ENDE

Privacy Policy

How nxtQuest handles your personal data.

1. Who is responsible

Set Fire to Digital Media GmbH Borsigstr. 15, 24145 Kiel, Germany Contact for all privacy questions: support@nxtquest.ai This policy explains what personal data nxtQuest processes when you use it, why, who else touches it, and what rights you have.

2. What nxtQuest is

nxtQuest is a practice tool: you rehearse job interviews, presentations and similar conversations with AI-generated characters and receive a feedback report. Sessions are video and audio conversations, and they are recorded so you can review them and so we can produce your report.

3. Data we process, and why

Account data — name, email address, a password hash (never your password itself) or your Google sign-in identifier, interface language, profile image. Purpose: to run your account. Basis: performing the service you asked for (Art. 6(1)(b) GDPR). Your materials — CVs, job descriptions, LinkedIn text, files and notes you attach to Characters. Purpose: to tailor your sessions. Basis: Art. 6(1)(b) GDPR. Session recordings — your video and audio, and the AI character's video and audio. Purpose: playback for you and generating your report. Basis: Art. 6(1)(b) GDPR. Recordings are stored privately; only you (and our administrators for support during the beta) can open them. Transcripts and analysis — the words spoken in the session, scores, keyword coverage, pace, confidence and clarity measures, AI coaching text, and where applicable a voice-tone / sentiment timeline and visual delivery cues such as eye contact. Purpose: your feedback report. Basis: Art. 6(1)(b) GDPR. Usage data — experience points, streaks, achievements, session counts and plan limits. Basis: performing the service and our legitimate interest in fair usage limits (Art. 6(1)(b) and (f) GDPR). Billing — if you subscribe, payment is handled by our payment provider. We store a customer and subscription reference and your plan, not your card number. Basis: Art. 6(1)(b) and (c) GDPR.

4. Voice, face and emotion-related analysis

We analyse your recording to give you feedback, including how your voice sounds and how you present on camera. We do this only to produce your own report. We do not use it to identify you, to build profiles for anyone else, or to make decisions about you. If an employer or organisation assigns you a session, we do not compute or store any emotion-related analysis for that session at all. nxtQuest must not be used to assess real candidates or employees — see our Terms. More on how AI is used: /ai-transparency.

5. Who we share data with (processors)

We use carefully selected service providers who process data on our behalf, only to provide nxtQuest, under data-processing agreements. They fall into these categories: • Providers of real-time AI video and voice characters (your live video/audio and the session context). • Providers of AI language models (transcripts and your materials, to produce coaching and analysis). • Speech-to-text providers (the audio of your recording, to transcribe it). • Web-content extraction providers (text from links you provide). • Hosting, database and file-storage providers (our servers are in the EU, in Germany). • Sign-in providers, if you choose "Sign in with Google" (email, name, profile image). • Payment providers, if you subscribe. • Email delivery providers, for invitation emails. A current list of the specific providers is available on request at support@nxtquest.ai. We do not sell your data and we do not use your content to train AI models ourselves.

6. Transfers outside the EU/EEA

Several providers above are based in, or may access data from, the United States. Where that happens we rely on the safeguards the law provides — such as the EU–US Data Privacy Framework or Standard Contractual Clauses — as agreed with each provider.

7. How long we keep it

Account data, materials, recordings, transcripts and analysis are kept until you delete them or your account. You can delete any session (and its recording and report) yourself from its report page. To delete your whole account, email support@nxtquest.ai and we will remove it and the data linked to it. Providers may keep short-lived technical copies for abuse prevention and security, as set out in their own terms. Billing records are kept as long as tax and commercial law requires.

8. Your rights

You can ask us for access to your data, correction, deletion, restriction, a portable copy, and you can object to processing based on legitimate interest. Where we rely on your consent, you can withdraw it at any time. Email support@nxtquest.ai. You also have the right to complain to your data protection supervisory authority.

9. Cookies and local storage

We use only what the service needs to work: a sign-in session cookie and security token, and your browser's local storage for preferences (theme, layout, whether you have seen the intro tour). We do not use advertising or tracking cookies and do not run third-party analytics, which is why there is no cookie banner. If that changes we will ask first.

10. Security

Connections are encrypted (HTTPS). Passwords are stored only as salted hashes. Recordings are kept in private storage and opened through short-lived links. Access to our systems is limited to what is needed to run the service.

11. Changes and contact

We will update this policy as the product or the law changes and show the date below. Questions: support@nxtquest.ai.

Last updated: 22 October 2026