NextJobMate Website and Web Extension Privacy Policy

Company: Helpen.In Enterprises Private Limited

Address: 181, Maayka, Mangal Sah Chowk, Main Baazar, Dalsinghsarai, Samastipur, Bihar, 848114

1. Overview

This Privacy Policy explains how Helpen.In Enterprises Private Limited ("Helpen.In", "NextJobMate", "we", "us", or "our") collects, uses, stores, shares, and protects personal data when you use NextJobMate through our website, web app, APIs, browser-assisted workflows, extension-linked workflows, communications, support channels, and related web services.

NextJobMate helps job seekers organize a job search, discover relevant opportunities, prepare CVs and cover letters, practice interviews, track applications, and manage application-related records. Because this service depends on personal career information, we aim to use only the data needed to provide the service, explain our processing clearly, and give users practical privacy controls.

2. Who this policy applies to

This policy applies to:

registered users of NextJobMate;
visitors to nextjobmate.com;
users of NextJobMate website and web app;
users of browser-assisted, extension-linked, or web application-assist features;
people who contact us for support, sales, legal, privacy, or security reasons;
enterprise administrators and team members, if a business account is used.

This policy does not govern third-party career sites, employer sites, job boards, applicant tracking systems, payment providers, AI providers, email providers, or analytics providers. Their own policies apply to their services.

3. Data we collect

3.1 Account and contact data

We may collect:

name;
email address;
phone number, if used for OTP or account recovery;
WhatsApp number, if you choose WhatsApp alerts or briefs;
country, region, language, timezone, and device locale;
login, authentication, and account status data;
support messages and correspondence.

3.2 Career profile and user content

We may collect data you provide or upload, including:

CV, resume, career profile, work history, education, skills, projects, certifications, achievements, and job preferences;
cover letters, generated CV versions, gap notes, interview prep materials, and saved templates;
answers to application questions;
saved searches, target roles, excluded companies, preferred locations, seniority, salary expectations, work authorization, notice period, and similar job-search preferences;
files or text you upload for profile creation or document generation.

3.3 Job search, application, and outcome data

We may collect:

jobs viewed, saved, hidden, shortlisted, or marked as applied;
application status, stage, notes, reminders, interview schedule, and outcomes;
application evidence such as timestamps, job identifiers, application-route records, user confirmations, and generated document versions used for a role;
job-alert emails or message content you forward or route to NextJobMate, including sender details, subject, body text, job links, provider signals, routing records, and security logs;
public or third-party job-listing information that our systems retrieve, normalize, index, cache, or enrich to provide matching, search, and recommendation features.

3.4 Web and browser-assisted data

For web, browser-assisted, and extension-linked features, we may process:

application workflow state;
user-authorized browser companion or extension status;
job-page metadata needed to help prepare, review, or transmit application materials;
device pairing records and audit logs;
user approvals, pauses, retries, and completion confirmations;
configured workflow limits, safety stops, and attention-required events;
browser or page compatibility signals needed to support the requested workflow.

Third-party platform passwords are not intended to be stored by NextJobMate. Where a browser-assisted workflow is used, you remain responsible for the third-party account and for complying with that third party's terms.

3.5 Payment and subscription data

If you purchase a subscription or paid feature, we may process:

plan, entitlement, subscription, renewal, cancellation, restore, refund, and billing-status data;
web payment, invoice, entitlement, and verification metadata.

We do not store full credit card numbers. Web payment providers, if used, process payment information under their own terms.

3.6 Analytics, diagnostics, and security data

We may collect:

product interaction data such as screens opened, features used, errors, and consent states;
logs needed for security, fraud prevention, abuse prevention, uptime, debugging, and support;
IP address, approximate region, user agent, request headers, device identifiers, and session identifiers;
redacted crash reports and diagnostic bundles.

We do not use analytics to sell advertising profiles. Where analytics is optional, we will provide a consent or preference control where required.

3.7 Notifications, email forwarding, and WhatsApp data

If you use notification, email-forwarding, or WhatsApp features, we may process:

notification channel choices for push, email, WhatsApp, and in-app messages;
consent, opt-in, pause, unsubscribe, STOP, and preference records;
web push subscriptions, browser identifiers where used, delivery results, opened status, deep links, and quiet-hour settings;
presence signals, such as recent web app activity, to choose a suitable channel and reduce unnecessary messages;
job-alert emails that you choose to forward or route to a NextJobMate address;
parsed job links, sender signals, subject lines, message body text, attachment signals where supported, and spam or loop-prevention logs;
WhatsApp number, chosen brief timing, timezone, language preference where supported, template message status, delivery receipts, and inbound replies;
brief content such as top matches, interview reminders, attention-needed alerts, weekly summaries, and job-search nudges.

Email forwarding is user-configured. NextJobMate does not access your full email inbox unless a separate inbox-connection feature is clearly offered and enabled by you.

WhatsApp messages are optional and require opt-in. You may pause or stop WhatsApp messages through supported controls or by sending a recognized stop instruction where supported.

Web push notifications and progress surfaces are optional and may be controlled through browser settings and account preferences. We aim not to include unnecessary sensitive or confidential information in notification previews.

4. Data we do not intentionally collect

We do not intentionally collect:

full payment card numbers when handled by a third-party payment provider;
contact lists;
precise GPS location;
health or fitness data;
government ID documents unless you voluntarily send them to support or another third party outside NextJobMate;
third-party platform passwords;
user content from unrelated apps.

If you include sensitive data in a CV, resume, cover letter, support message, or application answer, we may process it as part of the content you provided.

5. How we use data

We use data to:

create and secure your account;
build and maintain your career profile;
match you with relevant roles;
retrieve, normalize, index, cache, and enrich job-listing information;
process job-alert emails you choose to forward or route to NextJobMate;
generate, improve, and organize CVs, cover letters, gap notes, interview prep, and related career materials;
help you track applications and outcomes;
provide browser-assisted and extension-linked application-assist workflows requested by you;
send and manage notifications, job-search alerts, progress surfaces, email digests, WhatsApp briefs, reminders, attention-needed alerts, and in-product messages;
route messages through suitable channels based on your preferences, quiet hours, delivery status, and app activity;
verify purchases, restore entitlements, manage subscriptions, and prevent billing abuse;
provide support and respond to requests;
send service messages, security notices, and job-search reminders;
operate, debug, secure, monitor, and improve the service;
comply with law and enforce our Terms.

6. Legal bases for processing

Depending on your location, we rely on one or more of the following legal bases:

contract: to provide the service you requested;
consent: for optional features such as certain notifications, WhatsApp messages, email-forwarding integrations, training/evaluation opt-ins, recruiter sharing, marketing, or optional AI settings;
legitimate interests: to secure, maintain, improve, and prevent abuse of the service;
legal obligations: for tax, accounting, compliance, lawful requests, and dispute handling;
vital or public interests where required by applicable law.

You may withdraw consent where processing is based on consent. Withdrawal does not affect processing that occurred before withdrawal.

7. AI processing

NextJobMate uses AI and other computational methods to match roles, classify job information, generate draft documents, improve wording, identify gaps, prepare interview practice, and support application workflows.

Depending on configuration, data may be processed by:

Helpen.In systems;
local or on-device processing routes where available;
third-party AI service providers;
deterministic or non-AI processing where appropriate.

AI output may be incomplete, inaccurate, or unsuitable for a particular employer. You are responsible for reviewing all generated content before using it.

AI-supported features may parse career profile information, classify job requirements, draft or revise CVs and cover letters, generate interview practice questions, suggest answers from saved profile facts, summarize application status, detect inconsistent information, and support quality review where permitted.

Not every feature uses AI. Some features may use rules, templates, matching algorithms, ranking systems, or database lookups before or instead of AI.

Do not include unnecessary sensitive information in prompts, documents, or support messages. Examples include government IDs, financial account details, medical information, passwords, or third-party account credentials.

Where available, local or on-device processing may be offered for certain tasks. Availability depends on device capability, model readiness, quality thresholds, and feature support. If a local route is unavailable or insufficient, the service may use a cloud route unless you disable that fallback where supported.

We may use de-identified, aggregated, or consented data to improve service quality. If a feature asks whether generated output may be used for training or evaluation, that feature should be off unless you opt in.

Where required by law or product context, we may label content as AI-generated, AI-assisted, or generated with assistance. Users should not remove or misrepresent labels where doing so would be unlawful or misleading.

8. Third-party sources and job-listing information

NextJobMate may display, process, or summarize information obtained from publicly available job listings, employer career pages, job boards, user-provided links, forwarded alerts, and other third-party sources. We use this information to provide search, matching, organization, and application-preparation features.

Third-party job information may change, expire, be removed, or contain errors. We do not guarantee that a role remains available, that an employer will respond, or that any third-party site will accept an application.

Job-related information may include employer names, role titles, descriptions, locations, compensation ranges where shown, required skills, application-route details, deadlines described by a source, and public employer or platform context. Third-party job listings, company names, logos, trademarks, descriptions, and hiring processes belong to their respective owners. NextJobMate does not claim ownership of third-party listings or employer content.

If a publisher, employer, or platform believes displayed job information is inaccurate, stale, or should be removed from NextJobMate search results, contact team@nextjobmate.com with the source URL, company or platform name, reason for request, and proof of authority to act. We may correct, de-index, hide, refresh, or remove information where appropriate.

9. Cookies and similar technologies

NextJobMate may use cookies and similar technologies on nextjobmate.com, app.nextjobmate.com, and related web services. Similar technologies may include local storage, session storage, pixels, SDK identifiers, and device or browser signals.

We may use strictly necessary technologies for login, session management, security, abuse prevention, load balancing, privacy preference storage, subscription routing, checkout routing, and form-state support. These are generally enabled by default.

We may use functional technologies to remember choices such as language, theme, region, saved settings, in-app preferences, and consent choices.

If enabled, analytics and performance technologies help us understand page use, feature use, errors, performance issues, device compatibility, browser compatibility, conversion, and product health. Where required, we ask for consent before using non-essential analytics technologies.

Support and diagnostics technologies may help us respond to support requests, diagnose crashes, debug errors, and understand failed flows. Diagnostic data should be minimized and redacted where practical.

If we use marketing or campaign-measurement technologies, we will disclose them and provide choices where required. We do not intend to use advertising identifiers to sell cross-site advertising profiles.

You can manage cookies and similar technologies through our preference center where displayed, browser settings, or account privacy settings where applicable. Blocking necessary technologies may prevent login, account security, payments, or web features from working.

10. Sharing of data

We may share data with:

cloud hosting, database, storage, and infrastructure providers;
AI providers where configured for the service;
payment providers for purchases and subscription verification;
email, OTP, push notification, WhatsApp or business messaging, and customer support providers;
analytics, diagnostics, and crash-reporting providers, if enabled;
professional advisors, insurers, auditors, and legal counsel;
law enforcement, regulators, courts, or government authorities when legally required;
successors in a merger, acquisition, financing, reorganization, or asset transfer.

We do not sell your personal data. We do not share your CV or contact details with recruiters unless you enable a recruiter-sharing feature or otherwise direct us to do so.

Subprocessors and service providers may include cloud hosting, object storage, AI processing, local processing routes, payment providers, email delivery, inbound email routing, SMS or OTP providers, web push providers, WhatsApp or business messaging providers, crash reporting, product analytics, customer support, web billing, and security monitoring. Provider names and regions may vary by configuration, account type, and product surface.

11. International transfers

We may process and store data in India, the United States, the European Economic Area, the United Kingdom, or other locations where we or our service providers operate. Where required, we use contractual safeguards and other transfer mechanisms for cross-border processing.

Processing locations may vary based on hosting region, cloud configuration, AI provider routing, payment provider operations, support tooling, analytics tooling, diagnostics tooling, user location, and enterprise configuration.

Where required by law, safeguards may include standard contractual clauses, UK transfer terms, data processing agreements, subprocessor agreements, encryption in transit, access controls, regional hosting choices where available, data minimization, local or on-device options where supported, and contractual confidentiality obligations.

When AI features use cloud providers, prompts, profile facts, job information, generated text, and related metadata may be sent to provider infrastructure outside your country. We aim to minimize unnecessary sensitive data and use redaction, routing, local processing, or configuration controls where appropriate.

12. Retention

We retain data for as long as needed for the purposes described in this policy, including to provide the service, comply with law, resolve disputes, maintain security, and enforce agreements.

Typical retention periods may include:

account and subscription records: for the life of the account and as required by law;
resume and profile documents: until deletion, account closure, or a stated retention period;
generated artifacts: until deleted by you, account deletion, or retention expiry;
behavior and improvement signals: generally limited and minimized over time;
voice-practice transcripts: shorter retention where feasible;
security logs: retained as needed for security and abuse prevention;
deletion audit records: retained in minimized form to prove completion and handle disputes.

Specific retention summaries may be available in the app.

Backups may retain data until backup rotation. Deleted data is not used for ordinary product features after deletion is complete.

13. Your privacy rights

Depending on your location, you may have rights to:

access your personal data;
receive a copy of your data;
correct inaccurate data;
delete data;
restrict or object to processing;
withdraw consent;
request portability;
opt out of certain marketing or data sharing;
limit use of sensitive personal information where applicable;
request human review of certain automated decisions where applicable;
complain to a data protection authority.

To exercise rights, use in-app controls where available or contact team@nextjobmate.com.

Users in the European Economic Area and United Kingdom may have rights to be informed about processing, access personal data, correct inaccurate data, erase data, restrict processing, object to processing, receive data portability, withdraw consent, lodge a complaint with a supervisory authority, and request human review where automated decisions legally or similarly significantly affect them.

Users in India may have rights under applicable Indian data protection law, including access to information about processing, correction, completion, erasure where applicable, grievance redressal, consent withdrawal where processing is consent-based, and nomination rights where required by law.

Users in California and other United States jurisdictions may have rights to know categories and specific pieces of personal information, know sources and purposes, request deletion, request correction, opt out of sale or sharing, limit certain sensitive information uses where applicable, and receive non-discrimination for exercising privacy rights.

Users in Brazil, Canada, Australia, New Zealand, and other jurisdictions may have additional rights under applicable law. We will honor applicable rights required by law. If you disagree with our response, you may reply and request reconsideration where a formal appeal right applies.

14. Account deletion

You may request account deletion in-app or through the public data-rights page. Deletion may be staged to prevent accidental loss, allow verification, handle billing and security records, and meet legal obligations. We may retain limited records where required for compliance, fraud prevention, tax, accounting, dispute resolution, or legal claims.

15. Security

We use administrative, technical, and organizational measures designed to protect personal data, including access controls, encryption in transit, secure storage practices, credential minimization, logging controls, and redaction where practical. No system is perfectly secure. You should protect your account credentials, device, email account, and third-party job-board accounts.

Our security posture is designed around data minimization, least-privilege access, user control, auditability, credential minimization, encrypted transport, safety stops for sensitive workflows, deletion and export support, and privacy-aware logging.

Access to production systems should be limited to authorized personnel with a business need. Administrative access should be logged, reviewed, and revoked when no longer needed.

Production secrets should be stored in managed secrets storage or protected environment configuration, not in source code. Third-party platform passwords are not intended to be stored by NextJobMate.

Logs should avoid full CV content, passwords, tokens, payment details, and unnecessary sensitive data. Where logs are needed for support, security, and debugging, data should be minimized or redacted where practical.

If we become aware of a potential security or privacy incident, we may triage severity, preserve evidence, limit access, rotate credentials, patch or disable affected systems, notify affected users or customers where required, notify regulators or authorities where required, and conduct review after mitigation.

16. Enterprise and business accounts

For business accounts, the organization using NextJobMate is generally the controller of customer personal data and Helpen.In is generally the processor. For operational data, billing data, security data, abuse-prevention data, and compliance records, Helpen.In may act as an independent controller.

Enterprise processing may include hosting, storage, account administration, authentication, role matching, career profile processing, document generation, application tracking, workflow assistance, AI-supported analysis, support, security monitoring, billing, analytics, diagnostics, data export, and deletion.

Enterprise customers may request information about hosting, subprocessors, transfer mechanisms, deletion, export, security controls, retention practices, and provider routing by contacting team@nextjobmate.com.

17. Children

NextJobMate is not intended for children under 18. We do not knowingly collect data from children under 18. If you believe a child has provided data to us, contact team@nextjobmate.com.

18. Marketing

We may send product news, launch announcements, or educational material if permitted by law and your preferences. You may opt out of marketing emails and optional promotional messages. Service, security, billing, legal notices, requested job-search alerts, and account messages may still be sent where permitted.

For WhatsApp, we will honor supported pause, stop, unsubscribe, or opt-out instructions. For web push notifications, you may use browser settings or account controls where available. For email, commercial messages should identify NextJobMate and provide a reasonable opt-out path where required.

19. Changes to this policy

We may revise this policy from time to time. If we make material changes, we will provide notice through the website, app, email, or another appropriate method. Continued use after the revised policy is posted means the revised policy applies.

20. Contact

For privacy questions, requests, or complaints, contact:

Helpen.In Enterprises Private Limited

181, Maayka, Mangal Sah Chowk, Main Baazar, Dalsinghsarai, Samastipur, Bihar, 848114

Email: team@nextjobmate.com