Privacy Policy
Last updated 15 September 2026
Auro Interface Pty Ltd (trading as TheNextRole) operates The Next Role and is the data controller for the personal information described here. We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth).
What we collect
- Account details: name, email address and password credentials.
- CV content: the file or text you upload, and the profile we derive from it (roles, skills, seniority).
- Preferences: the states you'd work in, job links you paste and your subscription plan.
- Usage data: pages visited, searches run and basic device/browser information.
How we use it
- To read your CV and build your candidate profile.
- To find and rank job advertisements, and to explain scores and skill gaps.
- To manage your account, plan limits and support requests.
- To keep the service secure and improve how matching works.
Automated processing
Match scores, rationales and recommendations are produced by AI models. Your CV text and the job ads being scored are sent to our AI processing provider to generate those results. We do not use your CV to train public models, and we do not sell your personal information.
Who we share it with
- Service providers who help us run the platform — hosting, database and authentication, and AI processing.
- Job listing sources (we send search keywords, never your CV).
- Paddle.com, our Merchant of Record, for the sale of our subscriptions — subscription management, payments, invoicing and tax compliance. Paddle handles your payment details and billing enquiries under its own privacy notice.
- Professional advisers (legal, accounting) and authorities where required by law.
Providers may process data outside Australia; we require appropriate safeguards.
Storage, retention and security
Data is stored in managed cloud infrastructure with encryption in transit and at rest, and access limited to your own account. You can delete a CV at any time, which removes the file and its parsed profile. If you close your account we delete or de-identify your data within 30 days, except where we must keep records by law.
Your rights
You can access, correct or delete your personal information, ask for a copy of your data, or withdraw consent by closing your account. Contact us through the Contact page. If you are unhappy with our response you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).
Children
The service is not intended for people under 16.
