Privacy Policy

Last updated: November 12, 2026

This policy explains what information NextJob collects, why, who sees it, and the choices you have. We wrote it to match what the service really does.

In short

  • We collect the answers you give and use them to find and rank jobs for you.
  • We do not sell your personal information, and we do not share it for advertising.
  • Employers see your profile only after you approve a match.
  • You can download everything we hold about you, correct it, or delete your account in Settings.

1. Who we are

NextJob runs this service and is responsible for your information.

  • NextJob
  • Email: support@nextjobtoday.com

2. What we collect

  • Account: your email address and a protected form of your password (we never store the password itself).
  • Your profile answers: your name, phone number, city and state, work authorization, the work and pay you want, experience, skills, education, licenses, languages, availability, whether you want physical work, and goals.
  • Your work authorization status (for example US citizen, permanent resident, a work visa) and whether you need visa sponsorship. We ask because many jobs can only hire people who may work in the US, and some cannot sponsor a visa: we use it only to match you with jobs that can hire you and to flag the ones that cannot. It is shown to an employer only in an application you choose to send, and it is sent to our AI provider to judge job fit (see "AI"). In some states, such as California, citizenship and immigration status count as sensitive personal information: we use it only for these purposes, never for advertising, and you can ask us to limit its use with a privacy request. We do not ask for your age, gender, race, religion, health, disability or similar details.
  • Files you upload: certificates, experience letters and a background check report, if you add them.
  • What we create for you: your CV, match scores, your saved, applied and hidden jobs, and the jobs our system found for you.
  • Payments: which plan you bought and when. Card details go to our payment provider and never to us.
  • Messages: emails you send us and our answers (support and privacy requests), copies of emails we sent you, the notes in your dashboard bell, and your agreement to our Terms and Privacy Policy, with the date and version.
  • Verification: if you verify your phone number or email, we keep the verified number or address and the date.
  • Answers for application forms: the answers you give once in your dashboard or to a question a form asked (for example your ZIP code, LinkedIn link or notice period), and answers our AI wrote for you. If you choose to answer it, this includes whether you have a criminal conviction: it is used only to answer that question on the forms you apply with, and never shown or sent anywhere else. You can see and change these answers in your dashboard.
  • Technical data: your IP address and a sign-in cookie, used to keep you signed in and to protect the site from abuse.
  • Cookies on our public pages: if you leave them on, Google Analytics and the Meta (Facebook) Pixel collect how you use those pages and which ad brought you (see "Cookies and similar tools"). They are never used in your dashboard.
  • Visits to our public site and member app: which page you open, the referring link or campaign, your IP address, browser, language, whether you use a phone, tablet or computer, and an approximate place (country, and city or region when the host provides it). We count visits without a cookie. A visitor code that changes every day still lets us count each visitor once a day. When you are signed in, a visit can be tied to your account for staff. Nothing is stored if your browser sends "Do Not Track" or Global Privacy Control, or for an automated browser. The staff console is not included.

3. How we use it

  • To run the service: save your answers, search for jobs, rank them, tell you about new matches in your dashboard, help you apply, and make your CV.
  • To contact you about your account, and to show you new matches in your dashboard.
  • To keep the service safe, fix problems, prevent abuse and follow the law.
  • Staff use visit records to see how the site and the app are used and to investigate abuse. They are not sold and not used for advertising.

We do not use your information to make decisions about you that have legal effects.

To improve our public pages and to measure our ads, unless you turn them off: see "Cookies and similar tools".

4. AI

To write your CV, to judge job fit and to answer questions on application forms, we send career information to our AI provider (Anthropic): things like your skills, tasks you did, education, licenses, your city and state, your work authorization and whether you need visa sponsorship (so a job that cannot sponsor is flagged), and the text of a job listing. We never send your name, email address, phone number, home address or your consent answer.

If you upload a CV, we take the text out of the file on our own server and remove your name, email addresses, phone numbers, street address, ZIP code and web links before the AI reads it. Your phone number is read from the CV by our own code, not by the AI. A scanned CV (a picture with no text) cannot be cleaned this way, so we do not send it: you answer the questions instead.

What you type in free text boxes is sent as you wrote it, so please do not put private details such as an ID number in them. Our provider processes the data only to give us the answer and handles it under its own terms and privacy policy.

AI can be wrong. A match score or a CV is a suggestion for you to check.

5. Who we share it with

We do not sell your personal information for money. We share it only as follows:

  • Employers: we do not send your profile to employers on our own. An employer receives your information only when you apply to one of its jobs, yourself or with Apply Automatically with AI: then it receives the application, with your name, contact details, CV and the answers its form asks for.
  • Job data providers (Fantastic.jobs, Jooble, SerpAPI for Google Jobs, RapidAPI JSearch): to find jobs we send a kind of work or a job title and a city or state. We do not send your name or contact details.
  • Service providers who work for us: hosting, email delivery (Resend), payment processing (Stripe), AI (Anthropic), for Apply Automatically with AI a cloud browser (Browserbase, which opens the employer's page and so sees what is typed into the form, and keeps a recording of the session for up to 7 days) and a job queue (Inngest, which only receives the number of the application), and, if you choose to verify your phone number or email, Google Firebase Authentication (it receives that phone number or email address and sends the code or link), each receiving only what it needs for its job.
  • Affiliate partners: if a partner's link brought you here and you buy a plan, we tell that partner about the sale: their own click code, the plan and the amount. Never your name, email, phone, answers or CV.
  • Google (Analytics) and Meta (the Facebook Pixel), through cookies on our public pages only, unless you turn them off: how those pages are used and which ad brought you. Never your name, email, phone, answers, CV or anything from your dashboard. California law may call the Meta Pixel "sharing" for advertising; you can opt out at any time with "Cookie settings" at the bottom of every page, and a browser that sends Global Privacy Control or Do Not Track is opted out by itself.
  • A background check provider, only if you choose to start a check with them. That is between you and them.
  • Authorities or others when the law requires it, or to protect people and the service from harm.
  • A buyer, if the business is sold. We would tell you and the same promises would apply.

6. Cookies and similar tools

Necessary: one sign-in cookie that is needed for the site to work, and your browser may store your chosen language, your cookie choice and similar settings on your device. These are always on.

Partner link: if you arrive through an affiliate partner's link, one cookie remembers that link for 30 days, so we can credit the partner for a sale. If your browser sends Global Privacy Control, this cookie is not set.

Analytics (Google Analytics): shows us which public pages help people and where they get stuck. Google receives your IP address, your browser and how you use the page.

Marketing (Meta Pixel): tells us which of our ads brought you to the site, so we can measure them. Meta receives your IP address, your browser and the pages you open, and may link this to your Meta account under its own terms.

These two are on until you turn them off. A banner tells you on your first visit; "Reject all" there, or "Cookie settings" at the bottom of every page and in your dashboard settings, turns them off at any time. If your browser sends Global Privacy Control or Do Not Track, marketing is off. Neither runs in your dashboard. Our own visit record uses no cookie, does run in the member app, and does not run in the staff console (see "What we collect").

7. How long we keep it

We keep each kind of information only as long as we need it:

  • Your account, profile, answers, files, CV, saved and applied jobs, matches and dashboard notes: while your account is open. When you delete your account they are removed from our database at once.
  • Payment records (plan, amount, dates, refunds, disputes) and the record of what you agreed to (Terms and Privacy Policy, with the version and date): kept after your account is deleted, together with your email address, for as long as tax, accounting and payment-network rules require, and to answer refunds and chargebacks. They are kept apart from any account and used for nothing else.
  • Support conversations and privacy requests: up to 2 years after the last message.
  • Copies of the emails we sent you: 90 days. Names and emails in our job search logs: 90 days.
  • Security and abuse records: the record of staff actions is kept 2 years; records of AI use (counts only, no content) 1 year. Sign-in sessions end when you log out or after a period without use.
  • Website and app visit records: about 13 months. They include the page, IP address, browser and approximate place. They have no name or email unless the visit was signed in. Deleting your account removes that label; the visit record stays until the 13 months end.
  • Backups of our database are replaced within about two weeks, so a deleted record is gone from them after that.

Our payment provider (Stripe) keeps its own payment records under its own policy and the law.

8. Your choices and rights

  • See and fix: you can see and change your answers in the dashboard at any time.
  • Download: Settings has a button to download everything we hold about you.
  • Delete: Settings has a button to delete your account.
  • Emails: we only email you about your account (for example receipts and password resets). New matches are shown in your dashboard, not sent by email or text.
  • Documents and CV: you can remove any file you uploaded and make your CV again at any time.

Depending on the state where you live, and on whether its privacy law applies to a business of our size and kind, you may have the right to know what personal information we hold and why, to get a copy, to correct it, to delete it, to limit the use of sensitive information, to opt out of certain uses, and not to be treated worse for using these rights. Not every state gives every right. We do not sell your personal information or share it for advertising.

How to make a request: use the privacy request form at nextjobtoday.com/privacy-request (no login needed), or email us at the address below. Tell us your name, the email address you use with us, your state and what you are asking for. We write to that email address to confirm the request is yours before we act on it. You may ask someone to act for you, with your written permission. We answer within the time the law sets, usually 45 days.

If we say no to all or part of a request, we tell you why. You can appeal: choose "Appeal a decision" on the same form or reply to our answer, and a different person reviews it and answers within 60 days. If you are still not satisfied, you can contact the attorney general of your state.

9. Equal opportunity

We do not ask for your age, gender, race, religion, health or disability, and nothing like that is used to match you or to write your CV. Your answers do not change what you pay.

10. Security

We use encrypted connections, store passwords in a protected form, keep files private to their owner, and limit who on our team can see data. No system is perfectly secure, so please use a strong password and keep it private. If we learn of a breach that affects you, we will tell you as the law requires.

11. Children

The service is for people 18 and older. We do not knowingly collect information from anyone under 18. If you think a child has given us information, write to us and we will delete it.

12. Changes

We may change this policy. When a change matters we will tell you and ask you to read it again. The date at the top shows the version.

13. Contact

Questions or requests about your information: support@nextjobtoday.com.

  • NextJob
  • Email: support@nextjobtoday.com