Privacy Policy

We collect the minimum data needed to provide our services effectively:

• Account information — email address and name when you register or join our waitlist.
• Resume data — files you upload for analysis. These are processed in-memory and stored encrypted at rest only when you explicitly save them.
• Usage data — anonymized feature usage to improve product quality. No personal content is included.
• Device information — browser type, operating system, and IP address (anonymized) for security and diagnostics.

When you join our waitlist, we collect your email address and optionally your name. This data is used exclusively to:

• Send you early access invitations and product updates.
• Notify you when your preferred features become available.
• Communicate important changes to our service.

Waitlist data is never sold or shared with third parties. You may unsubscribe at any time via the link in every email, or by contacting us directly.

We use cookies and similar technologies for essential functionality and product improvement:

• Essential cookies — required for authentication, security, and core site functionality.
• Preference cookies — remember your settings and display preferences.
• Analytics cookies — help us understand how users interact with our product (anonymized).

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect site functionality.

We use privacy-first analytics to understand product usage and improve our service:

• All analytics data is anonymized and aggregated. We do not track individual user behavior across sessions.
• We do not use third-party advertising pixels or retargeting tools.
• Analytics providers are contractually bound to process data only on our behalf and may not use it for their own purposes.

We take security seriously and implement industry-standard protections:

• Encryption — all data in transit uses TLS 1.3. Sensitive data at rest is encrypted with AES-256.
• Access control — strict role-based access. Only authorized personnel can access production data.
• Infrastructure — hosted on SOC 2 compliant infrastructure with 24/7 monitoring.
• Backups — encrypted, geographically distributed backups with regular recovery testing.

While we implement strong safeguards, no internet service is 100% secure. We notify users promptly in the unlikely event of a data breach.

You have full control over your personal data:

• Access — request a copy of all data we hold about you.
• Correction — update inaccurate or incomplete information.
• Deletion — delete your account and all associated data permanently.
• Portability — export your data in a standard, machine-readable format.
• Objection — opt out of non-essential data processing at any time.

To exercise any of these rights, contact us at privacy@nextoffer.ai. We respond within 30 days.

We retain your data only as long as necessary:

• Active accounts — data retained while your account is active and for 12 months after closure.
• Waitlist entries — retained until you unsubscribe or request deletion, or until 2 years of inactivity.
• Uploaded resumes — deleted immediately after processing unless you explicitly save them to your account.
• Analytics logs — anonymized and retained for up to 24 months for product improvement.

Questions about this Privacy Policy or your data? We are here to help.