1. Who is responsible
Nextly is an independently operated personal assistant service available at nextly.club and through its connected applications. The Nextly operator is responsible for the processing described here. For privacy questions, access requests or account deletion, contact support@nextly.club.
2. Information we process
- Account information: your verified email, account identifier, and profile information supplied during sign-in or entered in Nextly.
- Your content: messages, voice recordings, transcripts, uploaded files, tasks, meeting details, conversations, preferences and context you choose to save.
- Connections and collaboration: connected account identifiers, granted permissions, encrypted authorisation credentials, invitations and task-sharing relationships.
- Service information: request status, error codes, optional push notification device tokens, access and security records, and AI usage information used to operate, protect and troubleshoot Nextly. Hosting and authentication providers may process IP addresses and device information.
3. Google account data and permissions
Google sign-in identifies your account. Connecting Calendar or Gmail is optional and requires a separate Google permission screen. Nextly uses only the permissions you grant. Gmail reading and sending are separate permissions. Gmail and Slack messages are sent only after you confirm the displayed account, recipient and text; Nextly stores the approved message and service receipt.
| Connection | Access and purpose |
|---|---|
| Google sign-in | Account identifier and email, with profile information where provided, to authenticate you and associate your Nextly data with your account. |
| Google Calendar | Calendar lists, availability and event details, including titles, times, locations and participants where returned, to select calendars, check schedules and create, update or delete events in response to your instructions. |
| Gmail | Read-only access to relevant messages, headers and attachments to search mail, answer your questions, summarise information and prepare follow-up tasks or text. This connection does not grant permission to send mail. |
Relevant Google content can be included in the context sent to our AI processing provider to fulfil the feature you requested. Permission to read a source does not by itself authorise sending messages or sharing its contents with other people.
We do not sell Google user data, use it for advertising, or use it to train general-purpose AI models. Access and transfers are limited to providing or improving the user-facing features you use, security, applicable legal obligations, and other uses permitted by that policy. People do not read Google user data unless you explicitly authorise access to specific data, it is necessary for security, required by law, or another Limited Use exception applies.
4. How we use your information
We process information to fulfil your instructions, retain task and conversation context, support reminders and authorised calendar actions, enable the connections you select, prevent abuse, and resolve service failures. Saved preferences help maintain continuity; you can manage saved context in the application.
Where applicable, processing is based on providing the service you request, your consent for optional connections and permissions, our legitimate interests in security and reliable operation, or legal obligations. You may withdraw optional consent by disconnecting the relevant service; this does not undo processing already performed.
5. AI, voice and service providers
Nextly uses OpenAI API services for AI processing and transcription. Relevant request content, selected context and connected-service data may be sent for those purposes. Nextly does not train general-purpose AI models on your content. Provider-side security retention and processing are governed by the provider’s applicable terms and safeguards.
If you enable iPhone result notifications, Nextly stores an encrypted device notification token and sends generic status alerts through Apple Push Notification service. Alerts do not include your request text; opening one requires the matching signed-in device. You can turn them off in Nextly or iPhone settings. Apple delivery can be delayed or unavailable.
The iPhone application may also request microphone and Apple speech-recognition permissions. Depending on the feature and device support, speech processing may take place on your device or through Apple. Voice sent to Nextly can be processed on our servers and by our transcription provider; voice capture is not a promise that all processing stays on your phone.
We use Cloudflare for application hosting, storage and security, Supabase for authentication, and Railway for channel services. Google, Apple, Telegram and other services you choose to connect process data under their own terms. We share data with service providers as needed to deliver the service, with people you choose to share with, or where legally required. We do not sell your personal information or use your content for targeted advertising.
Providers may process data outside your country, including outside the European Economic Area. Where required, applicable contractual and other transfer safeguards govern these transfers.
6. Storage, retention and security
Tasks, conversations and saved context remain available while needed to provide your workspace, until removed or deleted as applicable. Removing an item from view may archive it for recovery rather than erase it immediately. Temporary uploaded files have cleanup rules; extracted text or a saved task can remain in conversation history after the source file expires.
Unsent recordings may remain on your iPhone so they can be recovered. Disconnecting Google stops future access through that connection but does not automatically delete tasks, summaries or events already created. Events retained by Google are managed in Google Calendar.
We restrict access by account and encrypt stored connection credentials. No system can promise absolute security. Limited records may be retained where needed for security, dispute resolution or legal obligations. Ask us to delete your account and associated data if you no longer want Nextly to retain your workspace.
7. Your choices and rights
- Manage connected accounts in Nextly Connections, or revoke Nextly access in your Google Account.
- Control microphone and speech permissions in your device settings.
- Manage tasks and saved context in Nextly. Sharing a task or connecting with someone does not give them access to your entire private workspace.
- Request access, correction, export or deletion by emailing support@nextly.club from your account email. We may need to verify ownership before acting.
Depending on your location, you may also have rights to restrict or object to processing, withdraw consent and complain to a competent data-protection authority.
8. Children and changes to this notice
The current Nextly pilot is intended for adults and is not directed at children. Contact us if you believe a child has provided personal information through the service.
We may update this notice as the service develops. The date above identifies this version. Material changes to data use will be communicated through the service or an appropriate account channel; new permissions will be requested where required.