§privacy
Your search is not the product.
nexste exists to help you run a job hunt cleanly. It does not exist to mine your inbox, train models on your resume, or sell your job-search anxiety to a data broker.
Last updated · July 13, 2026
What we collect
The minimum needed to run the product: an account (email, hashed password, handle), the workspace records you create (jobs, briefs, resumes, notes), provider configuration you connect (OAuth refresh tokens, encrypted at rest), and billing state if you upgrade.
The Chrome extension stores local connection state and preferences. After you connect your account, it may send lightweight role metadata (such as URL, title, company, and source labels) to check whether a job is already in your workspace. Full job-posting content is sent only when you choose to import or rank that role, or when you turn on auto-import for known job pages.
Why we collect it
So your search persists between sessions and devices. So your inbox can be matched to roles. So your resume variants can be tied to the jobs they were tailored for. So model providers can parse, rank, and draft the product output you ask nexste to create. Nothing else.
Gmail scopes
nexste requests read-only access to message metadata and bodies — only enough to detect recruiter threads and link them to roles. Selected thread content can be sent to our model providers so nexste can classify recruiter replies and match them to jobs. We never send mail on your behalf, never delete or modify mail, and never use Gmail content for advertising, resale, or model training by nexste.
What we share
Nothing with advertisers. Nothing with data brokers. We use Stripe for payments, infrastructure providers for hosting/storage/database work, email and anti-abuse providers for support and account operations, and model providers for parsing, ranking, tailoring, and inbox classification. Those providers process data only to operate nexste.
Your rights
You can request an export, request account deletion, or disconnect providers from your settings page. Deletion is real — requests may be held briefly for account-safety and recovery windows, and we don't keep shadow analytics copies after deletion is completed.
Contact
Privacy questions, data requests, or concerns: write to our contact form with the subject Privacy or email [email protected]. We'll get back inside two business days.