What Otto knows about you, and why

Otto's whole job is handling your CV with care — this page says exactly what we collect, what we do with it, who ever sees it, and how you make us forget it. Effective 29 August 2026.

Who we are

Otto Roles ("Otto", "we") runs the job-matching and application service at ottoroles.com. For anything in this policy, write to support@ottoroles.com.

What we collect

Your account. Your email address, and — if you sign in with Google — the name, email, and profile photo Google shares. Email sign-in codes are stored only as one-way hashes and expire within ten minutes.

Your CV. The text extracted from it, the original file you upload, and the structured profile we derive from it: titles, skills, years of experience, seniority, location.

Your search. The role, location, salary floor, and remote preference you set, the matches we show you, and the applications you send.

Technical basics. A session cookie so you stay signed in, your browser's user-agent string with that session, and the country your connection appears to come from — used to scope your job search and to decide whether we must ask before analytics run. We do not store your IP address with your account.

What we do with it

Matching. Machine-learning models read your CV, turn it into a mathematical representation, and compare it against live job postings; a language model reads the finalists' descriptions and writes the one-line reason you see next to each match. This runs on Cloudflare's Workers AI infrastructure. We do not use your data to train models.

Applying. When you tell Otto to apply to a job — and only then — we complete the employer's application form with your details, attach your CV, and answer screening questions from what your CV actually says. Otto never invents an answer and never answers demographic questions on your behalf; applications needing facts you haven't given come back to you instead.

Email. Sign-in codes, and a digest when new matches land. Sent through Cloudflare's email service; unsubscribe any time from the email itself or by writing to us.

Keeping the lights on. Debugging, abuse prevention, and aggregate statistics (counts, never contents).

Who ever sees it

Employers you apply to. This is the point of the service: when you apply, your CV, contact details, and answers go into that employer's application system (Greenhouse, Lever, Workable, and similar), exactly as if you had filled the form yourself. From that moment the employer's own privacy policy governs their copy.

Our infrastructure. Everything runs on Cloudflare — hosting, storage, the AI models, and email — under their processing terms. If you use Google sign-in, Google knows you signed in; with your consent, Google Analytics measures how the site is used.

Nobody else. We do not sell your data, share it with data brokers, or pass it to recruiters you didn't apply to.

Cookies

One essential cookie keeps you signed in. Analytics cookies are set only after you accept the banner — in the EU, UK, and Switzerland nothing is stored without that consent — and you can change your mind any time via Cookie settings in the footer.

How long we keep it

While your account is active. Uploading a new CV replaces the old file. Sessions expire after 30 days. Email us at support@ottoroles.com and we will delete your account and its data; copies already submitted to employers at your request live in their systems and must be requested from them.

Your rights

Depending on where you live (GDPR and equivalents), you can ask for a copy of your data, correct it, delete it, take it elsewhere, or object to how it's used — and complain to your local data-protection authority. One email to support@ottoroles.com starts any of these; expect an answer within a month.

Where these laws apply, we process your data to provide the service you asked for (matching and applying), with your consent (analytics), and in our legitimate interest in keeping the service secure.

The small print that stays small

Otto runs on a global edge network, so requests are processed close to you and data is stored with our infrastructure provider. Otto is not for children under 16. When this policy changes in substance, the date at the top changes with it and significant changes get announced to signed-in users.