Privacy policy

Who we are

Nextward is run by legal name of the company or person running Nextward, registered address, company registration number (RNE), if any. We decide why and how your data is used, so we are the data controller.

For any question about your data, write to alabaganne9@gmail.com.

What we keep

We only keep what we need to run Nextward:

• Account: your name, email address and password. The password is stored in a scrambled form that we cannot read. Phone number and LinkedIn link are optional.
• Candidate profile: career stage, field, city or country, short bio, skills and the kind of roles you want.
• Company profile: company name, logo, website, description and location. This profile is public.
• Applications sent through Nextward: your message, cover letter, CV and other files you attach, and the status of the application.
• Saved roles and tracking: the opportunities you save, the ones you mark as applied elsewhere, and your private notes.
• Viewed roles: the opportunities you open. Before you log in, this list stays in your browser only. When you log in, we copy it to your account so you see it on all your devices.
• Saved searches and email alerts you choose to turn on.
• Messages you send to other users and the notifications we show you.
• Technical data: like most websites, our server records your IP address, the page asked for and your browser type, to keep the service working and safe.

Why we use it

• To create and run your account and show you opportunities that fit you. This is needed to give you the service you signed up for.
• To send your application to the company you chose, and let you both follow it.
• To send account emails (email check, password reset) and the alerts you turned on. You can stop alerts at any time with the link in each email.
• To keep Nextward safe, stop abuse and fix problems. This is our legitimate interest.

We do not sell your data, we do not show ads, and we do not use tracking or analytics cookies.

Who sees it

• Companies: when you apply through Nextward, the company that receives your application sees it, with your CV, your files and the profile details shown with it. Companies cannot browse candidate profiles.
• The people you write to, for messages.
• Everyone, for company profiles and the opportunities companies publish.
• The Nextward team, only when needed to run the service or answer you.
• Our service providers, who work for us under contract: hosting by hosting provider and server country and email sending by email provider.
• Public authorities, only when the law requires it.

Listings from other sites

Many listings are imported from public job sites and company career pages. They link to the original page. Opening that link does not send your CV or any data to the other site. If you apply there, that site’s own privacy policy applies.

How long we keep it

• Account, profile, saved roles, viewed roles, searches and messages: as long as your account is open. They are deleted when you delete your account.
• Applications and attached files: as long as your account is open, unless you withdraw the application sooner. A company that downloaded your CV keeps that copy under its own rules.
• Viewed roles kept in your browser: until you clear your browser data.
• Server logs: how long server logs are kept. Backups: how long backups are kept.

Delete your account

You can delete your account at any time: log in, open Settings, choose Delete account and confirm with your password. You can also ask us by email and we will do it for you.

For candidates, this deletes your profile, applications, attached files, saved and viewed roles, searches, messages and notifications. For companies, your listings are closed, and your company name stays on the applications candidates already sent you so they know who they applied to.

Your rights

You can ask to see the data we hold about you, correct it, delete it, or object to how we use it. You can also withdraw a consent you gave, such as email alerts. Write to alabaganne9@gmail.com and we will answer within one month.

Tunisia: we follow the Organic Law n° 2004-63 of 27 July 2004 on the protection of personal data. You can complain to the national authority, the INPDP (Instance Nationale de Protection des Données Personnelles). Our declaration to the INPDP: INPDP declaration or authorization number.

European Union: if you live in the EU, the GDPR also gives you the right to get your data in a reusable format and to complain to the data protection authority of your country.

Your data is stored on servers in server country. When data leaves Tunisia or the EU, we only send it where the law allows and with the safeguards it requires.

Cookies

We only use the cookies Nextward needs to work, so we do not ask for cookie consent:

• A session cookie that keeps you logged in while you browse. It ends after two hours without activity or when you log out.
• A security cookie (XSRF-TOKEN) that protects forms against fake requests.
• A “Remember me” cookie, only if you tick that box when you log in. It keeps you logged in for up to 400 days or until you log out.

Your browser’s local storage also keeps the roles you viewed or saved before logging in. Fonts and company logos are stored on our own servers, so loading them does not contact any other site.

Security

Pages are served over HTTPS, passwords are scrambled, and files attached to an application can only be opened by you and the company you sent them to. No system is perfect: if a breach puts your data at risk, we will tell you and the authorities as the law requires.

Changes to this policy

If we change this policy, we will update the date at the top. For important changes, we will also tell account holders by email.