My What Next Privacy Notice

My What Next is operated by BSA Corp Pty Ltd (ABN 22 680 726 327).

This notice explains how we handle personal information during the My What Next closed beta. Contact us at beta@my-what-next.com if you have a privacy question or want help with your information.

Who can use the beta

The beta is for adults aged 18 or over.

We ask you to confirm that you are 18 or over. We record your confirmation, the date and the version of the notice you accepted. We do not collect your date of birth, identity documents or biometric information to check your age.

Information we collect

Depending on how you use My What Next, we may collect:

• your email address and account, verification and security information;
• your 18+ confirmation and records showing which notices and terms you accepted;
• résumés and the career information extracted from them;
• employment history, skills, qualifications, achievements and career preferences;
• roles, companies, job advertisements and opportunities you are considering;
• information you enter during Guided Sessions and Simulations;
• session answers, feedback and summaries you choose to save;
• Career Memory information you review and approve;
• real-interview reflections you deliberately submit;
• feedback, support requests and permission to contact you about them; and
• limited technical, security and beta-use information needed to operate and improve the service.

Your résumé, answers or reflections may contain information of a sensitive or private nature. Please avoid including information that is not needed for your career guidance, or another person’s confidential information unless you are authorised to provide it.

Why we collect it

We use this information to:

• create and secure your account;
• verify that you are eligible for the adult beta;
• personalise your interview practice;
• generate questions, coaching and feedback;
• provide session summaries you choose to save;
• maintain Career Memory items you approve;
• help you review, correct or remove saved information;
• operate, secure and troubleshoot the beta;
• respond to feedback, privacy requests and support issues; and
• measure whether the beta works reliably and is useful, using the minimum information reasonably necessary.

If you do not provide an email address, complete email verification, confirm that you are 18 or over and accept the required notices, you cannot create a beta account.

If you do not provide and approve the minimum career and opportunity information needed for personalised practice, some features may not work or may be less useful.

Temporary and saved information

Information entered during an unfinished session is temporary. We may retain it for up to 24 hours so you can recover an interrupted session. It is then automatically deleted.

At the end of a completed session, you can review your feedback and choose either:

• Save this session; or
• Finish without saving.

If you choose to save it, the session summary may include your answers, feedback, suggested improvements and next steps. A saved summary is retained for up to 12 months unless you delete it earlier.

If you finish without saving, the session content is deleted after the temporary recovery period.

Career Memory is separate from a session summary. Proposed Career Memory items are not saved for future use until you review and approve them. You can deselect individual proposals before saving.

Real-interview reflections are retained only when you deliberately submit them.

How we use AI

My What Next may use AI-supported services to personalise interview-practice questions, coaching and feedback.

The information sent for AI processing may include the minimum career, opportunity and session context needed to provide the feature you requested.

AI can make mistakes. Its suggestions may be incomplete, inaccurate or unsuitable for your circumstances. You should review its output and use your own judgement.

My What Next feedback describes evidence demonstrated during practice. It does not predict whether you will be hired, guarantee an employment outcome or replace professional career, legal, financial, medical or mental-health advice.

AI-generated interpretations and suggested Career Memory items are treated as proposals, not established facts. They require your review and approval before My What Next remembers them for future use.

We do not sell your career information. We do not use your content to train a My What Next model.

More detail is available in the My What Next AI Disclosure.

Service providers and overseas handling

We use selected service providers to operate the beta, including:

• Cloudflare for website and application delivery;
• Supabase for database, storage and account services;
• Amazon Web Services in Sydney, with ClamAV, for malware scanning and temporary file processing; and
• Resend for verification, password-reset and other service emails.

Some providers or their subprocessors may process personal information outside Australia.

Before opening the beta, we will verify the countries involved, applicable retention settings and contractual protections and update this notice if required.

How long we keep information

Our intended closed-beta retention periods are:

• verification links or tokens: until used or up to 24 hours;
• interrupted onboarding or session information: up to 24 hours;
• original résumé and job files: until processing is completed or up to 24 hours, whichever occurs first;
• saved session summaries: up to 12 months;
• approved Career Memory: while your account remains active, unless you remove it earlier;
• resolved feedback and support records: up to 12 months;
• limited beta analytics: up to 12 months;
• routine security and audit logs: generally up to 90 days;
• protected backups: expire within 90 days; and
• minimal acceptance, deletion and legal-compliance records: up to seven years after account closure where reasonably necessary or legally required.

When information is deleted from active systems, protected backup copies may remain until the applicable backup expires. Deleted information will not be restored into active use except where necessary for security, disaster recovery or legal compliance.

Your choices and controls

You can:

• view saved information;
• correct inaccurate or incomplete information;
• delete an individual saved summary;
• review, correct or remove Career Memory items;
• delete retained résumé versions;
• ask us to delete your account and associated career information;
• withdraw optional permission for follow-up contact or marketing; and
• ask how your information has been handled.

We aim to remove account-linked personal information from active systems within 30 days of a valid account-deletion request, subject to limited legal, security and backup exceptions.

To make a request, contact beta@my-what-next.com. We may need to confirm that the request relates to your account before providing, changing or deleting information.

Marketing

Marketing messages are optional and separate from messages needed to operate your account or the beta.

We will not treat beta participation as ongoing marketing consent. If you choose to receive marketing, you can unsubscribe at any time.

Security

We use technical and organisational safeguards designed to protect personal information, including account access controls, private storage, malware scanning, encryption in transit, restricted administrative access and security logging.

No online service can guarantee absolute security. If we identify a data incident that may affect you, we will assess it and notify you where required or appropriate.

Complaints and questions

If you have a privacy concern, contact:

BSA Corp Pty Ltd

Trading as My What Next

ABN 22 680 726 327

Email: beta@my-what-next.com

Please explain your concern and how you would like us to help. We will acknowledge the complaint and aim to provide a substantive response within 30 days.

You can also obtain information about privacy rights and complaints from the OAIC website.

Changes to this notice

We may update this notice as the beta, providers or legal requirements change.

The version will be shown at the top. If a change materially affects how we collect, use, disclose or retain your information, we will provide appropriate notice and seek renewed agreement where required.

If My What Next closes or changes ownership

If My What Next closes, we will notify customers where practicable, provide a reasonable opportunity to retrieve or delete saved career information and then delete it according to a published schedule.

A sale or restructure does not permit the silent reuse of private career information for a new purpose.