optional training program. A new purpose or a processing activity requiring separate authorization must be handled before it starts. Avoid including unnecessary third-party personal information, confidential business information or sensitive personal details.
Purposes and lawful bases
Account access and requested preparation are processed under the legal basis appropriate to delivering the service. Security, reconciliation and legal records must use their actual applicable bases. When consent is required for an optional purpose or specific processing, it is separate from acceptance of the service contract and can be withdrawn as applicable. We do not bundle unrelated marketing into sign-in.
Processing providers and transfers
Alibaba Cloud provides hosting and private account/workspace storage. Alibaba Cloud DirectMail and AliMail handle verification messages, service notifications and support correspondence; requested document emails can include attachments. OpenRouter routes relevant resume, JD and interview content to OpenAI for generation. We restrict this route to OpenAI and request data-collection restrictions; this is not a promise of zero retention by every provider. We do not use your submitted materials to train our own models. DeepSeek receives company and role search queries, which can include details from the JD; our research search does not send your resume to DeepSeek. Public website operators receive requests when the service retrieves their pages. Payment processing is not enabled for this review release, and Nailrole does not collect payment-card details.
The primary application database and private files are hosted on an Alibaba Cloud server in Singapore. AI requests through OpenRouter and OpenAI can be processed outside Singapore, including in the United States, under the providers' applicable terms and policies; this release does not promise region-exclusive AI processing. DeepSeek search and Alibaba Cloud mail services can involve processing in China. Public-page retrieval sends requests to the locations of those website operators. If your materials have location or transfer restrictions, contact support before submitting them.
Card and wallet payments
When you choose a payment method, PayPal and the selected wallet service process the card or wallet information needed to authorize and complete your payment. Supported methods depend on your device, region, merchant eligibility and whether your purchase renews. PayPal's secure card fields collect card details directly; Nailrole does not receive or store your full card number or security code. Payment scripts and security checks may process device, browser and network information to prevent fraud.
We use PayPal for payments. If you pay on our website, PayPal may process payment and identifying information for payment delivery, security, authentication, fraud prevention and applicable legal requirements under the PayPal Privacy Statement. Apple Pay and Google Pay also process information under their respective wallet privacy terms when you choose them. We retain the transaction references needed to provide access, reconcile payments and handle refunds. A one-time package does not save a payment method for later charges. Automatic renewal applies only when you select and authorize a recurring plan.
Storage, retention and deletion
Your account keeps your submitted materials, generated outputs and preparation history. You can export your data and delete your account in account settings. Account deletion removes active sign-in and workspace records. Payment reconciliation records are handled separately. Submitted resumes, facts, job descriptions, generated materials, practice history and the AI request/response records used for delivery and troubleshooting remain in your private workspace while the account exists. Deleting your account removes active sign-in and workspace records. Review credentials expire 14 days after issue, but this does not automatically delete review materials; contact support for export or deletion after access ends. Encrypted recovery copies of account, workspace and operational records are created daily in a separate private directory on the application server and kept on a rolling 7-day retention schedule. These same-server copies share the application's server failure domain. Backup creation is subject to disk-capacity checks and failures are reported to the operator. Account deletion removes active records immediately; older encrypted copies expire under the backup retention schedule. Before any production restoration, deletion requests and payment, task and mail states must be reconciled; backup data is not automatically reactivated. Support correspondence remains in the support mailbox until deletion is requested, subject to records that must be retained for a dispute or legal obligation. Server error logs are rotated daily and kept for 14 rotations. Service-provider security and retention practices also apply to data processed by those providers.
Product-usage records
Optional product-usage analytics are not enabled on this deployment.
Your rights and choices
Depending on applicable law, you may have rights to access, correct, export or erase information, restrict or object to processing, withdraw consent and complain to the relevant regulator. Use account export/deletion or contact support@nailrole.com. We may verify identity before carrying out a request. Statutory response periods and exceptions apply; this policy does not limit them.
United States: state-specific rights apply where the service and legal thresholds make them applicable. United Kingdom: applicable UK data protection rights and regulator complaint routes remain available. These sections are included in one policy without a country selector.
Contact
Nailrole is operated by Nailrole.
For account, order, refund or privacy questions, email support@nailrole.com.
Policy changes
We publish the version and effective date of this policy. We explain material changes and provide additional notice or obtain consent where required before new processing begins.