NEXTROLES
Terms, privacy & data use
How NextRoles may be used and how information is handled.
Last updated: 8 October 2026
Terms of Service
Who can use NextRoles
NextRoles is for people aged 13 and over. You can create a general-user account yourself on the sign-up page, or be invited by a school. Either way, when you set your password we ask you to confirm that you are 13 or over, or that your school has set up the account for you. We ask for this tick-box confirmation only and do not collect your date of birth or exact age. If you are under 13 and have not been given an account by a school, please do not use NextRoles. If you think a child under 13 has an account, contact support@nextroles.org and we will look into it.
Who runs NextRoles
NextRoles is operated by the UK-based partnership of Max Fowler and Joshua Wallace-Jones, trading as NextRoles (“NextRoles”, “we”, “us”). For support, complaints or questions, email support@nextroles.org.
What the service does
NextRoles helps people compare a CV with a job or work-experience advert, draft application materials, build a CV, practise interviews and reflect on skills. It supports an application; it does not contact employers, submit applications, arrange placements, approve an employer or placement, guarantee an interview or role, or make a recruitment decision. Skills Review is a reflection tool, not a clinical assessment or validated psychometric test.
Your account and content
Keep your sign-in details private and tell us if you suspect unauthorised access. You can sign in with your email and password or, where it is available to you, with a Google or Microsoft account that you connect to your NextRoles account (see “Signing in with Google or Microsoft” in the privacy notice). You are responsible for keeping that account secure too, and you should only connect an account that is yours. Upload only material you are entitled to use, and avoid unnecessary personal information about other people. You retain your rights in the material you provide; we process it to deliver the features you request.
Do not use the service to impersonate someone, fabricate qualifications, upload unlawful material, interfere with security or deliberately overwhelm the service. Access may be restricted to protect users or investigate misuse. Contact support if you believe a restriction is mistaken.
Check AI-generated material
Reviews, scores, suggested answers, interview feedback and application wording are generated assistance and can be inaccurate, incomplete or unsuitable. Check names, qualifications, dates and claims before using them. A fit score is guidance, not a fact or a decision about a person. Employers and schools must use their own judgement; NextRoles must not be the sole basis for recruitment, pupil assessment or placement approval.
General-user accounts
A person who registers or is invited as a general user controls their own account and saved material. NextRoles acts as controller for that account data so it can provide the service, maintain access, answer support requests, prevent misuse and meet legal obligations. General-user data is not placed in a school workspace unless the account is separately associated with one through an authorised process.
School-managed accounts and the school pilot
During the school pilot, authorised school staff may create student accounts, organise permitted groups, view relevant application activity and documents, and export material where their role allows it. The school chooses which pupils take part and is responsible for its own notices, lawful basis, staff permissions, employer or opportunity review, placement approval and all placement administration. NextRoles provides application support only. For school-managed student data, the school is controller and NextRoles is processor under the Data Processing Agreement.
Availability, plans and your rights
Features and availability may change, and maintenance can temporarily interrupt access. A paid offer will show its price, included limits, renewal and cancellation conditions before purchase. Nothing in these terms removes consumer rights or excludes liability that cannot lawfully be excluded.
Paid plans, renewal and cancelling
While we are testing, new accounts start on the Starter plan at no charge and no card is taken. Individual accounts can buy a monthly plan: Starter (£4.99), Pro (£9.99) or Max (£19.99). The price and monthly allowances are shown on the Plans page and again on the confirmation screen before you pay. Payment is taken by our payment provider on its own secure page; NextRoles never sees or stores your card details.
Renewal. A plan starts as soon as payment succeeds and renews each month at the same price until you cancel. We will give you at least 30 days’ notice by email before any price rise, and you can cancel before it applies. Where the law requires a reminder before renewal, we will send one.
Cancelling. You can cancel at any time from Manage billing on the Plans page; it is as quick as buying. If you cancel, you keep your plan until the end of the month you have paid for, and you are not charged again. When a plan ends, the account returns to the Starter allowances.
Your 14-day right to cancel. When you first buy a plan you can cancel within 14 days and get a refund. Because you ask us to start straight away, we will deduct a fair amount for the service you have already used in that time. To use this right, email support@nextroles.org; any refund goes back to the original payment method within 14 days. This does not affect your other legal rights, including if a service is not provided with reasonable care and skill.
Failed payments. If a payment fails, our payment provider retries it and emails you. If it cannot be collected, the plan ends and the account returns to the Starter allowances. Allowances are monthly and do not roll over.
Deleting your account cancels any paid plan, with no further charge. Our payment provider keeps payment records as tax law requires (see the privacy notice).
Updates and questions
Material changes should be communicated before they take effect where required. Contact support if you need help understanding a change or want to stop using the service.
Privacy notice
Information involved
Depending on the features used, we process account name and email, password hash, session and access records, optional CV contact details, CVs and drafts, job or work-experience adverts, fit results, cover letters, application-question answers, interview practice, skills answers and profiles, text you choose to dictate, feedback, support requests and bug reports (which, if you leave the option ticked, include the page you were on, your browser and your screen size, but no CV or other content). School-managed use also involves school membership, staff roles, pupil groups, document access and export audit records. If you connect a Google or Microsoft account for signing in, we also process an identifier for that account and the email address it supplied. Technical systems process IP address, browser and request information needed to deliver and protect the service.
Age
We do not ask for or store a date of birth or age. When creating an account or accepting an invitation you tick a confirmation described under “Who can use NextRoles”; that tick is checked in your browser and is not saved as a record. Because many pupils are under 18, we try to collect only what each feature needs and to keep language and content suitable for young people.
Why information is used
For general users, we use information to perform our contract by providing requested features and maintaining the account. We use limited account, request and diagnostic information where necessary for our legitimate interests in support, service reliability, fraud prevention and enforcing fair usage. Letting you sign in with a Google or Microsoft account is part of providing your account, and the one-off email check we send before connecting one protects accounts from takeover, which is a legitimate interest. We use information where necessary to meet legal obligations or establish, exercise or defend legal claims. For a school-managed pupil, the school determines its lawful basis and purposes; NextRoles processes the data on the school's documented instructions.
Who can see it
You can see your own account content. Authorised school staff can see only the pupil information permitted by their assigned role and group or school scope. Site administrators can access information where needed to operate the service, support an account, investigate misuse or respond to a report. Employers do not receive information from NextRoles: the user decides whether to copy, download or send an application.
Companies that help us run NextRoles, and international processing
We use other companies to run parts of NextRoles: for example the companies that host the website and our database, route and protect requests, take payments, send our emails, power the AI features, check links for safety, measure which pages are used and alert us when something breaks. We use them only to provide NextRoles to you. This is how almost every online service works, and none of it is for anything other than running NextRoles. These companies handle information on our instructions and under their written terms with us, and may not use it for their own purposes. The exception is a payment provider, which is also responsible for its own legal duties such as fraud prevention and tax records. We never sell your information, rent it out or share it so that anyone can advertise to you, and employers never receive it from us.
What each kind of company receives is limited to what the feature needs:
- Hosting, storage and request handling. The pages you load, the database that holds your account and saved work, uploaded guide images, and the systems that route, protect and rate-limit requests. Uploaded PDF, DOCX and ODT files are converted to text, and where a job page needs it, the page is loaded so its text can be read.
- AI analysis and generation. Only the text and files needed for the request you make: for example your CV, a job advert, your prompt, relevant saved skills context, or the answers you give in practice interviews. Images submitted as a CV or advert are sent to be read; PDF, DOCX and ODT files are converted to text first.
- Computer-generated voice (only if voice interviews are on for you). Only the interviewer’s own reply text. Never your audio, name or account details.
- Email. Your email address and the content of the message, such as an account invitation, a password reset, a deletion confirmation, a sign-in confirmation or a summary you asked for.
- Payments (paid plans only). Your email, the plan you choose and your payment details. The payment provider collects card details directly and acts as an independent controller for its own legal obligations, such as fraud prevention and tax records.
- Link checks. Only the link (URL) you submit, never an uploaded file, your CV text or any account details.
- Website analytics. Page titles and fixed action labels. Never form contents, CVs, passwords or account identifiers.
- Fault alerts to our team. Technical error details, not your documents.
Some of these companies process information outside the UK. Where they do, we rely on the contractual transfer safeguards the law requires (or a UK adequacy decision) and limit information to what the feature needs. If you would like to know exactly which companies handle your information, you are entitled to ask: email support@nextroles.org and we will tell you.
Signing in with Google or Microsoft
Where it is available to you, you can sign in with a Google or Microsoft account instead of, or as well as, a password. It is always optional, and your email and password keep working unless you choose otherwise. You can also create an account this way from the sign-up page; if the provider vouches for your email address the account is made straight away, otherwise we email you a link to confirm it first.
We receive only confirmation that the account is genuine, an identifier that is unique to your Google or Microsoft account, and the email address on it. We do not ask for or receive your password, contacts, files, calendar or photo, and we do not keep the access tokens they issue. We store the identifier, the email address (so we can show you which account is connected) and when you last signed in this way.
The first time, we check that it is really you. Either you connect the account yourself while signed in, or, if you use the button on the login page with an address that matches an account, we email that NextRoles account to confirm. The link only works on the same device and browser where you started, expires after 15 minutes and can be used once. We never give access based on an email address alone.
Google and Microsoft decide for themselves how they use information about your sign-in (they will know that you signed in to NextRoles) under their own privacy terms, and are not acting for us. Please read their notices if you want to know more.
For school accounts this option is switched off unless the school, as controller, asks us to switch it on. You can disconnect it at any time from your account settings, and we then delete the stored identifier. Deleting your account deletes it too, and unconfirmed sign-in checks are removed within a day of expiring.
Optional speak-to-type
Some writing boxes offer a “Speak instead” button. It is off until you press it. When used, your browser's own speech recognition turns your voice into text. The audio is normally sent to the company that makes your browser or device, under that company's own privacy terms, and your browser will ask for microphone permission first. NextRoles does not receive, record or store the audio; only the words that appear in the box are treated like anything else you type. Browsers without this feature do not show the button. Do not dictate sensitive or personal details about other people, and avoid using it where others can overhear.
Optional page translation
When you apply another language, a third-party translation service processes the displayed page text in your browser. This may include visible CV-review or account information. Typed form entries are not deliberately submitted by NextRoles. Choose English to restore the original page language.
Payments
If you buy a plan, our payment provider collects your card details directly; we never receive or store them. We keep only a payment-provider customer reference, subscription reference and status, your plan and its renewal date, so we can give you the right allowances and let you manage billing. We use this to perform our contract with you. Payment, invoice and tax records are kept for as long as UK tax law requires, normally six years, even if you delete your account; deleting your account cancels any paid plan.
Waitlist
If you join the waitlist we store only your email address, held by our email provider. You tick a box to agree, and we use it to send you one message when NextRoles opens for you, relying on your consent. We do not use it for anything else or share it. Every message has an unsubscribe link, and you can ask us to delete your address at any time by emailing support@nextroles.org.
Sensitive information
Do not include health information, identity documents or other sensitive details unless genuinely necessary. Free-text CVs and support reports may nevertheless contain such information. School-managed reporting and any decision about keeping a record remain subject to the school's policies and lawful basis. NextRoles is not an emergency service.
Storage and deletion
Saved application history is capped at the 15 most recent records per account. CVs, profiles, account details and audit records remain while needed to provide the service or meet an applicable legal or accountability need. A verified “delete my data” request has a 24-hour cancellation window before live application, CV and profile data is erased. Account closure has a 30-day cancellation window before the account and associated live data are removed. Connected Google or Microsoft sign-in details are removed when you disconnect them or delete your account. Database recovery copies age out within the configured seven-day backup window. Some report, access-audit or legal records may be retained where deletion would conflict with a legal obligation, an active investigation or the school's documented instruction.
Your choices and rights
Depending on the circumstances, data-protection rights include access, correction, erasure, restriction, objection and portability. Where consent is the basis, it can be withdrawn for future processing. Contact support@nextroles.org to make a request. You can also raise a concern with the Information Commissioner’s Office.
Data & AI use
What is sent for AI processing
When you ask for a job check, CV rewrite, cover letter, suggested application answer, interview practice or skills enrichment, the text and files needed for that request are extracted and sent to the configured AI service. This can include CV content, the advert, your prompt and relevant saved skills context. Do not submit information that is unnecessary for the task.
Optional voice interviews
Voice interviews are off unless NextRoles switches them on for your school or account. They are practice calls with an AI interviewer, not a real person. You are asked to agree before the first call. Your browser turns your speech into text using its own speech service (see Optional speak-to-type above), so NextRoles never receives or stores your audio, and you can always type instead. The words you say, as text, are sent to our AI provider to write the interviewer's replies and your feedback, together with the job advert and CV you chose. The interviewer's replies are sent as text to a text-to-speech provider, which turns them into the computer-generated voice you hear; if that is unavailable your browser's own voice is used. We keep the written transcript, your feedback and your score for your latest three calls only, and just the fact that older calls were completed (which is what unlocks the next interviewer). You can delete the saved words at any time with the “Delete my saved interview words” button on the interviewer page, or by deleting your account. If you say something during a call that suggests you may be at risk of harming yourself or being harmed, the call stops straight away and you are shown a message to take a break, with free support you can call or text, including the Samaritans, Childline and Shout. Your account is also paused for 10 minutes so you can step away; it switches back on by itself. The conversation is held for up to seven days and a flag is raised so that a person can check on you: for school accounts it goes to your teacher or the school's safeguarding staff, and for all other accounts it goes to NextRoles staff. The checks that spot this include an automatic safety check of what you say, which uses our AI provider's moderation service. If someone swears at, insults or threatens the interviewer, they get one polite warning for mild swearing, and the interview ends straight away for heavier abuse, with no feedback and a flag on the account (to the teacher for a school account, otherwise to NextRoles staff). If you say you are unwell or feeling low during a voice interview (for example a headache, or that you feel depressed or anxious), the interviewer pauses to check you are okay and offers a break or to stop; for a school account, saying you feel low also raises a low-priority flag for your teacher. The same safety check, short break and flag apply to what you type in a written interview, and for school accounts the questions and answers of a written interview get the same after-the-event safeguarding review. After every call, a second automatic AI check reads the conversation for anything a school would want a person to look at, such as someone being at risk of harm or being pressured, threats, unsuitable content, private details being shared or the interviewer behaving badly. This is a signal for a person to look at, not a decision. If you use NextRoles through a school (a student account, or an account set up by a teacher), a concern is passed to your teacher or the school's safeguarding staff as a flag containing a short excerpt of the words that caused it, not the whole conversation, in the same way as flags on job checks and help questions. A flagged conversation is also held for up to seven days, outside the three-call limit, so your teacher or the school's safeguarding staff can read it. If they ask for more context, or nobody has acted on the flag within 48 hours, NextRoles staff can read it too. Each time it is opened is recorded. NextRoles can choose to keep a flagged conversation for longer where safeguarding or the law requires it. Accounts that are not linked to a school are not flagged to anyone. Please do not say addresses, phone numbers or private details about other people.
Speak-to-type is not AI processing by NextRoles
Dictated words are converted by your browser's speech service, not by NextRoles or our AI provider. Once the words are in a box they are handled like typed text, including being sent for AI processing if you then ask for a check or draft that uses that box.
What AI does and does not do
AI produces drafts, comparisons and coaching. It does not verify that an employer or opportunity is genuine, certify a placement, make a school decision, submit an application, contact an employer or make a recruitment decision. Automated outputs can be wrong or biased and must be checked by the user. School staff remain responsible for their own review and decisions.
Limited automated flags
The service may create a review flag when submitted text contains a narrow, explicit signal such as a request for upfront payment, unusual personal-document demands, secrecy from a parent or teacher, or direct contact through an informal messaging service. A flag is a prompt for human review, not a finding that a person or opportunity is unsafe. Ordinary job and work-experience applications continue through the normal application-support flow.
No sale or advertising profile
NextRoles does not sell CVs, application content or pupil data, and does not use that content to build advertising profiles. Data is shared with providers only to run the selected feature, operate the service and meet the purposes described in this notice.