Privacy Policy

Data Protection, Collection Standards & GDPR/CCPA Compliance

VERSION 2.4Effective: October 2026

Our Core Privacy Commitment:

RoleFlow operates under a zero-monetization-of-personal-data rule. We do NOT sell, rent, monetize, or broker your personal information to third-party advertisers, data aggregators, or marketing firms under any circumstance.

1Information We Collect & Sources

We collect information strictly necessary to provide recruitment workflows and Discord server automation:

Discord OAuth2 Data

When you sign in using Discord, we collect your public Discord User ID, username, discriminator, verified email address, and avatar image hash. We never receive or request your Discord password.

Application Questionnaire Responses

Information you voluntarily submit in candidate forms (responses, portfolio links, and attachments). This information is visible exclusively to you and the designated staff of that specific community.

Roblox Creator Identifiers

When linking a Roblox account, we query public Roblox endpoints (users.roblox.com) to display your public 3D avatar and verify group membership ranks. We never collect passwords or .ROBLOSECURITY cookies.

Client-Side Draft Storage

To prevent lost answers during typing, application responses are temporarily cached in your browser's local memory (localStorage) and never transmitted until you press Submit.

2How We Use Your Information

To authenticate your identity across community application portals without requiring duplicate account creation.
To deliver candidate submissions directly to authorized community reviewers in web queues and Discord alert channels.
To execute automated Discord server role assignment and application status notification direct messages upon candidate acceptance.
To enforce anti-spam protections, re-application cooldowns, and prevent abusive bot submissions.

3Data Sharing & Third-Party Services

We do not share your data except with authorized service infrastructure required to deliver RoleFlow:

Target Community Reviewers: Authorized server administrators and staff of the communities you apply to.
Discord API: To verify guild memberships, send direct messages, and assign roles via Discord REST endpoints.
Hosting & Database Infrastructure: Encrypted cloud database infrastructure hosted within secure enterprise-grade data centers.

4Your Data Rights (GDPR & CCPA Compliance)

Regardless of your geographical location, RoleFlow provides comprehensive data rights:

Right to AccessView all your active and historic applications in your personal "My Applications" dashboard.

Right to RectifyUpdate linked Roblox accounts and sync updated Discord avatars from your settings at any time.

Right to ErasureRequest complete account and application data purge by emailing our data team.

5Security & Encryption Standards

All traffic between your browser and RoleFlow is encrypted using TLS 1.3/HTTPS. Authentication sessions utilize encrypted HTTP-only cookies protected with strict SameSite flags. Bot tokens and confidential integration parameters are stored securely and never transmitted to the client.

Privacy Officer & Data Deletion Requests

To request data export or complete account purge, contact our privacy desk.

support@roleflow.site