Privacy, in plain English.

NextSelecta is AI talent-matching software. We hold less data than most tools in this space, and we tell you what we hold and how it's used.

Who we are

NextSelecta is operated by DIRWAAS Intelligent Solutions LLC, based in Amman, Jordan. We are the controller of the personal data we collect about users of NextSelecta. For any privacy question or request, write to [email protected].

What we collect

• Your email (for sign-in via magic link).
• Your mobile number, only if you choose to verify one. It is optional, and skipping it changes nothing else about your account.
• Your CV file (PDF or DOCX), and your photo if you choose to add one.
• Your answers to the follow-up questions our AI asks while completing your profile.
• The structured profile we extract from your CV (roles, skills, dates, achievements).
• Your stated target roles and visibility preferences.
• Records of recruiter actions on your profile (unlocks).
• For employers: your name, company, the job descriptions and answers you give us, your searches, and your credit history.
• Basic technical data needed to run and protect the service, such as IP address in server logs.
• Basic technical data (IP address, browser) when you visit, kept in standard server logs.

What we never do

• Sell or rent your data to anyone.
• Sell, rent, or share your mobile number or your SMS consent with third parties for marketing purposes. Neither is shared with anyone for marketing, ever.
• Show your name or contact to recruiters before you opt in to be visible, or before they pay to reveal.
• Send your CV file to third-party tools we don't use to operate the service.

SMS and your mobile number

Verifying a mobile number is optional. If you choose to, we send you a single one-time verification code by SMS, delivered on our behalf by Relay52, the messaging platform we use for verification. Message and data rates may apply, and message frequency varies.

This number is used for verification codes only. We never send marketing, promotions, reminders, or re-engagement messages to it, so there is no ongoing stream of messages to unsubscribe from. A code is sent only at the moment you ask for one.

How to stop receiving codes. You can turn them off yourself at any time in settings, or ask us to do it by contacting [email protected]. Either way we stop sending to that number. If your number is in the United States or Canada you can also reply STOP to one of the messages. Replying does not work on numbers elsewhere, including Jordan: those codes are sent from a sender name rather than a phone number, so there is nothing for your reply to reach. Use the setting or email us instead.

We use that number for one thing only: sending you a verification code. We never send marketing, promotions, reminders, or re-engagement messages to it. Your mobile number and your SMS consent are never sold, rented, or shared with third parties for marketing purposes.

Recruiters never see your number. They only see that a number was verified, which is there to show them a profile belongs to a real person. You can ask us to delete the number at any time by contacting us, and deleting your account removes it along with everything else.

Who sees your profile

Your profile is hidden until you finish it and choose to share it (you can hide it again any time in settings). Once shared, recruiters whose open roles match you see an anonymized card: skills, experience shape, location, and why you fit. No name, contact details, employer names or photo. When a recruiter pays to select you, they get your name, email, CV and photo if you added one, and we email you straight away.

AI processing

We use OpenAI to (1) extract a structured profile from your CV, (2) ask you follow-up questions and read your answers into your profile, (3) generate gap suggestions for you, and (4) write match summaries for recruiters. Your CV text and answers are sent to OpenAI for these purposes; OpenAI does not retain them for model training under their API terms. Your photo is never sent to OpenAI.

Recruiter payments are processed by Paddle, our Merchant of Record. We never see or store card details.

Why we use it, and on what legal basis

• To provide the service (build your profile, match it to roles, show it to employers, let employers unlock it): performance of our contract with you.
• To keep it secure and prevent fraud and abuse: our legitimate interest in a safe service.
• To send service emails (sign-in links, “you were selected”, new matches): performance of contract. Reminder emails rely on our legitimate interest; email us and we stop them.
• Optional phone verification: your consent, which you can withdraw in settings.
• Accounting and tax records for purchases: legal obligation.

Who we share it with

• Employers, as described above: anonymised first, full profile only after they unlock you.
• Service providers who process data for us: DigitalOcean (hosting), OpenAI (AI processing, no training on your data), Resend (email), Relay52 (optional SMS codes), Cloudflare (encrypted backups).
• Paddle, our Merchant of Record, for the sale of credits, payments, tax compliance and invoicing. Paddle is an independent controller of the payment data it collects.
• Professional advisers, and authorities where the law requires it or to protect rights and safety.

We never sell your personal data.

How long we keep it

Your profile, CV and photo stay until you delete them or your account. Employer searches are deleted after 180 days, except records of a paid unlock, which we keep as a receipt. Backups roll over after 14 days. Purchase records are kept as long as tax law requires. When data is no longer needed it is deleted or anonymised.

Security

Data is encrypted in transit, access is limited to a small number of administrators, and files are only served to people entitled to them (you, and an employer who has unlocked you).

Your rights

• Access: view all your data on the dashboard and profile pages.
• Correct: edit your profile any time.
• Delete: from Settings → Delete account. Removes your user record, profile, CV, and structured data.
• Export: self-serve, any time. Download all your data as a JSON file from your dashboard.

Where data lives

On our servers at DigitalOcean, with encrypted off-site backups at Cloudflare. Some of our providers process data outside your country, including in the United States; where the law requires it we rely on standard contractual safeguards.

Cookies

We use one cookie: a session cookie set when you sign in. We don't set advertising cookies. We don't use third-party analytics that set tracking cookies.

We may update this page as the product evolves. Material changes will be announced via email if you have an account.