NEXTROLES
Terms, privacy & data use
How NextRoles may be used and how information is handled.
Last updated: 3 October 2026
Terms of Service
Who can use NextRoles
NextRoles is for people aged 13 and over. Accounts are created by invitation, and when you accept one we ask you to confirm that you are 13 or over, or that your school has set up the account for you. We ask for this tick-box confirmation only and do not collect your date of birth or exact age. If you are under 13 and have not been given an account by a school, please do not use NextRoles. If you think a child under 13 has an account, contact support@nextroles.org and we will look into it.
Who runs NextRoles
NextRoles is operated by the UK-based partnership of Max Fowler and Joshua Wallace-Jones, trading as NextRoles (“NextRoles”, “we”, “us”). For support, complaints or questions, email support@nextroles.org.
What the service does
NextRoles helps people compare a CV with a job or work-experience advert, draft application materials, build a CV, practise interviews and reflect on skills. It supports an application; it does not contact employers, submit applications, arrange placements, approve an employer or placement, guarantee an interview or role, or make a recruitment decision. Skills Review is a reflection tool, not a clinical assessment or validated psychometric test.
Your account and content
Keep your sign-in details private and tell us if you suspect unauthorised access. Upload only material you are entitled to use, and avoid unnecessary personal information about other people. You retain your rights in the material you provide; we process it to deliver the features you request.
Do not use the service to impersonate someone, fabricate qualifications, upload unlawful material, interfere with security or deliberately overwhelm the service. Access may be restricted to protect users or investigate misuse. Contact support if you believe a restriction is mistaken.
Check AI-generated material
Reviews, scores, suggested answers, interview feedback and application wording are generated assistance and can be inaccurate, incomplete or unsuitable. Check names, qualifications, dates and claims before using them. A fit score is guidance, not a fact or a decision about a person. Employers and schools must use their own judgement; NextRoles must not be the sole basis for recruitment, pupil assessment or placement approval.
General-user accounts
A person who registers or is invited as a general user controls their own account and saved material. NextRoles acts as controller for that account data so it can provide the service, maintain access, answer support requests, prevent misuse and meet legal obligations. General-user data is not placed in a school workspace unless the account is separately associated with one through an authorised process.
School-managed accounts and the school pilot
During the school pilot, authorised school staff may create student accounts, organise permitted groups, view relevant application activity and documents, and export material where their role allows it. The school chooses which pupils take part and is responsible for its own notices, lawful basis, staff permissions, employer or opportunity review, placement approval and all placement administration. NextRoles provides application support only. For school-managed student data, the school is controller and NextRoles is processor under the Data Processing Agreement.
Availability, plans and your rights
Features and availability may change, and maintenance can temporarily interrupt access. A paid offer will show its price, included limits, renewal and cancellation conditions before purchase. Nothing in these terms removes consumer rights or excludes liability that cannot lawfully be excluded.
Paid plans, renewal and cancelling
Individual accounts can buy a monthly plan: Starter (£4.99), Pro (£9.99) or Max (£19.99). The price and monthly allowances are shown on the Plans page and again on the confirmation screen before you pay. Payment is taken by Stripe on its own secure page; NextRoles never sees or stores your card details.
Renewal. A plan starts as soon as payment succeeds and renews each month at the same price until you cancel. We will give you at least 30 days’ notice by email before any price rise, and you can cancel before it applies. Where the law requires a reminder before renewal, we will send one.
Cancelling. You can cancel at any time from Manage billing on the Plans page; it is as quick as buying. If you cancel, you keep your plan until the end of the month you have paid for, and you are not charged again. When a plan ends, the account returns to the Starter allowances.
Your 14-day right to cancel. When you first buy a plan you can cancel within 14 days and get a refund. Because you ask us to start straight away, we will deduct a fair amount for the service you have already used in that time. To use this right, email support@nextroles.org; any refund goes back to the original payment method within 14 days. This does not affect your other legal rights, including if a service is not provided with reasonable care and skill.
Failed payments. If a payment fails, Stripe retries it and emails you. If it cannot be collected, the plan ends and the account returns to the Starter allowances. Allowances are monthly and do not roll over.
Deleting your account cancels any paid plan, with no further charge. Stripe keeps payment records as tax law requires (see the privacy notice).
Updates and questions
Material changes should be communicated before they take effect where required. Contact support if you need help understanding a change or want to stop using the service.
Privacy notice
Information involved
Depending on the features used, we process account name and email, password hash, session and access records, optional CV contact details, CVs and drafts, job or work-experience adverts, fit results, cover letters, application-question answers, interview practice, skills answers and profiles, text you choose to dictate, feedback, support requests and bug reports (which, if you leave the option ticked, include the page you were on, your browser and your screen size, but no CV or other content). School-managed use also involves school membership, staff roles, pupil groups, document access and export audit records. Technical systems process IP address, browser and request information needed to deliver and protect the service.
Age
We do not ask for or store a date of birth or age. When accepting an invitation you tick a confirmation described under “Who can use NextRoles”; that tick is checked in your browser and is not saved as a record. Because many pupils are under 18, we try to collect only what each feature needs and to keep language and content suitable for young people.
Why information is used
For general users, we use information to perform our contract by providing requested features and maintaining the account. We use limited account, request and diagnostic information where necessary for our legitimate interests in support, service reliability, fraud prevention and enforcing fair usage. We use information where necessary to meet legal obligations or establish, exercise or defend legal claims. For a school-managed pupil, the school determines its lawful basis and purposes; NextRoles processes the data on the school's documented instructions.
Who can see it
You can see your own account content. Authorised school staff can see only the pupil information permitted by their assigned role and group or school scope. Site administrators can access information where needed to operate the service, support an account, investigate misuse or respond to a report. Employers do not receive information from NextRoles: the user decides whether to copy, download or send an application.
Service providers and international processing
NextRoles uses DigitalOcean for website hosting; Stripe for taking payments for paid plans (it receives your email, the plan you choose and your payment details, and acts as an independent controller for its own legal obligations such as fraud prevention and tax records); Cloudflare for request routing, Workers, Workflows, document-to-text conversion, browser rendering and rate limiting; Amazon Web Services for the Aurora PostgreSQL database and guide-image storage; OpenAI for requested AI analysis and generation; Resend for transactional email; VirusTotal for reputation checks on submitted links; Umami Cloud for privacy-focused website analytics; Google Translate for optional page translation; Google Fonts for web fonts; and Slack for limited operational alerts. Images submitted as a CV or advert are sent to OpenAI to be read; PDF, DOCX and ODT files are converted to text first. For link checks, VirusTotal receives the URL, not an uploaded file or the user's account details. Some providers process information outside the UK. Where required, we use the provider's contractual transfer safeguards and limit information to what the feature needs.
Optional speak-to-type
Some writing boxes offer a “Speak instead” button. It is off until you press it. When used, your browser's own speech recognition turns your voice into text. In Chrome and Edge the audio is normally sent to Google or Microsoft, and in Safari to Apple, under that company's own privacy terms, and your browser will ask for microphone permission first. NextRoles does not receive, record or store the audio; only the words that appear in the box are treated like anything else you type. Browsers without this feature do not show the button. Do not dictate sensitive or personal details about other people, and avoid using it where others can overhear.
Optional page translation
When you apply another language, Google Translate processes displayed page text in your browser. This may include visible CV-review or account information. Typed form entries are not deliberately submitted by NextRoles. Choose English to restore the original page language.
Payments
If you buy a plan, Stripe collects your card details directly; we never receive or store them. We keep only a Stripe customer reference, subscription reference and status, your plan and its renewal date, so we can give you the right allowances and let you manage billing. We use this to perform our contract with you. Payment, invoice and tax records are kept for as long as UK tax law requires, normally six years, even if you delete your account; deleting your account cancels any paid plan.
Waitlist
If you join the waitlist we store only your email address, held by Resend, our email provider. You tick a box to agree, and we use it to send you one message when NextRoles opens for you, relying on your consent. We do not use it for anything else or share it. Every message has an unsubscribe link, and you can ask us to delete your address at any time by emailing support@nextroles.org.
Sensitive information
Do not include health information, identity documents or other sensitive details unless genuinely necessary. Free-text CVs and support reports may nevertheless contain such information. School-managed reporting and any decision about keeping a record remain subject to the school's policies and lawful basis. NextRoles is not an emergency service.
Storage and deletion
Saved application history is capped at the 15 most recent records per account. CVs, profiles, account details and audit records remain while needed to provide the service or meet an applicable legal or accountability need. A verified “delete my data” request has a 24-hour cancellation window before live application, CV and profile data is erased. Account closure has a 30-day cancellation window before the account and associated live data are removed. Database recovery copies age out within the configured seven-day backup window. Some report, access-audit or legal records may be retained where deletion would conflict with a legal obligation, an active investigation or the school's documented instruction.
Your choices and rights
Depending on the circumstances, data-protection rights include access, correction, erasure, restriction, objection and portability. Where consent is the basis, it can be withdrawn for future processing. Contact support@nextroles.org to make a request. You can also raise a concern with the Information Commissioner’s Office.
Data & AI use
What is sent for AI processing
When you ask for a job check, CV rewrite, cover letter, suggested application answer, interview practice or skills enrichment, the text and files needed for that request are extracted and sent to the configured AI service. This can include CV content, the advert, your prompt and relevant saved skills context. Do not submit information that is unnecessary for the task.
Optional voice interviews
Voice interviews are off unless NextRoles switches them on for your school or account. They are practice calls with an AI interviewer, not a real person. You are asked to agree before the first call. Your browser turns your speech into text using its own speech service (see Optional speak-to-type above), so NextRoles never receives or stores your audio, and you can always type instead. The words you say, as text, are sent to OpenAI to write the interviewer's replies and your feedback, together with the job advert and CV you chose. The interviewer's replies are sent as text to ElevenLabs, which turns them into the computer-generated voice you hear; if that is unavailable your browser's own voice is used. We keep the written transcript, your feedback and your score for your latest three calls only, and just the fact that older calls were completed (which is what unlocks the next interviewer). You can delete the saved words at any time with the “Delete my saved interview words” button on the interviewer page, or by deleting your account. If you say something during a call that suggests you may be at risk of harming yourself or being harmed, the call stops straight away and you are shown a message to take a break, with free support you can call or text, including the Samaritans, Childline and Shout. Your account is also paused for 10 minutes so you can step away; it switches back on by itself. The conversation is held for up to seven days and a flag is raised so that a person can check on you: for school accounts it goes to your teacher or the school's safeguarding staff, and for all other accounts it goes to NextRoles staff. The checks that spot this include an automatic safety check of what you say, which uses OpenAI's moderation service. If someone swears at, insults or threatens the interviewer, they get one polite warning for mild swearing, and the interview ends straight away for heavier abuse, with no feedback and a flag on the account (to the teacher for a school account, otherwise to NextRoles staff). If you say you are unwell or feeling low during a voice interview (for example a headache, or that you feel depressed or anxious), the interviewer pauses to check you are okay and offers a break or to stop; for a school account, saying you feel low also raises a low-priority flag for your teacher. The same safety check, short break and flag apply to what you type in a written interview, and for school accounts the questions and answers of a written interview get the same after-the-event safeguarding review. After every call, a second automatic AI check reads the conversation for anything a school would want a person to look at, such as someone being at risk of harm or being pressured, threats, unsuitable content, private details being shared or the interviewer behaving badly. This is a signal for a person to look at, not a decision. If you use NextRoles through a school (a student account, or an account set up by a teacher), a concern is passed to your teacher or the school's safeguarding staff as a flag containing a short excerpt of the words that caused it, not the whole conversation, in the same way as flags on job checks and help questions. A flagged conversation is also held for up to seven days, outside the three-call limit, so your teacher or the school's safeguarding staff can read it. If they ask for more context, or nobody has acted on the flag within 48 hours, NextRoles staff can read it too. Each time it is opened is recorded. NextRoles can choose to keep a flagged conversation for longer where safeguarding or the law requires it. Accounts that are not linked to a school are not flagged to anyone. Please do not say addresses, phone numbers or private details about other people.
Speak-to-type is not AI processing by NextRoles
Dictated words are converted by your browser's speech service, not by NextRoles or OpenAI. Once the words are in a box they are handled like typed text, including being sent for AI processing if you then ask for a check or draft that uses that box.
What AI does and does not do
AI produces drafts, comparisons and coaching. It does not verify that an employer or opportunity is genuine, certify a placement, make a school decision, submit an application, contact an employer or make a recruitment decision. Automated outputs can be wrong or biased and must be checked by the user. School staff remain responsible for their own review and decisions.
Limited automated flags
The service may create a review flag when submitted text contains a narrow, explicit signal such as a request for upfront payment, unusual personal-document demands, secrecy from a parent or teacher, or direct contact through an informal messaging service. A flag is a prompt for human review, not a finding that a person or opportunity is unsafe. Ordinary job and work-experience applications continue through the normal application-support flow.
No sale or advertising profile
NextRoles does not sell CVs, application content or pupil data, and does not use that content to build advertising profiles. Data is shared with providers only to run the selected feature, operate the service and meet the purposes described in this notice.