Your privacy at Nextora

Version 24 October 2026

Nextora by Okayma is operated by Shreevaari Consulting Limited, 5, Firecrest Close, St. Mary's Island, Chatham, ME4 3AL, United Kingdom. Contact sathiya@okayma.com for privacy questions, rights requests or complaints.

Open Privacy & data → to download your candidate data, pause processing or submit a request. These tools remain available without a paid subscription. You may also contact us by email without using an account.

What we use and why

• Account identity, verified email and workspace membership let us authenticate you and provide your service. Our UK/EU lawful basis is performance of our contract with you.
• CV originals, extracted experience, job preferences, matches and application tracking provide the career tools you request, on the basis of that contract. You choose what to upload. Avoid uploading health information, ethnicity, religious beliefs, identity documents, or private information about other people. If a CV contains sensitive information, contact us to review its removal and any additional legal condition required.
• Security and limited activity records protect accounts and investigate misuse, based on our legitimate interests. We assess the impact on your rights and you may object.
• Billing identifiers and payment status administer subscriptions; legal obligations may require us to retain accounting records. Payment card details are handled by the payment provider.
• Optional AI tailoring sends selected, reviewed CV excerpts and job text to the provider shown to you. It requires a separate choice for each operation and operator approval of the provider. Declining it does not prevent use of the core service. Withdrawing permission stops future optional sharing; it cannot recall an already completed request.

Hosting, recipients and international transfers

Our application server and primary customer-data storage are hosted with OVHcloud in the United Kingdom. OVHcloud also manages the backup service. Hosting in the UK does not mean that every supplier processes data only in the UK. Email delivery, optional sign-in providers, payments and approved AI providers may involve other countries. Contact us for the current supplier list, processing locations and applicable contractual safeguards. We must review relevant contracts and transfer safeguards before enabling a supplier.

Job-source searches can disclose your chosen role and location to the source. Nextora does not send your CV to a recruiter automatically. Opening an external job site takes you to that site's own privacy practices. We do not sell personal information or use it for cross-context behavioural advertising.

Optional OpenAI tailoring — notice 28 October 2026

With your own authorised OpenAI API account, you may request evidence selection. We send bounded job text and up to 60 reviewed excerpts, not the original CV file. Common email addresses, links and phone numbers are removed; this is not anonymisation. Check excerpts for sensitive or private third-party information before consenting. The response selects existing evidence IDs; it does not prove experience or submit an application.

OpenAI's global API may process data outside the UK. API content is not used for training by default. Abuse-monitoring logs may retain content for up to 30 days, subject to provider exceptions. We send store=false; this is not Zero Data Retention or a UK-residency guarantee. The OpenAI DPA describes SCCs with the UK Addendum. Your API account must be authorised for this processing under its applicable terms. Review OpenAI data controls. Each operation requires a fresh choice; declining leaves evidence-based exports available.

Retention and deletion

We retain your account and career records while needed to provide your account service, subject to your rights. We review continued need at least annually. You may request deletion at any time. We review identity, legal retention duties and third-party copies before confirming completion. Account closure and CV deletion include extracted evidence and application copies; deletion of a single file reference is not enough.

Necessary accounting, security and complaint records may require separate retention. Backup copies remain restricted to recovery until their configured expiry; data subject to deletion must be removed again before a restored backup is returned to service. Ask us for the retention periods applicable to your records and current backup schedule. We do not treat a backup as permission to restore deleted data into active use.

Your choices and rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability, withdrawal of optional consent, or object to processing. We apply these request channels to customers in all countries and do not charge for ordinary requests. Our normal response target is the earlier of one calendar month and 30 days. If an applicable legal extension or exception is needed, we explain it. We verify requests proportionately and do not require an identity document by default.

The downloadable export contains your candidate records in the selected workspace. Contact us for an assisted copy of identity, billing, logs, original files or other records. Workspace owners may have access to candidates they manage; the self-service export only contains your own candidate records.

Matching, cookies and children

Matching scores explain evidence coverage and are advisory. Nextora does not make hiring decisions or automatically submit applications. Essential sign-in cookies maintain your session and protect login. We do not enable optional analytics or advertising cookies in this release. The service is intended for adults aged 18 and over.

Complaints and international customers

Contact us first so we can investigate. You may also complain to the UK Information Commissioner's Office, an applicable EU supervisory authority, or the privacy regulator in your country. Canadian customers may contact the Office of the Privacy Commissioner of Canada. US state and other national rights apply where their statutory conditions are met. You will not be penalised for exercising applicable privacy rights.

We will update this notice when our processing changes. Material optional uses require a new choice before they start.