Privacy Policy

Last updated: March 2026 · Effective: March 2026

1. Who We Are

Onrolo (“we”, “us”, “our”) is a software-as-a-service platform providing AI-assisted recruitment tools for UK-based sales agencies. We are committed to protecting your personal data and operating in compliance with the UK GDPR and the Data Protection Act 2018.

For questions about this policy, contact us at: privacy@onrolo.ai

2. Data We Collect

We collect the following categories of data:

  • Account data: Name, email address, company name, role, and billing information for users who register.
  • Candidate data: CV/résumé content, contact details, screening responses, and assessment scores for candidates processed through the platform.
  • Usage data: Log data, feature usage, and performance metrics to improve our service.
  • Communication data: Records of emails, SMS, and WhatsApp messages sent through the platform.

3. How We Use Your Data

  • Providing and improving the Onrolo platform
  • Processing candidate applications on behalf of recruiting organisations
  • Sending transactional communications (account notifications, screening invites)
  • Billing and subscription management via Stripe
  • Compliance with legal obligations

4. Data Retention

Organisation account data is retained for the duration of the subscription plus 90 days after cancellation. Candidate data is retained for 12 months from last activity, after which it is automatically deleted. You may request earlier deletion at any time.

5. Your Rights (UK GDPR)

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request erasure (“right to be forgotten”)
  • Data portability
  • Object to processing
  • Withdraw consent at any time

To exercise these rights, email privacy@onrolo.ai.

6. Third-Party Services

We use the following third-party processors: Supabase (data storage, EU region), Stripe (payment processing), Resend (email delivery), Twilio (SMS/WhatsApp), and Anthropic (AI processing). Each operates under their own privacy policies and data processing agreements.

7. Contact & Complaints

If you have concerns about how we process your data, you may lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.