Security

Security you can count on

Your resume holds some of your most personal information. Protecting it is foundational to how we build.

Encryption everywhere

Traffic is served over TLS and your data is encrypted at rest, so your resume is protected both in transit and in storage.

Secure authentication

Passwords are stored only as secure hashes, sessions use signed tokens, and Google sign-in is supported for passwordless access.

Access controls

We follow the principle of least privilege — people and systems get only the access they need, and nothing more.

Monitoring

We log security-relevant events and rate-limit sensitive actions to blunt abuse and brute-force attempts.

Protecting your data

We collect as little as we can — essentially your email and your resume — and we protect it with encryption, secure authentication, and least-privilege access. We do not sell your data. For more on what we collect and why, see our Privacy Policy.

AI processing

Resume tailoring sends only the content needed to complete the task, and our providers are bound to protect it and use it solely to deliver the feature. Tailoring reframes what is already in your resume and never invents experience — and you review the output before you rely on it.

Your part in staying secure

  • Use a strong, unique password, or sign in with Google.
  • Keep your email account secure — it is the key to account recovery.
  • Sign out of shared devices and review your account activity in settings.

Responsible disclosure

We welcome reports from security researchers. If you believe you have found a vulnerability, please email support@nextjobroles.com with details and steps to reproduce. Please give us a reasonable chance to investigate and fix the issue before any public disclosure, and avoid accessing or modifying other users’ data. We are grateful to researchers who help keep our users safe.

Report a vulnerability

Email support@nextjobroles.com — we read every report.