Privacy & candidate data
NEXORA connects candidates, employers and recruitment consultancies. Candidate information should be collected for clear purposes, kept secure and shared only under appropriate access rules.
Candidate profiles
Provide only information needed for your job search. Account profile information is distinct from uploaded CVs, certificates and other supporting documents. Profile visibility and consultancy-discovery preferences should be clearly explained and changeable.
CVs and supporting documents
Candidate documents should be stored in private storage, not exposed through public file URLs. Downloads should require authentication and an authorization check. Any temporary download link should expire quickly.
Consultancy access and consent
A participating consultancy may discover only candidate profiles that have actively opted in. A consultancy requesting access to supporting documents must wait for the candidate's explicit approval. Candidates should be able to decline or revoke sharing. Revocation should stop future access, subject to any lawful record-retention requirements.
Job applications
When you apply for a vacancy, relevant application details are made available to the employer responsible for that vacancy and to authorized personnel who support the recruitment process. Application status should be visible in your candidate account.
Security and access
- Company workspaces must be isolated so one employer cannot access another employer's private records.
- Only authorized staff should access candidate applications and documents.
- Administrative access and sensitive actions should be logged.
- Authentication, access policies, storage permissions and retention practices must be tested before production use.
Your choices and requests
Use the candidate portal to update your profile and manage consultancy sharing where those controls are available. For privacy questions, correction requests or account-related concerns, contact the NEXORA team through the contact page.
Before production launch
NEXORA must publish a complete, reviewed policy identifying the data controller, lawful purposes, retention periods, user rights, complaint route, contact details and any third-party processors or international transfers that apply. Do not treat this interim notice as proof of regulatory compliance.