Privacy Policy
We collect your personal data to run the Portal, to share your profile with the firms you choose, and to keep you informed about roles, interviews and offers. We share it with a firm only with your consent, and we do not sell it.
1. Who we are
1.1 The NXTalent.ai website at nxtalent.ai (the "Website") and the candidate portal at my.nxtalent.ai (the "Portal") are operated by NXON AI Factory Pte. Ltd., a company incorporated in Singapore (UEN 202519588N), with its registered office at 140 Robinson Road, #09-02, Tahir Building, Singapore 068907 ("NXON", "we", "us" or "our").
1.2 For personal data you give us through the Website or the Portal, NXON is the organisation responsible under the Personal Data Protection Act 2012 ("PDPA").
2. Scope
2.1 This Policy explains how we collect, use, disclose and protect the personal data of visitors to the Website, people who contact us, candidates and others who use the Portal, people referred to it, and people who use NXTalent on behalf of a Firm.
2.2 Recruitment firms and employers ("Firms") that use NXTalent have their own privacy notices. Inside a Firm's NXTalent workspace, including the Firm's candidate records, call notes, assessments and interview feedback, the Firm decides how personal data is used, and NXON only stores and processes that data on the Firm's behalf. Questions or requests about a Firm's records, including copies of information you shared with it through the Portal, should go to that Firm.
2.3 NXTalent is designed for users in Singapore and the Asia-Pacific region and is operated under Singapore law. We make no representation that it meets the requirements of data protection laws in other countries. Wherever you are, you may contact us at compliance@nxtalent.ai with any request about your personal data.
3. Personal data we collect
| Category | Examples |
|---|---|
| Identity and contact | Given and family name, email address, phone number, LinkedIn profile URL, city and country |
| Career information | CV files, work history, job titles, employers, dates, education, qualifications, skills, awards |
| Job preferences | Expected salary range and currency (or "prefer not to disclose"), notice period, availability date, work authorisation |
| Account data | Password (stored in hashed form), sign-in codes, time zone, consent and sharing settings |
| Recruitment activity | Roles shared with you, your answers (Interested, Skip, Not for me, with any reason you give), interview invitations and your responses, offers and your acceptance or decline, withdrawals |
| Referral data | Name and email of people you refer, and who referred you, for which role and from which Firm |
| Communications | Messages you send us through Contact us or by email |
| Technical data | IP address, browser and device type, sign-in times, and logs needed to secure and run the Portal |
3.1 We ask you not to include sensitive information in your CV or profile that a Firm does not need, such as NRIC or passport numbers, religion, health details, or photographs of others.
3.2 If you visit the Website, contact us, or use NXTalent on behalf of a Firm, we collect your name, email address, company, job title and any message you send, together with the account and technical data needed to give you access. We use it to respond to you, provide NXTalent to the Firm, and manage our business relationship.
4. How we collect it
4.1 From you, when you register, upload a CV, complete your profile, answer an invitation or contact us.
4.2 From Firms, when a Firm invites you to the Portal, shares a role with you, or sends you an interview invitation or offer. This includes your name, email and the details of the role or process.
4.3 From other people, when someone refers you to a role or to the Portal. The referrer confirms they have your permission to give us your name and email. We use these only to send you the invitation and to record the referral. If you do not take up the invitation, you can ask us to delete them.
4.4 Automatically, through the technical data your browser sends when you use the Portal.
5. Why we use your personal data
5.1 We use your personal data to:
- create and manage your account and verify your sign-in;
- read your CV and build your profile;
- show you roles, invitations, interview progress and offers from Firms you deal with;
- share your profile, and later updates to it, with Firms you consent to;
- pass your answers to Firms, such as interest in a role or acceptance of an offer, and notify the relevant consultants;
- send you service emails, such as sign-in codes, invitations, updates on interviews and offers, and reminders before a share expires;
- run the referral feature and record who referred whom, for which role and from which Firm;
- respond to your questions and requests;
- keep the Portal secure, prevent fraud and misuse, and check that a CV belongs to the person who uploads it;
- comply with law and respond to lawful requests from authorities.
5.2 We do not use your personal data for marketing unrelated to NXTalent without your separate consent, and we do not sell it. We do not use your phone number to send marketing calls, text messages or other phone messages.
5.3 We may use your data, together with recruitment data that Firms using NXTalent share with us, in de-identified form to improve the Platform and to train and improve our AI models, including our recruitment models. De-identified data has your name, contact details and other identifiers removed so that it no longer identifies you, and we do not attempt to re-identify it.
5.4 We rely on your consent, given when you register, complete your profile or share with a Firm, and on the other bases the PDPA allows, such as where it is reasonably needed to provide the service you asked for.
6. Automated and AI processing
6.1 We use automated tools, including AI models, to read your CV, separate your roles, summarise your experience and suggest skills. Your CV may be processed on servers operated by NXON in Singapore.
6.2 You can review and correct everything these tools produce before your profile is shared. Suggested skills are kept only if you keep them.
6.3 We do not make hiring decisions about you. Firms and employers make those decisions.
7. Who we share your personal data with
7.1 Firms you consent to. When you share your profile with a Firm, or accept a Firm's referral or invitation, we send that Firm your profile, CV, and the job preferences you entered. Salary appears as "Not disclosed" if you chose not to give it. The Firm also receives your answers to its roles, invitations and offers.
7.2 Referrers and the people you refer. If you were referred, the Firm that receives your profile is told who referred you. If you refer someone, they see your full name as the person who referred them.
7.3 Service providers who process data on our behalf, under contract and only for our purposes:
| Provider | Service | Location |
|---|---|---|
| Amazon Web Services | Hosting, database and file storage | Singapore |
| Postmark (ActiveCampaign) | Sending service emails | United States |
| Cloudflare | Network delivery and security | Global network |
7.4 Others, where needed: our professional advisers; a buyer or successor in a merger, acquisition or sale of assets, under the same protections; and authorities where the law requires or allows it.
7.5 We never pass your profile from one Firm to another. Each Firm receives it only from us, and only with your consent.
8. Transfers outside Singapore
8.1 Your profile and CV are stored in Singapore. Some service providers, such as our email provider, process limited data, such as your name and email address, outside Singapore.
8.2 Where we transfer personal data outside Singapore, we take appropriate steps, such as contractual commitments, to ensure it receives protection comparable to the PDPA.
9. How we protect your personal data
9.1 Your data is encrypted in transit and at rest. Passwords are stored only in hashed form. Access to personal data is limited to staff and providers who need it, and is logged.
9.2 No system is completely secure. If you suspect your account has been compromised, contact support@nxtalent.ai at once.
10. How long we keep it
10.1 We keep your personal data while your account is active and for as long as needed for the purposes in this Policy.
10.2 If you do not sign in for 3 years, we may delete your account and data after notifying you by email.
10.3 When you delete your account, we delete your personal data held by NXON on the Portal, except what we must keep to meet legal obligations, resolve disputes or enforce our Terms. Copies already shared with Firms are held by those Firms under their own notices.
10.4 Security logs are kept for up to 12 months.
11. Your rights
11.1 Access and correction. You can view and correct most of your data directly on the Portal. You may also ask us for a copy of your personal data and how it has been used or disclosed in the past year. We may charge a reasonable fee for access requests, and will tell you the fee first.
11.2 Withdraw consent. You can stop sharing with any Firm from the Sharing page at any time. That Firm stops receiving updates. You can also withdraw consent to the Portal entirely by deleting your account. We will explain the likely consequences, for example that we can no longer show you roles or send your profile to Firms.
11.3 Delete your account. You can delete your account from the Portal menu.
11.4 Data already used to train our models. De-identified data that has already been used to train or improve our AI models cannot be removed from them when you withdraw consent or delete your account, because it no longer identifies you. Your identifiable data is deleted as described in clause 10.3.
11.5 For requests we cannot handle on the Portal, email compliance@nxtalent.ai. We will respond within 30 days, or tell you within that time when we will respond.
11.6 To ask a Firm to correct or delete the copy it holds, contact that Firm directly.
12. Data breaches
If a data breach is likely to cause you significant harm, we will notify you and the Personal Data Protection Commission as the PDPA requires, and tell you what we are doing about it and what you can do.
13. Cookies
The Website and the Portal use only essential cookies and similar browser storage, needed to keep you signed in, remember your settings and keep the Portal secure. We do not use advertising or third-party tracking cookies.
14. Minors
The Website and the Portal are not intended for anyone under 18. We do not knowingly collect personal data from minors. If you believe a minor has given us personal data, contact us and we will delete it.
15. Changes and contact
15.1 We may update this Policy from time to time. We will post the new version on the Website with a new effective date, and tell you by email or on the Portal if the change is material.
15.2 For questions, requests or complaints about your personal data, contact our Data Protection Officer:
- Email: compliance@nxtalent.ai
- NXON AI Factory Pte. Ltd., 140 Robinson Road, #09-02, Tahir Building, Singapore 068907
15.3 If you are not satisfied with our response, you may contact the Personal Data Protection Commission of Singapore.