Privacy Policy
Draft — requires legal review before launch. Last updated: October 25, 2026.
NextOrbit is a job-search service operated by ManyOrbit ("we", "us") at manyorbit.org. This policy explains what we collect, why, who processes it for us, how long we keep it, and the choices you have.
What we collect
- Account details: your name, email address and sign-in method, handled by our authentication provider.
- What you give us to run your search: your resume (the file you upload and the structured version we create from it), your current title and employer, target job titles, level, minimum salary, preferred locations, companies and industries to skip, and any LinkedIn export you choose to upload (we read only
Connections.csvandProfile.csv). - What you do in the app: jobs you shortlist, dismiss or approve; application statuses you record; notes, corrections and preference edits.
- Billing: your plan and subscription status. Card numbers are entered on Stripe's checkout page and never reach our servers.
- Technical data: IP address, browser type and request logs kept for security and debugging.
How we use it
- To find, match, research and rank job postings for you, and to prepare tailored resumes, cover notes and outreach drafts only when you ask.
- To bill your subscription and enforce fair-use limits.
- To keep the service secure and to fix problems.
- To improve matching for you, from your own feedback. Your resume and private data are never used to research jobs for other users, never sold, and never used to train third-party AI models.
We never post, apply, or send messages on your behalf. Every application and message is sent by you.
Where your data lives
Each account has its own private, isolated data space. Job postings are public information shared across users; your profile, resume, matches, applications and files are not.
Subprocessors
| Subprocessor | Purpose | Data |
|---|---|---|
| Cloudflare, Inc. | Hosting, database, file storage, scheduled jobs, and AI model inference (Workers AI via AI Gateway) | All service data, including resume text sent to AI models to score and tailor |
| Clerk, Inc. | Sign-in and account management | Name, email, sign-in metadata |
| Stripe, Inc. | Subscription billing, invoices, tax | Name, email, payment details (held by Stripe) |
| RapidAPI / JSearch (OpenWeb Ninja) | Aggregated job listings | Job titles and locations we search for (never your identity) |
| Brave Software (Brave Search API) | Public web research about employers, pay and hiring managers | Company names and job titles (never your identity) |
We will update this list before adding a subprocessor that receives personal data.
Retention
- Your account data is kept while your account exists.
- If your subscription ends, your data stays available for export for 90 days; after that we may delete it. You can delete it yourself at any time.
- When you delete your account, we cancel your subscription and permanently erase your private space and files immediately. Billing records required by law (invoices) are retained by Stripe. Backups roll off within 30 days.
- Request logs are kept for up to 30 days.
Your rights and choices
- Access and export: download everything we hold about you from Account → Download my data.
- Correction: edit your profile and preferences in Settings.
- Deletion: delete your account from Account → Delete account, or email us.
- California residents (CCPA/CPRA): you have the right to know, access, correct and delete your personal information, and to not be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioral advertising.
- Residents of other US states with privacy laws have similar rights; contact us to exercise them.
Security
Data is encrypted in transit and at rest. Access to each user's space requires that user's verified session. No system is perfectly secure; we will notify you of a breach as required by law.
Children
NextOrbit is not for anyone under 18.
Contact
privacy@manyorbit.org