Privacy Policy

We collect the following categories of information when you use NextRole:

• Account information: your name, email address, and profile image, collected when you sign in through Google or LinkedIn.
• Career profile: resume content (text and structured data), work history, education, skills, target roles, pay preferences, and location preferences that you provide during onboarding or by editing your profile.
• Application activity: jobs you view, save, apply to, or pass on; notes and statuses on applications; interview details and stages.
• AI-generated content: tailored resumes, cover letters, brand-wizard outputs, and coach conversations generated at your request.
• Billing information: subscription tier, trial status, and billing history. Payment card data is handled entirely by Stripe and never stored on NextRole's servers.
• Usage and device data: log data such as IP address, browser type, pages visited, and interaction events, used to operate and improve the Service.
• Cookies and local storage: we use essential cookies for authentication and session management. See Section 7.

We use your information to:

• Deliver the Service, including matching you with job opportunities and generating AI-assisted career materials.
• Process payments, manage subscriptions, and send service-related emails (receipts, trial reminders, billing notifications).
• Authenticate you and secure your account.
• Improve the Service through aggregated analytics and feature research.
• Respond to support requests and communicate with you about your account.
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information, and we do not use your profile or application data to train publicly available AI models.

We share information only with service providers that help us operate the Service, and only to the extent necessary. These include:

• Anthropic — AI processing for resume tailoring, cover letter drafting, career coaching, and other Claude-powered features. Your inputs are processed but not used to train Anthropic's publicly-available models.
• Stripe — payment processing and subscription management.
• JSearch (via RapidAPI / OpenWeb Ninja) — aggregates job listings from Google for Jobs, LinkedIn, Indeed, Glassdoor, and ZipRecruiter for matching against your profile.
• Resend — delivery of transactional emails (password resets, trial reminders, auto-apply confirmations, and notification preferences you’ve opted in to).
• Neon — database hosting for your profile and application data (encrypted at rest).
• Vercel — application hosting and serverless function execution.
• Google and LinkedIn — OAuth identity providers used for sign-in.
• Applicant tracking systems (ATS) — when you choose to auto-apply to a role, we transmit your resume, cover letter, and responses to the employer's ATS (e.g., Greenhouse or Lever).

We may disclose information when required by law, to protect rights or safety, or in connection with a corporate transaction (such as a merger or acquisition). In the event of a business transfer, you will be notified in advance.

Regardless of where you live, we offer you the following rights:

• Access and download your personal data.
• Correct inaccurate information in your profile.
• Delete your account and associated personal data.
• Export your data in a portable format.
• Opt out of non-essential communications.

To exercise any of these rights, email info@martincs.org or use in-product controls in your Account settings. We respond to verified requests within 30 days.

California residents: CCPA/CPRA gives you additional rights including the right to know what personal information is collected, the right to opt out of the "sale" or "sharing" of personal information (we do neither), and the right not to be discriminated against for exercising your rights.

European/UK residents: under GDPR/UK GDPR, our legal bases for processing are contract performance (to deliver the Service), legitimate interests (to operate and improve the Service), consent (for optional processing such as marketing), and legal obligation. You may contact us to exercise your rights or to lodge a complaint with your local supervisory authority.

We retain your personal information while your account is active and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce our agreements. Typical retention periods:

• Active accounts: retained while the account exists.
• Deleted accounts: personal data removed within 30 days of deletion request; anonymized analytics may be retained longer.
• Billing records: retained for 7 years to comply with tax and accounting laws.

We use industry-standard safeguards to protect your information, including encryption in transit (HTTPS/TLS), encryption at rest for database records, access controls for internal systems, and security review of our vendors. No system is 100% secure; in the event of a breach that affects your personal information, we will notify you consistent with applicable law.

NextRole uses a small number of essential cookies for authentication and session management. We do not use advertising or cross-site tracking cookies. You can block cookies in your browser, but the Service may not function correctly if you do.

NextRole is not intended for use by individuals under the age of 18, and we do not knowingly collect personal information from children. If you believe a minor has provided us with personal information, please contact us and we will delete it promptly.

NextRole is operated from the United States, and your information may be processed in the U.S. or in other countries where our service providers operate. Where required, we rely on Standard Contractual Clauses or equivalent safeguards for cross-border transfers.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through an in-product notice at least 14 days before the change takes effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

Questions, requests, or concerns about this Privacy Policy or your data can be sent to:

Martin Consulting Solutions LLC
Attn: NextRole Privacy
Email: info@martincs.org