Privacy Policy

Who we are

NxtWaves (support@nxtwaves.in), operated from Bangalore, India.

What we collect and why

Engineers (talent)

• Resume details — name, contact, skills, experience, current CTC — to build your profile and match you to roles
• Screening answers, scores, and skill grades — to verify your skills and match you accurately
• Email — to reach you when a company is a fit

We do not collect video, phone numbers, government IDs (PAN/Aadhaar), or biometric data. There is no Telegram or messaging-bot data collection.

Companies

• Hiring prompt and role preferences — to find and rank matching candidates
• Company and contact details — to manage the hiring relationship

How matching works (and what companies see)

• Matching ranks candidates on verified skills and grades only — never name, age, gender, photo, or background.
• Companies first see a masked profile (first name + initial, no email or current employer). Your full identity is shared only after you approve an intro.
• Your profile is shared only if you opted in during screening, and only with companies for a relevant role.

Legal basis

• Engineers: Explicit, opt-in consent given on the web before your profile is shared. You can withdraw anytime.
• Companies: Legitimate interest + contract performance.

Who we share data with

• Supabase — database hosting (EU/US)
• Mistral AI — resume parsing and hiring-prompt understanding
• Vercel — application hosting and privacy-first analytics

We never sell your data. Ever. We do not use advertising or marketing trackers.

How long we keep it

• Active profiles: until you ask us to delete
• Inactive profiles: auto-deleted after 12 months
• Hired candidates: up to 3 years (for dispute resolution)
• Company data: duration of the business relationship

Your rights (GDPR + India DPDPA 2023)

• See your data: Email us or use /data-deletion
• Delete your data: Visit /data-deletion or email us
• Correct your data: Email support@nxtwaves.in
• Withdraw consent / stop matching: Email us or use /data-deletion
• Export your data: Email support@nxtwaves.in

All requests handled within 48 hours. Guaranteed. Required by law.

Cross-border transfers

Your data may be processed by Supabase (US/EU), Mistral AI (EU), and Vercel (US). All comply with GDPR standards. We apply Standard Contractual Clauses where required.

Grievance Officer (DPDPA 2023)

Email: support@nxtwaves.in
Response time: 72 hours

Contact

support@nxtwaves.in