Privacy Policy

• Account & Profile Information. Name, email, authentication identifiers, school/university, year, gender, target industry and level, optional LinkedIn URL, and any preferences you provide during onboarding.
• Session Recordings & Practice Data. Microphone audio, webcam video, screen captures, transcripts, embeddings, behavioral signals (e.g., pace, hesitations), uploaded resumes/documents, and prompts you submit.
• AI-Derived Data. Scores, rubric ratings, qualitative feedback, summaries, and other outputs generated from your Session Recordings.
• Usage & Telemetry. Pages visited, features used, click events, error logs, device type, browser, operating system, IP address, approximate location (derived from IP), and timestamps.
• Payment Information. If you subscribe, our payment processor (e.g., Stripe) collects your billing details; we receive only limited metadata such as the last four digits, brand, and billing country — never the full card number.
• Communications. Messages you send to support, survey responses, and feedback.

• To provide, personalize, and improve the Service;
• To generate AI-driven scores, transcripts, and feedback that you can review;
• To operate, monitor, secure, and debug our infrastructure;
• To evaluate, fine-tune, and benchmark our AI models (using de-identified or aggregated data wherever feasible);
• To process payments and manage subscriptions;
• To send transactional and account-related communications, and (with consent or as permitted by law) marketing communications you can opt out of at any time;
• To comply with legal obligations, enforce our Terms, and prevent fraud, abuse, or harm to users or third parties.

We do not sell personal information. We share data only with:

• Subprocessors and infrastructure providers who power the Service, including cloud hosting (e.g., AWS, Vercel), authentication and database (e.g., Supabase), speech-to-text providers, large language model providers (e.g., OpenAI, Anthropic, Google), analytics, and payment processors (e.g., Stripe). These vendors are contractually bound to use data only to provide services to us.
• Legal and safety recipients when required by law, subpoena, or court order, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business transfers. If NextRound is involved in a merger, acquisition, financing, or asset sale, your information may be transferred subject to standard confidentiality protections.
• With your direction. When you choose to share content (e.g., exporting a session) or grant integrations access.

Depending on your jurisdiction (including under GDPR, UK GDPR, and CCPA/CPRA), you may have the right to:

• Access the personal data we hold about you;
• Correct inaccurate data;
• Delete your account and associated personal data;
• Port your data in a portable format;
• Object to or restrict certain processing;
• Withdraw consent (e.g., revoke recording consent);
• Opt out of the “sale” or “sharing” of personal information for cross-context behavioral advertising (we do not engage in such sale or sharing);
• Lodge a complaint with your local data-protection authority.

To exercise these rights, email dereksatz@thenextround.ai. We will respond within the timeframes required by applicable law.