Nexts Privacy Policy

Overview

This Privacy Policy applies to the Nexts website at nexts.ai, the Nexts App, account and cloud services, and companion plugins. The Chrome extension may still appear as NextsAI or Nexts AI; these names refer to the companion extension for Nexts and are covered by this same policy. Nexts is operated by ALFA srl, the controller responsible for the personal information described in this policy. Privacy enquiries can be sent to info@nexts.ai.

Nexts is local-first, but local-first does not mean that content never leaves your device. Local workspaces are separate from account records. The account database is not a repository for your chats, local files, email bodies, meeting recordings, transcripts, summaries, or prompts. Cloud features can process task content in transit, and generation services retain task metadata and output links as explained below. Information you choose to send to support is handled separately for that request.

Information We Collect

We may collect the following categories of information when you use Nexts:

• Account information, such as name, email address, password hashes, profile details you supply, role, and account status. Session and refresh-token records support sign-in and revocation.
• Subscription and billing metadata, such as plan, entitlement, payment status, renewal status, order identifiers, purchased credits, wallet balances, and transaction records. Payment providers process payment details under their own policies.
• Device and license information, such as device names, operating system and app version, hashed device fingerprints, activation and last-seen times, public keys where used for pairing, license status, and usage counters such as token counts and credits consumed.
• Security and audit information, such as login events, administrative changes, API access logs, and abuse-prevention signals.
• Connected-app information, including provider, account identifiers, authorized scopes, connection status, and authorization tokens needed to maintain connections.
• Cloud generation records, including model and provider identifiers, task status, timestamps, costs, errors, and generated-output URLs. Output URLs can give access to generated media and should be treated as private.
• Support information that you choose to send to us, such as messages, screenshots, or diagnostic details.

Cookies and Usage Data

The website uses session and security cookies for administrative sign-in and request protection, and browser local storage to remember language preferences. Hosting and network infrastructure may process IP addresses, requested URLs, browser information, timestamps, and operational diagnostics to deliver and secure requests. These records are distinct from private desktop content.

You can control cookies through your browser settings. If you disable essential cookies, some account or administrative features may not work correctly.

Chrome Extension: NextsAI / Nexts AI

The companion Chrome extension connects Nexts to Chrome on the same computer for browser tasks you initiate. Depending on the task and permissions, this can involve tab titles and URLs, page text and visible content, form inputs, and information displayed on signed-in websites. Existing browser sessions allow actions on those websites; enabling the extension is not permission to use browsing data for unrelated purposes.

Browser information needed for a task is passed to the desktop app over its local connection. If that task uses a cloud model, relevant browser content may then be transmitted through the configured AI service. Submitting a form or sending a message also sends the chosen information to the destination website. Browser content is not stored as account-profile data.

We use extension data only for the requested browser features, not to sell browsing histories or target advertisements. Our use and transfer of extension user data follows the Chrome Web Store User Data Policy, including its Limited Use requirements. Human access is restricted to your explicit permission for specific data, security investigation, legal requirements, or policy-permitted aggregated and anonymized internal operations.

You can stop a task, disable the Chrome plugin in Nexts, adjust extension permissions, or disable or remove the extension in Chrome. Removing the extension does not delete existing local conversations, provider records, or your Nexts account. See the Chrome extension page for installation details.

Google API and Gmail Data

If you connect a Google account or authorize Gmail-related access, Nexts only requests the permissions needed to provide the user-facing features you choose to enable. Depending on the feature, this may include reading mailbox metadata, message content, labels, attachments, or sending user-directed messages.

We use Google user data only to provide and improve the specific Nexts features that you request, such as inbox search, message summarization, task extraction, drafting replies, or sending messages on your behalf after your action or confirmation.

Nexts's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We request only the Google permissions needed for the features shown in the product. If we materially change how Google user data is accessed, used, stored, shared, or deleted, we will update this Privacy Policy and ask users to consent before using Google user data in a new way.

• We do not sell Google user data.
• We do not use Google user data for advertising.
• We do not use Google user data to train generalized artificial intelligence or machine learning models.
• We do not allow humans to read Google user data unless you give explicit permission, it is necessary for security or abuse investigation, it is required by law, or the data is aggregated and anonymized and used for internal operations in accordance with the Limited Use requirements.
• We do not transfer Google user data except as necessary to provide the requested feature, comply with law, or protect users and the service.

How We Use Information

We use information to:

• Provide, operate, authenticate, and secure Nexts accounts and desktop services.
• Manage subscriptions, entitlements, usage limits, device binding, and offline licenses.
• Provide user-requested integrations and actions, including Google or Gmail features when authorized.
• Detect, prevent, and respond to fraud, abuse, security incidents, and service reliability issues.
• Provide customer support and communicate about service, policy, or product updates.

Sharing and Disclosure

We may share information with service providers that help us operate Nexts, such as hosting, storage, payment processing, security, and customer support providers. We disclose information needed for those purposes. Independently selected model providers, connected apps, and payment services also describe their processing in their own privacy policies.

We may disclose information if required by law, to protect rights and safety, to investigate abuse, or as part of a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality and user protection measures. The more restrictive Google API and Chrome extension Limited Use commitments above continue to apply to those data, including consent requirements for transfers where required by those policies.

AI Service Transparency

When you use cloud chat, image, video, speech, transcription, or other model features, the required prompts, selected files, images, audio, and task context may be transmitted to the selected or configured provider, directly or through Nexts cloud gateways. Web search sends the search query and options to the configured search provider. Cloud processing is distinct from keeping account records: our gateways must receive and forward the requested content to perform these operations. Generation task records can retain output links so results can be retrieved later. Provider retention and processing depend on the service used; do not assume all providers offer zero retention. Nexts does not use Google user data to train generalized AI or machine learning models.

Connected Apps and Remote Access

For cloud connected apps, Nexts stores connection metadata and authorization credentials so it can obtain access tokens and execute authorized actions. The connector gateway processes the action inputs and returned data needed for the selected service. Disconnecting a connection and revoking access at the provider stop future use of that authorization; they do not undo actions already completed.

If you enable remote access, pairing credentials, device identifiers, tunnel addresses, connection status, and network traffic are processed to connect your remote device to the desktop. The public gateway relays traffic needed for that connection. Keep pairing links private and stop the remote service or public tunnel when you no longer need it.

International Processing

Our production account infrastructure is hosted in Hong Kong. Information may also be processed in the countries where the selected model, connector, payment, hosting, or support providers operate. We take reasonable steps designed to protect information according to this Privacy Policy when it is processed outside your region.

Data Retention and Deletion

We retain account, subscription, security, and audit information for as long as needed to provide the service, comply with legal obligations, resolve disputes, and enforce agreements. Connection records are needed while a connection remains active; generation records support result retrieval and billing. We do not promise a fixed automatic deletion period. Request account, authorization, or generation-record deletion at info@nexts.ai. We may verify ownership and retain records needed for legal, billing, fraud-prevention, or dispute purposes; backups may persist until their normal replacement. We will explain applicable limits when responding.

If you revoke Google access, Nexts will stop using the revoked authorization. You may also remove access in Google Account connections. Revocation does not automatically erase previously returned data, local files, or third-party records. Delete local workspace data on your devices and contact the relevant provider about copies it controls.

Security

We use administrative, technical, and organizational safeguards designed to protect information from unauthorized access, disclosure, alteration, and loss. No method of transmission or storage is completely secure, but we work to keep protections appropriate for the sensitivity of the data we process.

Your Choices

Contact info@nexts.ai to request access, correction, a copy, or deletion of your personal information. Depending on applicable law, you may also object to or restrict processing, withdraw consent, or complain to your local data protection authority. Withdrawal does not affect prior lawful processing. These requests do not require a self-service export or deletion feature. You may revoke third-party account access, including Google access, at any time from the relevant third-party account settings.

Children's Privacy

Nexts is intended for adults aged at least 18 and the age of legal majority in their jurisdiction, consistent with our Terms of Service. It is not directed to children, and we do not knowingly collect personal information from children. If you believe a child has provided personal information to us, contact us and we will take appropriate steps to delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the date above and provide notice when appropriate. Where a change requires consent, we will request it before the new processing begins; publication of this policy alone does not constitute that consent.

Contact

Operator: ALFA srl. Contact address: Via Cenischia, 50, 10139 Torino (TO), Italy.

The website, App, and companion extension share this policy at https://nexts.ai/privacy and the Nexts Terms of Service. For privacy questions, data requests, deletion requests, or Google API data questions, contact us at info@nexts.ai.