Privacy Policy

Your career data is sensitive. Here is exactly how we collect, use, and protect it.

Last updated: March 1, 2026

Data We Collect

Personal Information: Name, email address, phone number (optional), profile photo, career goals and target roles.

Career Data: Resume content, portfolio projects, skill assessment responses, job preferences, application history.

Usage Data: Pages visited, features used, time spent on platform, device information, IP address.

AI Interaction Data: Queries to career coach, generated content preferences (PII redacted from logs).

How We Use Your Data

Provide and personalize career development features (assessments, career plans, resume building, job matching).

Generate AI-powered recommendations and coaching responses.

Improve platform accuracy through aggregated, anonymized analytics.

Send important account and service notifications.

Process payments and manage subscriptions via Stripe.

We never sell your personal data to third parties.

AI Processing

Your data may be processed by AI models (via OpenRouter) to generate assessments, career plans, and recommendations.

PII is automatically redacted from AI interaction logs before storage.

You can opt out of AI processing at any time in Settings.

AI-generated content (resumes, cover letters, career plans) belongs to you.

Cookies & Tracking

Essential cookies: Session management, authentication state, security tokens.

Preference cookies: Theme settings, dashboard layout preferences, language.

Analytics cookies: Page views, feature usage, performance metrics (anonymized).

You can manage cookie preferences through the cookie consent banner on first visit.

Third-party cookies: Google OAuth (authentication only).

Third-Party Services

Stripe: Payment processing (PCI DSS compliant).

Google: OAuth authentication.

OpenRouter: AI model API (no data retained by provider).

Cloud infrastructure: Encrypted data storage and hosting.

All third parties are bound by data processing agreements.

Data Retention & Deletion

Account data retained while your account is active.

Deleted accounts: Data permanently removed within 30 days.

AI interaction logs: Auto-purged after 90 days.

Payment records: Retained as required by law (typically 7 years).

Request data deletion anytime: Settings page or email privacy@oforo.ai.

Your Rights

Access: Export your data at any time from Settings.

Rectification: Update personal information in your profile.

Erasure: Delete your account and all associated data.

Portability: Download data in standard formats (JSON, PDF).

Object: Opt out of AI processing or marketing communications.

For GDPR-specific rights, see our GDPR Compliance page.

Children's Privacy

NXTED AI is not intended for users under 16 years of age.

We do not knowingly collect data from children under 16.

If we discover such data has been collected, it will be deleted promptly.

Changes to This Policy

We may update this policy periodically to reflect platform changes.

Significant changes will be communicated via email and in-app notification.

Continued use of the platform after changes constitutes acceptance.

Contact: privacy@oforo.ai for questions about this policy.