Privacy Policy

nextround, operated by Next Round Technologies LLC (“we,” “us,” or “our”), operates the nextround platform, accessible at nxtrnd.io. We are the data controller for the personal information described in this policy. For privacy-related questions or requests, contact us at privacy@nxtrnd.io.

Account information. When you create an account, we collect your email address, name (if provided), and profile photo (if provided via Google or other OAuth provider). This is collected via Clerk, our authentication provider.

User-generated content. Reviews, ratings, interview questions, salary information, tracker entries, and any other content you submit to the Platform. Reviews are displayed publicly; tracker entries are private to your account.

Usage data. We collect information about how you interact with the Platform, including pages visited, features used, search queries, and actions taken (e.g., votes cast, companies saved). This data is collected via PostHog and Vercel Analytics.

Device and technical data. IP address, browser type, operating system, referring URLs, and other standard web log information. This is used for security monitoring and service improvement.

Payment information. If you subscribe to a paid plan, payment is processed by Polar, our merchant of record. We do not store your credit card number or full payment details. We receive a customer ID and subscription status from Polar.

Communications. If you contact us by email, we store your message and email address to respond and maintain records.

• Provide the service — authenticate you, display your reviews and tracker data, and enable Platform features
• Personalize your experience — show relevant companies, remember your preferences and saved items
• Send transactional emails — account verification, subscription confirmations, responses to your reviews (via Loops.so)
• Improve the Platform — analyze usage patterns, identify bugs, and inform product decisions
• Enforce our policies — detect spam, prevent abuse, and enforce our Terms of Service and Community Guidelines
• Comply with legal obligations — respond to lawful requests from courts or government authorities

We share data with trusted third-party providers who process it on our behalf. Each provider is bound by data processing agreements and may not use your data for their own purposes.

We use cookies and similar technologies to maintain your session, remember your preferences, and collect analytics data. Specifically:

• Session cookies — required for authentication; deleted when you close your browser
• Persistent cookies — remember your login state across sessions
• Analytics cookies — PostHog uses cookies to track usage sessions and identify returning users

You can disable cookies in your browser settings, but this may prevent some features from working correctly. We do not use advertising or cross-site tracking cookies.

• Account data — retained until you delete your account, then removed within 30 days
• Reviews and content — retained for the life of the Platform; may be anonymized and retained in aggregate after account deletion
• Usage logs — retained for up to 90 days for security and debugging purposes
• Payment records — retained for 7 years as required by applicable tax and accounting laws

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your personal data (“right to be forgotten”)
• Portability — receive your data in a machine-readable format
• Restriction — request that we limit how we process your data
• Objection — object to processing based on legitimate interests
• Opt-out of sale — we do not sell personal data; this right is always honored

To exercise any of these rights, email privacy@nxtrnd.io. We will respond within 30 days. You may also delete your account directly via account settings, which triggers an automatic data deletion cascade.

We implement industry-standard security measures to protect your data, including:

• TLS encryption for all data in transit
• Row-level security (RLS) policies in our database ensuring users can only access their own data
• Service-role credentials restricted to server-side webhook handlers only
• Regular security monitoring and error tracking (via PostHog)

No method of transmission or storage is 100% secure. If you discover a security vulnerability, please contact us at security@nxtrnd.io before disclosing it publicly.

nextround operates in the United States. If you access the Platform from outside the US, your data will be transferred to and processed in the US. Our third-party providers may also process data in other countries. We rely on standard contractual clauses and other appropriate safeguards for international transfers under GDPR.

nextround is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If you believe we have inadvertently collected such data, please contact us immediately at privacy@nxtrnd.io and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email or in-app notification at least 14 days before the change takes effect. The “Last updated” date at the top of this page reflects the most recent revision.

For privacy questions, data requests, or to exercise your rights, contact our privacy team at privacy@nxtrnd.io. We aim to respond to all requests within 30 days.