Privacy Policy

1. Information We Collect

We collect the following types of personal information:

• Account information: Name, email address, and phone number provided during registration
• Authentication data: Email and password credentials used to access your account
• Payment information: Billing details and payment method information processed securely through Stripe (we do not store full credit card numbers on our servers)
• Usage data: Information about how you interact with our platform, including pages visited, features used, and session duration
• Communications: Messages and files exchanged through the client portal

2. How We Use Your Data

We use your personal information to:

• Create and manage your account on our client portal
• Provide, maintain, and improve our web development and software services
• Process payments and send invoices
• Communicate with you about project updates, support requests, and service announcements
• Ensure the security and integrity of our platform
• Comply with legal obligations

3. Data Storage

Your personal data is stored securely using Supabase, a cloud-based platform that provides authentication and database services. Supabase employs industry-standard security measures, including encryption at rest and in transit, to protect your data.

We implement appropriate technical and organizational measures to safeguard your personal information against unauthorized access, alteration, disclosure, or destruction.

4. Third-Party Services

We use the following third-party services that may process your data:

• Supabase: Provides authentication (email/password login) and database storage for account and project data. View their Privacy Policy.
• Stripe: Handles payment processing and billing. Payment information is sent directly to Stripe and governed by their Privacy Policy.

We do not sell, rent, or trade your personal information to any third parties for marketing purposes.

5. Cookies and Sessions

Our platform uses cookies and session tokens to maintain your authentication state and provide a seamless user experience. These include:

• Authentication cookies: Essential cookies managed by Supabase to keep you signed in
• Session tokens: Used to maintain your active session and verify your identity

We do not use third-party tracking or advertising cookies. The cookies we use are strictly necessary for the operation of the platform.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right to access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to deletion: Request that we delete your personal data, subject to legal retention requirements
• Right to data portability: Request your data in a structured, commonly used format
• Right to object: Object to the processing of your personal data in certain circumstances
• Right to withdraw consent: Withdraw your consent at any time where processing is based on consent

For GDPR (EU/EEA residents): You have the rights listed above under the General Data Protection Regulation. We process your data based on contractual necessity (to provide our services) and legitimate interest (to improve and secure our platform).

For CCPA (California residents): You have the right to know what personal information we collect, request deletion of your data, and opt out of the sale of personal information. We do not sell your personal information.

To exercise any of these rights, please contact us at the email address listed below. We will respond to your request within 30 days.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our services. After account termination, we may retain certain data for the following purposes:

• To comply with legal, regulatory, or tax obligations (typically up to 7 years for financial records)
• To resolve disputes or enforce our agreements
• To maintain records required for business operations

When data is no longer needed for any of these purposes, it will be securely deleted or anonymized.

8. Data Security

We take the security of your data seriously and implement industry-standard measures, including:

• Encryption of data in transit (TLS/SSL)
• Encryption of data at rest
• Secure authentication via Supabase Auth
• Regular security reviews and updates
• Access controls limiting data access to authorized personnel

While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security, but we are committed to maintaining the highest practical standards.

9. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a minor, please contact us immediately so we can take appropriate action.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When we make material changes, we will notify you via email or through a prominent notice on our platform. The "Last updated" date at the top of this page indicates when this policy was last revised.

11. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

privacy@nextgensystems.dev

We are committed to resolving any privacy concerns promptly and will respond to all inquiries within 30 days.