Privacy Policy

1. Who We Are

Rolehue is a salary benchmarking platform operated by Lumina Digital Media LLC, a Wyoming limited liability company. We provide anonymous, aggregated salary data to help professionals understand their market value.

Contact: [email protected]

2. What Data We Collect

2.1 Information You Provide

• Salary submissions: job title, city, base salary, bonus (optional), years of experience. All submissions are pseudonymized — we never store your name or email alongside your salary data.
• Account information: email address (via OAuth — Google or LinkedIn), profile preferences (industry, years of experience).
• DSAR requests: name, email, and details of your request (retained only for processing).

2.2 Automatically Collected Data

• Usage analytics: page views, feature interactions (via PostHog, anonymized).
• Technical data: browser type, device type, approximate location (country-level, via Cloudflare).
• Cookies: essential session cookies + optional analytics cookies. See our Cookie Policy.

3. How We Use Your Data

• Salary benchmarks: your anonymous salary data is aggregated with others to produce statistical benchmarks (percentiles, medians, ranges). Individual submissions are never displayed publicly.
• Service operation: authentication, account management, feature delivery.
• Product improvement: aggregated analytics to understand usage patterns and improve Rolehue.
• Communication: service emails (welcome, freshness alerts), optional newsletter. You can unsubscribe at any time.

We never sell your personal data. Salary data is only published in aggregated form (minimum n=25 per cluster, per our methodology).

4. Legal Basis (GDPR & NLRA)

Rolehue complies with applicable data protection laws, including:

• GDPR (EU/UK): We process personal data under legitimate interest (service operation) and consent (analytics, marketing). EU/UK users are shown a geolocation-specific consent banner via Termly CMP.
• NLRA (US): Salary data collection is protected under Section 7 of the National Labor Relations Act, which guarantees employees the right to discuss wages. Rolehue facilitates this right anonymously.
• CCPA/CPRA (California): California residents have the right to know, delete, and opt-out of sale. Submit requests via our DSAR form.

5. Data Retention

• Salary data: retained indefinitely in pseudonymized form (no link to your identity).
• Account data: retained until account deletion. Accounts inactive for 24 months are automatically anonymized.
• Analytics data: retained for 14 months (PostHog default).
• DSAR records: retained for 24 months after request resolution (compliance requirement).

6. Data Sharing & Third Parties

We share data only with the following service providers, all under Data Processing Agreements:

• Supabase (database hosting, US)
• PostHog (product analytics, US/EU)
• Resend (transactional email, US)
• Cloudflare (CDN & security, global)
• Termly (consent management, US)

Aggregated, anonymized salary data may be shared publicly on the Rolehue website. Individual data points are never exposed.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access your personal data
• Rectify inaccurate data
• Delete your account and associated data
• Data portability (export your data)
• Object to processing
• Withdraw consent at any time

To exercise any of these rights, submit a request via our DSAR form or email [email protected]. We respond within 30 days.

8. Global Privacy Control (GPC)

Rolehue honors the Global Privacy Control (GPC) signal. If your browser sends the Sec-GPC header or has navigator.globalPrivacyControl enabled, we automatically:

• Disable analytics tracking (PostHog)
• Set cookie consent to "essential only"
• Use memory-only session storage (no persistent cookies)

9. Children’s Privacy

Rolehue is not intended for users under 18. We implement an age gate on signup and do not knowingly collect data from minors. If you believe a minor has provided data, contact us immediately.

10. Changes to This Policy

We may update this policy periodically. Material changes are communicated via email and a notice on the website. Continued use after changes constitutes acceptance.