Privacy Policy

What we collect

• Your account details: name and email address, from the sign-up form or from Google when you sign in with it.
• Your resume (the PDF you upload) and the master resume we build from it: your name, contact details, skills, experience, education and projects.
• Your settings and activity in the app: the emails you draft and send, application status, saved jobs, and your preferences.
• If you connect Gmail: your Gmail address and a token that lets us send email on your behalf. We ask for permission to send email, and for read-only access. We never send, delete or change anything in your inbox with the read-only access. We use it for two things only:
  • To find replies to emails you sent through NextKnock, so we can show replies, interview invites, tests and offers next to each application. We read the threads of those emails, plus new emails from the exact address you wrote to, job-related emails from that company's own email domain, and delivery-failure notices about those emails. For other emails from that company domain we look only at the sender, subject and preview line, and skip anything not about your application. For replies we keep the reply text, a short summary and the details we find (such as the interview time and link).
  • Only if you turn on Inbox scan in Settings (it is off by default): to look through your inbox for job-related emails you didn't start from NextKnock, such as recruiter messages, interview invites, tests and offers. For those job emails we store only the subject, a short snippet and the details we extract (company, role, time and link), never the full message. Emails that aren't about jobs are ignored and nothing about them is stored.

How we use it

• To build your master resume, match you with jobs, and write draft emails for you to review.
• To send an email from your Gmail only when you approve it, or when you start an Auto send batch and confirm it.
• To keep a record of what you sent, so we can enforce daily limits and never email the same address twice.
• To show replies, and job emails found by Inbox scan if you turned it on, in Applied and Reminders.

We do not sell your data, we do not use it for advertising, and we do not use it to train AI models.

Google user data

NextKnock's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. The Gmail permissions we request (send email, and read-only access) are used only to send the emails you approve, to show you the replies to them and, only if you turn on Inbox scan, to find job-related emails in your inbox. They are never used for advertising, never shared with other people, and no human reads your email unless you ask us to help with a problem.

To recognise what a reply means (for example an interview invite, a test link or a rejection), the text of that reply is sent to our AI providers (OpenAI and Google Gemini) through their APIs, only to classify it and pull out details such as the interview time. Data sent through these APIs is not used to train their models under the providers' API terms, and we never use Google user data to train or improve AI models ourselves. Data from Google APIs is not transferred to anyone else except as needed to provide these features, to comply with the law, or with your explicit permission.

How long we keep it

• Gmail access tokens: until you disconnect that Gmail account in Settings or delete your account; they are deleted at once.
• Replies to your emails and the details found in them: kept with the application they belong to until you delete it or your account.
• Job emails found by Inbox scan: until you delete them (one button in Settings) or turn Inbox scan off and delete them.
• Your resume and your applications: until you delete them or your account.
• Usage analytics: kept to understand and improve the service, and deleted with your account.
• When you ask us to delete your account, we delete your data within 30 days.

Who processes it

To run the service we use these providers, and they receive only what is needed: Supabase (database and file storage, hosted in the Asia-Pacific region), Vercel (hosting), and AI providers (Google Gemini and OpenAI) to read your resume and write email drafts. Gmail access tokens are encrypted before they are stored.

A small number of NextKnock staff can view your account details, your resume and your activity in the app (for example, how many emails you sent) to run the service, answer support requests and prevent abuse. Staff access is limited to signed-in admins.

Usage analytics

When you are signed in, the pages you open are logged as part of your account activity, the same way any web app keeps server logs: which page, when, what kind of device and browser, and which country the request came from. We use this to run and improve the service. Where your browser allows it, we also measure how long a page stays open, using our own first-party cookies (a random visitor id and a 30-minute session id).

For visitors who are not signed in, we count page visits the same first-party way, and we honour Do Not Track and Global Privacy Control: if your browser sends either, nothing is recorded and no analytics cookies are set. (If you are signed in, time on page is not measured when your browser sends them, but page visits are still part of your account activity.)

We do not store IP addresses. We do not use a third-party analytics service, and this data is not shared with anyone else.

Company and contact data

The company directory contains information published on company websites and in public hiring posts, such as company names and hiring email addresses that companies or recruiters have made public. If you are a company or recruiter and want an address removed, contact us.

Your choices and deleting your data

• You can disconnect any Gmail account at any time in Settings. Its token is deleted, and you can also revoke access at myaccount.google.com/permissions.
• You can turn Inbox scan off at any time in Settings, and delete everything it found with one button there.
• You can replace or edit your resume in the app.
• To delete your account and all your data, email us and we will remove it.

Contact

Questions or deletion requests: jayeshname6@gmail.com.