Privacy Policy

Nexta Online, a division of Mover Marketing AI LLC ("Company," "we," "us," or "our") operates the Nexta Talent platform ("Platform"), accessible at applynexta.online. This Privacy Policy ("Policy") describes how we collect, use, disclose, retain, and protect your personal information when you access or use the Platform, submit an application, participate in assessments, or otherwise interact with us.

By accessing or using the Platform, you acknowledge that you have read, understood, and agree to the practices described in this Policy. If you do not agree with this Policy, you must not access or use the Platform. This Policy should be read in conjunction with our Terms of Service.

1. Information We Collect

1.1. Personal Information You Provide

When you use the Platform, create an account, or submit an application, we may collect the following categories of personal information directly from you:

• Identity Information: Full name, email address, phone number, physical location (city, state/province, country), and LinkedIn profile URL or other professional profile links.
• Professional Information: Resume or curriculum vitae, work history, employment background, education history, professional certifications, skills and competencies, portfolio samples, work references, and professional affiliations.
• Assessment Data: Responses to evaluation questionnaires, test task submissions, assessment scores and results, time spent on assessments, and other evaluation-related data generated during the application process.
• Communication Data: Messages sent through the Platform, emails exchanged with our team, interview notes and feedback, and any other communications related to your application.
• Scheduling Data: Calendar availability, interview scheduling preferences, time zone information, and Google Calendar data shared through our scheduling integration.

1.2. Information Collected Automatically

When you access the Platform, we automatically collect certain technical information, including:

• Device and Browser Information: IP address, browser type and version, operating system, device type, screen resolution, and device identifiers.
• Usage Information: Pages visited, features used, links clicked, time and date of access, duration of visits, referring URL, and navigation patterns within the Platform.
• Cookie and Tracking Data: Information collected through cookies, web beacons, pixels, and similar tracking technologies, as described in Section 10 of this Policy.

1.3. Information from Third Parties

We may receive information about you from third-party sources, including:

• Authentication Providers: If you sign in using a third-party service (such as Google), we receive your name, email address, and profile information from that service.
• Professional Networks: Publicly available information from LinkedIn or other professional profiles you reference in your application.
• References: Information provided by your professional references, if applicable.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Application Evaluation: Reviewing, evaluating, and processing your application for potential engagement opportunities, including scoring assessments and comparing qualifications against position requirements.
• Communication: Contacting you regarding your application status, scheduling interviews and assessments, sending notifications about new opportunities, and responding to your inquiries.
• Scheduling: Coordinating interviews and assessment sessions through our Google Calendar integration, managing availability, and sending calendar invitations.
• Platform Operations: Operating, maintaining, improving, and securing the Platform, including troubleshooting errors, performing data analysis, and developing new features.
• Analytics and Improvement: Analyzing usage patterns, evaluating the effectiveness of our hiring processes, improving our evaluation methodologies, and enhancing the user experience.
• Future Opportunities: Matching your profile and qualifications with future positions that may be a suitable fit, subject to your consent preferences.
• Legal Compliance: Complying with applicable laws, regulations, legal processes, and governmental requests, including tax reporting, employment law compliance, and responding to lawful requests from public authorities.
• Security and Fraud Prevention: Detecting, preventing, and addressing fraud, unauthorized access, security incidents, and other potentially prohibited or illegal activities.
• Enforcement: Enforcing our Terms of Service and other agreements, and protecting our rights, property, and safety, and the rights, property, and safety of our users and third parties.

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or another jurisdiction that requires a legal basis for processing personal data, we rely on the following legal bases:

• Consent (Article 6(1)(a) GDPR): We process your application data, assessment responses, and communication data based on your explicit consent, which you provide when you submit your application and agree to these terms. You may withdraw your consent at any time, as described in Section 7.
• Pre-Contractual Measures (Article 6(1)(b) GDPR): We process your personal data as necessary to take steps at your request prior to entering into a potential contractor engagement, including evaluating your qualifications, conducting assessments, and scheduling interviews.
• Legitimate Interests (Article 6(1)(f) GDPR): We process certain data based on our legitimate interests, including improving the Platform and our hiring processes, ensuring platform security, preventing fraud, and conducting internal analytics. Where we rely on legitimate interests, we have conducted a balancing test to ensure that your rights and freedoms are not overridden.
• Legal Obligation (Article 6(1)(c) GDPR): We process personal data as necessary to comply with our legal obligations, including tax reporting requirements, employment law compliance, responding to lawful requests from authorities, and maintaining required records.

4. How We Share Your Information

We do not sell your personal information to third parties for marketing purposes. We may share your information in the following circumstances:

4.1. Internal Team Members

Your application data, assessment results, and related information are shared with authorized team members involved in the evaluation and hiring process, including hiring managers, technical evaluators, and executive decision-makers, on a need-to-know basis.

4.2. Third-Party Service Providers

We engage trusted third-party service providers to assist in operating the Platform and processing your data. These providers are contractually obligated to protect your data and use it only for the purposes we specify. Our current service providers include:

• Supabase: Database hosting, authentication services, and data storage. Supabase processes and stores application data, user accounts, and assessment information.
• Google Calendar (Google Workspace): Interview and assessment scheduling. Google processes calendar availability and scheduling data when coordinating interviews.
• Vercel: Platform hosting and deployment. Vercel processes technical data such as IP addresses, request logs, and page load metrics in connection with serving the Platform.
• Email Service Providers: Sending transactional emails including application confirmations, status updates, interview invitations, and other communications related to your application.

4.3. Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities, including: (a) court orders and subpoenas; (b) requests from law enforcement or regulatory agencies; (c) government investigations; and (d) any other legal process that compels disclosure.

4.4. Business Transfers

In the event of a merger, acquisition, reorganization, dissolution, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred as part of such transaction. We will provide notice before your personal information becomes subject to a different privacy policy.

4.5. Protection of Rights

We may disclose your information when we believe in good faith that disclosure is necessary to: (a) protect and defend our rights, property, or safety; (b) protect the safety of users of the Platform or the public; (c) protect against legal liability; or (d) investigate or prevent suspected fraud, security breaches, or violations of our Terms of Service.

4.6. With Your Consent

We may share your information for other purposes with your explicit consent.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law. Our specific retention periods are as follows:

• Active Application Data: Retained for the duration of the evaluation process plus two (2) years following the conclusion of the evaluation, to allow for potential future opportunities and to maintain records of the evaluation process.
• Unsuccessful Applications: Retained for one (1) year following the decision not to proceed, to enable consideration for future opportunities that may be a suitable match. You may request earlier deletion at any time.
• Engagement Data: If you enter into an Engagement with us, your personal information and engagement records are retained for the duration of the Engagement plus seven (7) years thereafter, to comply with legal, tax, and regulatory requirements.
• Technical Logs: Server logs, access logs, and other technical data are retained for ninety (90) days and then automatically purged.
• Communication Records: Emails, messages, and other communications are retained in accordance with the applicable retention period for the associated application or engagement.

You may request the deletion of your personal information at any time, subject to any legal or regulatory obligations that require us to retain certain data. See Section 7 for details on how to exercise your data rights.

6. Data Security

We implement appropriate technical and organizational measures designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• Encryption: All data transmitted between your device and the Platform is encrypted using TLS (Transport Layer Security). Data at rest is encrypted using industry-standard encryption algorithms.
• Access Controls: Access to personal information is restricted to authorized personnel who require such access to perform their job functions. Access is granted on a need-to-know basis and is protected by authentication mechanisms.
• Infrastructure Security: Our Platform is hosted on secure infrastructure provided by our service providers, which maintain SOC 2 and other industry-standard security certifications.
• Security Assessments: We conduct regular reviews of our security practices and update our measures as needed to address evolving threats and vulnerabilities.
• Incident Response: We maintain incident response procedures to address potential data breaches. In the event of a data breach that affects your personal information, we will notify you and applicable regulatory authorities in accordance with applicable law.

While we strive to protect your personal information, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee the absolute security of your data, and you transmit data to the Platform at your own risk.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

7.1. Rights Under GDPR (EEA and UK Residents)

If you are located in the EEA or the United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of Access (Article 15): You have the right to request a copy of the personal data we hold about you and to obtain information about how we process it.
• Right to Rectification (Article 16): You have the right to request correction of inaccurate personal data and completion of incomplete personal data.
• Right to Erasure (Article 17): You have the right to request the deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
• Right to Restrict Processing (Article 18): You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
• Right to Data Portability (Article 20): You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
• Right to Object (Article 21): You have the right to object to the processing of your personal data based on legitimate interests, including profiling based on those interests.
• Right to Withdraw Consent (Article 7(3)): Where we rely on your consent as the legal basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.
• Right Not to Be Subject to Automated Decision-Making (Article 22): You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority in the EU member state of your habitual residence, place of work, or place of the alleged infringement.

7.2. Rights Under CCPA (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share your data.
• Right to Delete: You have the right to request the deletion of personal information we have collected from you, subject to certain exceptions.
• Right to Correct: You have the right to request the correction of inaccurate personal information.
• Right to Opt Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information. We do not sell your personal information and do not share it for cross-context behavioral advertising purposes.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

7.3. How to Exercise Your Rights

To exercise any of the rights described above, please contact us at:

Email: privacy@applynexta.online

When submitting a request, please include sufficient information for us to verify your identity, such as your full name and the email address associated with your application. We may ask you to provide additional information to confirm your identity before processing your request.

We will respond to your request within thirty (30) days of receipt. If we need additional time, we will inform you of the reason and the expected timeframe, which shall not exceed an additional sixty (60) days. There is no charge for exercising your rights, except in cases where requests are manifestly unfounded or excessive, in which case we may charge a reasonable fee or refuse to act on the request.

8. International Data Transfers

8.1. Transfer to the United States. The Platform is operated from the United States. If you are accessing the Platform from outside the United States, you acknowledge and consent to the transfer of your personal information to the United States, where data protection laws may differ from those in your jurisdiction.

8.2. Safeguards. When we transfer personal data from the EEA, the United Kingdom, or Switzerland to the United States or other countries that have not been deemed to provide an adequate level of data protection, we implement appropriate safeguards to protect your data, including: (a) Standard Contractual Clauses (SCCs) approved by the European Commission; (b) binding corporate rules, where applicable; and (c) any other transfer mechanisms recognized under applicable data protection law.

8.3. Further Information. For more information about the safeguards we use for international data transfers, or to obtain a copy of the relevant transfer mechanism, please contact us at privacy@applynexta.online.

9. Automated Decision-Making and Profiling

9.1. We may use automated tools and algorithms to assist in the evaluation of applications and assessment responses. These tools may analyze your submissions, score assessment responses, and flag applications for further review based on predetermined criteria.

9.2. Automated processing is used to support and streamline our evaluation process. However, we maintain meaningful human involvement in all material decisions that significantly affect your application. No final decision regarding your application is made solely on the basis of automated processing without human review.

9.3. If you have concerns about automated decision-making regarding your application, you have the right to request human review of any automated decision by contacting us at privacy@applynexta.online.

10. Cookies and Tracking Technologies

10.1. Types of Cookies We Use

• Essential Cookies: These cookies are strictly necessary for the Platform to function properly. They enable core functionality such as authentication, session management, and security features. These cookies cannot be disabled without impairing the Platform's functionality.
• Analytics Cookies: With your consent, we may use analytics cookies to understand how visitors interact with the Platform, which pages are visited most frequently, and how the Platform performs. This information is used to improve the Platform experience.
• Functional Cookies: These cookies enable enhanced functionality and personalization, such as remembering your preferences and settings.

10.2. Third-Party Advertising Cookies

We do not use third-party advertising cookies. We do not serve advertisements on the Platform and do not use tracking technologies for advertising or cross-site tracking purposes.

10.3. Managing Cookies

You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Please note that if you disable essential cookies, some features of the Platform may not function properly. For more information about managing cookies in your browser, visit your browser's help documentation.

11. Children's Privacy

11.1. The Platform is not intended for use by individuals under the age of eighteen (18). We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to promptly delete such information.

11.2. If you are a parent or guardian and believe that your child has provided personal information to us, please contact us at privacy@applynexta.online and we will take appropriate action.

12. Third-Party Links and Services

The Platform may contain links to third-party websites, services, or applications that are not operated by us. This Policy does not apply to any third-party services. We are not responsible for the privacy practices of third-party services. We encourage you to review the privacy policies of any third-party services you access through the Platform.

13. Changes to This Policy

13.1. We reserve the right to update or modify this Privacy Policy at any time. If we make material changes to this Policy, we will provide notice through the Platform, by email, or by other reasonable means prior to the changes taking effect.

13.2. For material changes that affect how we process your personal data, we will seek your renewed consent where required by applicable law. Your continued use of the Platform following the posting of a revised Policy constitutes your acceptance of the changes, except where renewed consent is required.

13.3. We encourage you to review this Policy periodically to stay informed about how we protect your personal information. The "Last Updated" date at the top of this Policy indicates when it was most recently revised.

14. Do Not Track Signals

Some browsers transmit "Do Not Track" (DNT) signals to websites. We currently do not respond to DNT signals, as there is no industry-wide standard for how to respond to such signals. However, we do not engage in cross-site tracking or sell your personal information, regardless of your DNT preference.

15. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Nexta Online
Privacy Inquiries: privacy@applynexta.online
General Inquiries: support@applynexta.online
Platform: applynexta.online

If you are located in the EEA or the United Kingdom and wish to exercise your rights or have a concern about our data processing practices, you also have the right to lodge a complaint with your local data protection supervisory authority. A list of EU supervisory authorities is available at https://edpb.europa.eu/about-edpb/about-edpb/members_en.