Privacy Policy

What we collect

• Your account details: name and email address, from the sign-up form or from Google when you sign in with it.
• Your resume (the PDF you upload) and the master resume we build from it: your name, contact details, skills, experience, education and projects.
• Your settings and activity in the app: the emails you draft and send, application status, saved jobs, and your preferences.
• If you connect Gmail: your Gmail address and a token that lets us send email on your behalf. We ask for permission to send email only. We use it only to send the emails you approve. We never read, search, delete or change anything in your inbox, and we cannot: the permission we ask for does not allow it. Replies from companies go straight to your own Gmail; if you want NextKnock to track them, you mark a reply or an interview yourself in Applied.

How we use it

• To build your master resume, match you with jobs, and write draft emails for you to review.
• To send an email from your Gmail only when you approve it, or when you start an Auto send batch and confirm it.
• To keep a record of what you sent, so we can enforce daily limits and never email the same address twice.
• To show the replies and interviews you mark in Applied, with reminders to follow up.

We do not sell your data, we do not use it for advertising, and we do not use it to train AI models.

Google user data

NextKnock's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. The only Gmail permission we request is to send email, and it is used only to send the emails you approve, from your own account. We never read your inbox. Gmail data is never used for advertising, never sold, never shared with other people, and never used to train AI models.

Because we never read your inbox, no email you receive is sent to our AI providers. The AI providers (OpenAI and Google Gemini) only see what is needed to write your drafts: your resume details and the job or company you are writing to. Data sent through their APIs is not used to train their models under the providers' API terms, and we never use Google user data to train or improve AI models ourselves. Data from Google APIs is not transferred to anyone else except as needed to send your emails, to comply with the law, or with your explicit permission.

Emails sent through NextKnock can include a small tracking image and tracked links, so the sender can see if and when the email was opened or one of their own links (such as their GitHub or portfolio) was clicked. We don't store the recipient's IP address, only a coarse note of the kind of mail app and a daily-changing anonymous code used to avoid double counting. Senders can turn this off any time in Settings, under Email.

How long we keep it

• Gmail access tokens: until you disconnect that Gmail account in Settings or delete your account; they are deleted at once.
• We do not read or store anything from your inbox. The reply and interview statuses you mark are kept with the application until you delete it or your account.
• Your resume and your applications: until you delete them or your account.
• Usage analytics: kept to understand and improve the service, and deleted with your account.
• When you ask us to delete your account, we delete your data within 30 days.

Who processes it

To run the service we use these providers, and they receive only what is needed: Supabase (database and file storage, hosted in the Asia-Pacific region), Vercel (hosting), and AI providers (Google Gemini and OpenAI) to read your resume and write email drafts. Gmail access tokens are encrypted before they are stored.

A small number of NextKnock staff can view your account details, your resume and your activity in the app (for example, how many emails you sent) to run the service, answer support requests and prevent abuse. Staff access is limited to signed-in admins.

Usage analytics

When you are signed in, the pages you open are logged as part of your account activity, the same way any web app keeps server logs: which page, when, what kind of device and browser, and which country the request came from. We use this to run and improve the service. Where your browser allows it, we also measure how long a page stays open, using our own first-party cookies (a random visitor id and a 30-minute session id).

For visitors who are not signed in, we count page visits the same first-party way, and we honour Do Not Track and Global Privacy Control: if your browser sends either, nothing is recorded and no analytics cookies are set. (If you are signed in, time on page is not measured when your browser sends them, but page visits are still part of your account activity.)

We do not store IP addresses in our analytics. We do not use a third-party analytics service, and this data is not shared with anyone else. For our free tools (used without an account), we keep a one-way hash of your IP address for up to 30 days to limit free use; we never store the IP address itself or anything you type into the free tools.

Company and contact data

The company directory contains information published on company websites and in public hiring posts, such as company names and hiring email addresses that companies or recruiters have made public. If you are a company or recruiter and want an address removed, contact us.

Your choices and deleting your data

• You can disconnect any Gmail account at any time in Settings. Its token is deleted, and you can also revoke access at myaccount.google.com/permissions.
• You can replace or edit your resume in the app.
• To delete your account and all your data, email us and we will remove it.

Contact

Questions or deletion requests: jayeshname6@gmail.com.