NextDeskOpen appPrivacy Policy
1. Who we are
NextDesk is a private job-search workspace operated by NYS Universe, based in the United Arab Emirates ("we", "us"). We are the controller of the personal data described here. Contact: support@theaibakkie.com.
We handle personal data in line with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).
2. What we collect
| Category | Data |
|---|---|
| Account | Email address, name, and whether you signed in with email, Google or Apple. |
| Profile | Resume text and the resume file you upload, target roles, preferred locations, and, if you choose to add them, nationality, visa status and languages. |
| Activity | Job matches and scores, drafts we prepare for you, and the applications you track. |
| Technical | Crash and error reports, optional product-usage events when you opt in, and IP addresses in server logs. |
We do not collect precise location, contacts, photos, payment details or advertising identifiers.
3. How we use it
- To find job postings that match your profile and score how well they fit.
- To prepare tailored resume, cover-letter and message drafts that you review before using.
- To send the account and digest emails you rely on.
- To keep the service secure, prevent abuse and fix problems.
NextDesk never applies to jobs or contacts employers on your behalf.
4. Legal basis
We process your profile with AI services only after you give AI processing consent in the app. Other processing is necessary to provide the service you asked for, or to keep it secure. Notification channel choices and optional usage data are separate controls in Profile.
5. Who processes your data
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database, sign-in and private file storage | Canada |
| Hetzner | Web and automation hosting | Germany |
| OpenAI | Match scoring, job summaries and drafts | United States |
| Apify | Job-posting search; receives search terms such as role and city, never your identity | European Union |
| Zep | AI memory of your preferences | United States |
| Resend | Account and digest email | United States |
| Sentry | Crash and error reporting | United States |
| PostHog | Cookieless product analytics | European Union |
| Google, Apple | Sign-in, only if you choose it | United States |
| RapidAPI (JSearch) | Job-posting search; receives search terms such as role and city, never your identity | United States |
These providers act on our instructions under contracts that protect your data. The AI providers' business terms state that they do not use this data to train their models. We do not sell your personal data or share it for advertising.
6. International transfers
Some providers are outside the United Arab Emirates, as listed above. We transfer data only to providers that offer contractual safeguards for its protection.
7. How long we keep it
- Account, profile and activity data: while your account is active.
- After you delete your account: removed within 30 days. Encrypted database backups expire on a rolling schedule within 7 days after that.
- Crash reports and analytics events: 90 days.
8. Your rights
You can ask to access, correct, delete or receive a copy of your data, and you can withdraw consent at any time. Withdrawing consent stops AI processing; to withdraw, email us or delete your account.
- Delete your account in the app: Profile → Delete account. See how to delete your account.
- Any other request: email support@theaibakkie.com. We reply within 30 days.
9. Analytics and cookies
Optional product-usage analytics starts off. If you opt in through Profile, events use your account ID so they can be attributed to your workspace; they are not sent for advertising. Turning the control off stops new optional capture. The web app stores sign-in state and temporary current-tab workspace data on your device; closing the tab clears the current-tab copy. We use no analytics cookies or cross-site tracking.
10. Children
NextDesk is for people aged 18 and over. We do not knowingly collect data from anyone younger.
11. Security
Data is encrypted in transit. Database rows and uploaded files are only accessible to the account that owns them.
12. Changes
We will post any change here with a new date. If a change materially affects how we use your data, we will email you before it takes effect.