Privacy Policy

Last updated: 20 May 2025 · Effective: 20 May 2025

nextWithUS is a brand and product of Cromtek Solutions Pvt. Ltd. ("we", "our", "us"). We are committed to protecting your privacy. This policy explains what data we collect, why we collect it, and how you can control it.

1. Information We Collect

1.1 Account Information

When you register, we collect your name, email address, password (hashed), and role (Job Seeker, Employer, or Freelancer). If you sign in via GitHub OAuth, we receive your GitHub username, public email, avatar, and public profile URL from GitHub.

1.2 Profile Data

You may choose to provide additional profile information such as your city, bio, skills, years of experience, LinkedIn URL, GitHub URL, resume (stored as an encrypted file), portfolio projects, and a profile photograph.

1.3 Usage Data

We collect information about how you interact with the platform — pages visited, jobs viewed, searches performed, and features used — to improve the service.

1.4 Payment Data

Payments are processed through Razorpay. We store only your Razorpay Order ID and Payment ID for reconciliation. We do not store card numbers, CVVs, UPI handles, or any raw payment credentials.

2. How We Use Your Information

Service Delivery

To create your account, match you with relevant jobs or candidates, send notifications, and process payments.

Communication

To send you transactional emails (application updates, job matches, password resets). You can unsubscribe from marketing emails at any time.

Security & Fraud Prevention

To detect and prevent abuse, fake listings, and policy violations.

Product Improvement

Aggregated, anonymised usage data helps us improve search relevance, job matching, and overall product quality.

3. Information Sharing

With Employers

When you apply for a job, your profile (name, skills, experience, resume, portfolio) is shared with the hiring employer. You control what appears on your profile.

With Service Providers

We share data with trusted third parties who help us operate — Razorpay (payments), AWS (hosting), Resend/SMTP provider (emails). All are bound by confidentiality agreements.

Legal Requirements

We may disclose information if required by law, court order, or to protect the safety of our users or the public.

We Do Not Sell Data

nextWithUS does not sell, rent, or trade your personal information to advertisers or data brokers, ever.

4. Data Security

Encryption

All data in transit is encrypted via TLS 1.2+. Passwords are hashed using bcrypt (cost factor 12). JWT tokens are signed with a secure secret and expire after 7 days.

Access Controls

Only authorised nextWithUS employees with a documented need can access production data. All access is logged.

Breach Notification

In the unlikely event of a data breach affecting your personal information, we will notify you within 72 hours via email and post a notice on the platform.

5. Your Rights

Access & Portability

You can download a copy of your personal data from Settings → Export My Data at any time.

Correction

You can edit your profile information directly from your settings page.

Deletion

You can delete your account from Settings → Delete Account. All personal data will be permanently deleted within 30 days, except data required for legal or financial compliance.

Opt-out

You can unsubscribe from marketing emails using the link in any email, or by going to Settings → Notifications.

6. Cookies & Tracking

Essential Cookies

We use session cookies for authentication (next-auth session tokens). These are required for the platform to function.

Analytics

We use privacy-first analytics (no cross-site tracking, no selling to ad networks). Aggregate pageview data is used only to improve the product.

No Third-party Ad Tracking

We do not use Facebook Pixel, Google Ads remarketing tags, or any behavioural advertising trackers.

7. Contact Us

Privacy Officer

For privacy-related queries, email us at team@nextwithus.in. We will respond within 7 business days.

Grievance Officer (India)

As required under the IT Act 2000 and DPDP Act 2023, our designated Grievance Officer can be reached at team@nextwithus.in. Response within 30 days.

Registered Entity

nextWithUS is a brand and product of Cromtek Solutions Pvt. Ltd., Panipat - 132103, Haryana.

Questions about this policy?

We're happy to explain anything in plain language.

Contact our Privacy team