Privacy Policy

Dr. Bastian Brand
Email: legal@roletype.com

When you use roletype, the following data is processed:

• Assessment responses: Your answers to the 83 assessment questions. Stored pseudonymously and used solely to compute your role profile.
• Email address (optional): If you provide your email, we use it to send you your results and a short follow-up sequence. Your email is stored separately from your assessment data.
• Payment data: Processed exclusively by Stripe when purchasing the detailed report. We do not store card details.
• Technical data: Vercel (our hosting provider) processes IP addresses and browser information as part of serving the website.

• Running and evaluating the role assessment
• Delivering results by email (only if an email address was provided)
• Processing payments for the detailed report
• Generating personalized report content using AI

Legal basis: Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(a) GDPR (consent, for voluntary email submission).

• Vercel Inc. (San Francisco, USA) — Hosting. Data processed in EU data centers. Adequate protection via standard contractual clauses.
• Supabase Inc. (San Francisco, USA) — Database. EU region (Frankfurt). Adequate protection via standard contractual clauses.
• Stripe Inc. (San Francisco, USA) — Payment processing. See stripe.com/privacy.
• Resend Inc. — Email delivery. Used only if you provided an email address.
• PostHog EU (PostHog Inc., data hosted in the EU) — Product analytics. Used only with your consent via the cookie banner.
• Meta Platforms Ireland Ltd. (Dublin, Ireland) — Advertising measurement (Meta Pixel and Conversions API). Used only with your separate consent via the cookie banner ("Advertising"). Data may be transferred to Meta Platforms, Inc. (USA) under the EU-U.S. Data Privacy Framework and standard contractual clauses. See facebook.com/privacy/policy.
• Anthropic PBC (San Francisco, USA) — AI generation of personalized report content. Only pseudonymous assessment data (no email address) is transmitted.

Under GDPR, you have the right to:

• Access your personal data (Art. 15)
• Rectification (Art. 16)
• Erasure (Art. 17)
• Restriction of processing (Art. 18)
• Object to processing (Art. 21)
• Data portability (Art. 20)

To exercise any of these rights, contact us at: legal@roletype.com

You also have the right to lodge a complaint with a supervisory authority. The competent authority for Bavaria is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA).

Assessment data is retained as long as necessary to provide the service. Email addresses are deleted on request at any time. Payment records are subject to statutory retention obligations (10 years under German tax law).

We use browser localStorage for the technical functioning of the assessment (saving your progress on your device); this data is not transmitted to third parties.

With your consent (cookie banner), we additionally use PostHog (EU cloud, hosted in the European Union) for product analytics — page views and product events such as starting or completing the assessment. This helps us understand and improve the product. If you decline, no analytics identifiers are set and no analytics events are collected. You can withdraw your consent at any time via the cookie settings.

With your separate consent (cookie banner category "Advertising"), we use the Meta Pixel and the Meta Conversions API to measure the performance of our advertising on Meta platforms (Facebook/Instagram). The pixel records events such as page views and purchases; for purchases, our server additionally transmits the event together with a hashed (SHA-256) email address to Meta for deduplication and attribution. Legal basis: Art. 6(1)(a) GDPR (consent). If you decline, no advertising data is collected. You can withdraw your consent at any time via the cookie settings. Controller for this processing on the Meta side: Meta Platforms Ireland Ltd. — see facebook.com/privacy/policy.

During checkout, Stripe may set cookies that are strictly necessary for payment processing and fraud prevention.