Privacy Policy

1. Who Is Responsible for Your Information

NxtGen Stack is operated by Mohamed Kamal Mohamed Kamel, trading as NxtGen Stack.

In this Policy, "NxtGen," "NxtGen Stack," "we," "us," and "our" refer to that operator.

Our main website is:

You can contact us about privacy through the official Contact or Support channel published on the NxtGen Stack website.

For most information relating to our websites, customer accounts, commercial relationships, marketing, administration, and operation of our business, NxtGen acts as the data controller or equivalent organization responsible for deciding why and how personal information is used.

There are also situations where a Business Customer controls personal information placed into a NxtGen service and instructs us how to process it. In those situations, NxtGen may act as a processor, service provider, or contractor on behalf of that customer.

Where required, those processing arrangements may be covered by a separate Data Processing Agreement.

2. Information We Collect

The information we collect depends on how you interact with NxtGen.

Information You Give Us

You may provide information when you:

1. create an account;
2. purchase or subscribe to a service;
3. create or manage a workspace;
4. contact support;
5. submit a tool, correction, update, review, or other contribution;
6. join a mailing list;
7. communicate with us;
8. participate in research, testing, or feedback;
9. connect a website, account, integration, or external service; or
10. use a NxtGen feature that requires information from you.

This information may include your name, email address, username, organization, role, account settings, communications, preferences, and other information you choose to provide.

Account and Profile Information

Where accounts are available, we may process information such as:

• your name;
• email address;
• account identifier;
• organization or workspace;
• role and permissions;
• authentication information;
• subscription or entitlement status; and
• account preferences.

We do not need your full payment card details to operate NxtGen where those details are handled directly by our payment provider or Merchant of Record.

Payment and Transaction Information

When you make a purchase, we may receive transaction information such as:

• customer or order identifiers;
• billing contact information;
• product or service purchased;
• price and currency;
• subscription status;
• transaction status;
• refund or chargeback information; and
• tax or invoice information.

Payment card processing may be handled directly by an authorized payment provider or Merchant of Record, such as Paddle.

NxtGen does not intentionally collect or store complete payment card numbers when the transaction is processed directly by that provider.

Customer Content

Some NxtGen services allow you to provide, upload, create, connect, analyze, or process information.

We refer to this as Customer Content.

Depending on the service, Customer Content may include documents, text, prompts, files, business records, websites, URLs, images, names, configuration data, analytics, reports, project information, or information obtained from systems you have authorized us to access.

Customer Content remains subject to the rights described in our Terms of Use.

We process it only as reasonably necessary to provide and operate the services you use, fulfill your instructions, secure the service, provide support, comply with law, and carry out other uses disclosed in this Policy or an applicable agreement.

Information From Connected Services

If you connect NxtGen to another service, website, account, API, platform, or system, we may receive information made available through that connection.

The information depends on the permissions you grant and the service being connected.

We may process authentication tokens or similar credentials needed to maintain an authorized integration.

We use connected information only for the purposes permitted by the connection, our agreement with you, and applicable law.

You are responsible for making sure you have authority to connect the relevant system and provide any information obtained through it.

Usage and Technical Information

When you use NxtGen websites or services, we may automatically receive technical and usage information.

This may include:

• IP address;
• browser and device information;
• operating system;
• pages or features used;
• dates and times of activity;
• referral source;
• approximate geographic region;
• session information;
• application events;
• error and diagnostic information;
• performance information; and
• security logs.

We use this information to operate, secure, understand, troubleshoot, and improve NxtGen.

Communications and Support

If you contact us, we may keep the content of the communication and information associated with it.

This can include support requests, emails, feedback, complaints, billing questions, bug reports, and other conversations.

We use these records to respond to you, resolve issues, improve our services, maintain appropriate records, and protect both customers and NxtGen where a dispute occurs.

Information From Public or Third Party Sources

Some NxtGen services may be designed to research, compare, analyze, verify, or organize information available from public sources, commercial data providers, connected systems, or other authorized sources.

Where that information contains personal information, we process it only where we have a lawful basis to do so and subject to applicable legal requirements.

3. Information We Do Not Want You to Send Without Good Reason

Please do not provide highly sensitive personal information simply because a text field allows you to type it.

Unless a NxtGen service expressly supports a particular regulated use, you should not intentionally submit information such as medical records, precise financial account credentials, government identification numbers, biometric information, information about children, or other highly sensitive information that is unnecessary for the service.

If a particular service is designed to handle information subject to special legal requirements, we may provide additional terms, safeguards, or disclosures for that service.

4. Why We Use Personal Information

We use personal information only when we have a legitimate reason to do so.

Our main purposes include:

Providing NxtGen

We use information to create and maintain accounts, operate services, process instructions, generate requested outputs, maintain integrations, manage entitlements, provide features, and otherwise deliver what you ask us to provide.

Running and Securing the Platform

We use information to authenticate users, maintain infrastructure, diagnose problems, detect suspicious activity, prevent fraud and abuse, investigate security events, and protect NxtGen, our customers, and third parties.

Supporting You

We use information to answer questions, provide technical assistance, investigate issues, process billing inquiries, and manage customer relationships.

Processing Purchases

We use transaction and account information to manage purchases, subscriptions, renewals, cancellations, refunds, entitlements, accounting, and related records.

Improving NxtGen

We may analyze how people use our services to understand what works, identify problems, improve usability, develop features, measure performance, and make better product decisions.

Where applicable law requires consent for the technologies used to perform this analysis, we ask for that consent first.

Communicating With You

We may send operational communications such as security notices, account messages, billing notices, service updates, or changes that affect your use of NxtGen.

These are different from promotional marketing communications.

Marketing

Where permitted by law, we may send information about NxtGen products, features, research, or services that we believe may be relevant to you.

Where consent is legally required, we will request it before sending the relevant marketing.

You can unsubscribe from marketing communications at any time.

Meeting Legal Obligations

We may process information when necessary for legal, tax, accounting, regulatory, fraud prevention, dispute resolution, or other compliance purposes.

Protecting Legal Rights

We may use information where reasonably necessary to establish, exercise, defend, or investigate legal claims or enforce our agreements.

5. Our Legal Bases for Processing

Privacy laws in some jurisdictions, including the UK and European Economic Area, require us to identify a lawful basis for processing personal information.

The basis depends on what we are doing with the information.

Where we rely on legitimate interests, those interests may include operating and improving NxtGen, protecting our services, preventing abuse, understanding product performance, maintaining business relationships, and protecting our legal rights.

We consider whether those interests are necessary and balanced against the rights and interests of the people whose information is involved.

Where we rely on consent, you may withdraw that consent at any time. Withdrawal does not make processing that was lawful before withdrawal unlawful.

6. Artificial Intelligence and Automated Processing

Some NxtGen services use artificial intelligence, machine learning, automated analysis, scoring, classification, or similar technologies.

If you use an AI feature, information you provide may be processed to generate the output or perform the function you requested.

Depending on the service, this may include prompts, Customer Content, contextual information, and generated responses.

We may use carefully selected third party technology providers to help perform this processing.

We do not authorize service providers to use personal information entrusted to them for their own unrelated advertising or marketing purposes.

AI and automated systems may also be used for service security, fraud detection, analytics, recommendations, classification, or operational assistance.

7. Cookies and Similar Technologies

NxtGen websites and services may use cookies and similar technologies such as local storage, pixels, tags, or scripts.

Some are necessary for the service to work.

These may support functions such as:

• authentication;
• security;
• session management;
• user preferences;
• load balancing; and
• essential site functionality.

Other technologies may be used for analytics, measurement, affiliate attribution, advertising, or understanding how people use our services.

Where applicable law requires consent before we use a nonessential cookie or similar technology, we will request that consent first.

Rejecting nonessential cookies should not prevent you from using the essential parts of the website.

Where available, you can change your choices through our cookie or privacy preference controls.

Browser settings may also allow you to block or delete cookies, although blocking essential cookies may affect functionality.

8. Affiliate Links, Referrals, and Advertising

NxtGen Stack may participate in affiliate programs or display advertising.

If you follow an affiliate link, the relevant referral or affiliate provider may process information needed to attribute the referral, such as a referral identifier, click information, or information stored through permitted cookies or similar technologies.

If you later purchase from the third party, that provider may tell us that a qualifying transaction occurred so that the referral can be attributed.

The third party's own privacy policy governs its independent processing.

Our affiliate relationships and advertising arrangements are described further in the NxtGen Stack Transparency & Affiliate Disclosure.

Commercial relationships do not determine NxtGen Stack rankings, evaluation scores, or review outcomes.

We do not sell personal information simply in exchange for money.

However, privacy laws in some jurisdictions use technical definitions of "sale," "sharing," or "targeted advertising" that can cover certain advertising or tracking arrangements even when no money is paid for the personal information itself.

If an activity we use falls within one of those definitions and applicable law gives you an opt out right, we will provide the required privacy choice.

9. When We Share Personal Information

We do not disclose personal information simply because someone asks for it.

We may share information when reasonably necessary with the following categories of recipients.

Service Providers

We may work with companies that provide services such as hosting, infrastructure, databases, security, authentication, communications, analytics, customer support, AI processing, storage, monitoring, or other technology needed to operate NxtGen.

They receive only the information reasonably necessary for the services they provide and are subject to appropriate contractual or legal obligations.

Payment Providers and Merchants of Record

Where a purchase is processed by Paddle or another authorized Merchant of Record or payment provider, information necessary to process, administer, refund, or support the transaction may be exchanged with that provider.

The provider also processes information independently under its own privacy terms.

Integration Providers

If you choose to connect NxtGen with a third party service, we may exchange information with that service as necessary to perform the connection you requested.

Affiliate, Advertising, and Measurement Providers

Where we use permitted affiliate, advertising, analytics, or measurement technologies, relevant information may be processed by the providers involved.

Where consent or an opt out is legally required, we provide the corresponding control.

Professional Advisers

Information may be shared with accountants, legal advisers, auditors, security specialists, insurers, or other professional advisers where reasonably necessary.

Authorities and Legal Requests

We may disclose information where we reasonably believe disclosure is required by applicable law, valid legal process, regulatory requirements, or to protect legal rights, safety, or security.

Business Transfers

If NxtGen is incorporated, reorganized, financed, acquired, merged, sold, or transferred in the future, information may form part of that transaction.

Where required by law, appropriate notice and protections will apply.

10. International Data Transfers

NxtGen operates online and may use service providers located in different countries.

As a result, personal information may be processed outside the country where you live.

Different countries can provide different levels of legal protection for personal information.

Where UK, EEA, or other applicable privacy law restricts international transfers, we use an available lawful transfer mechanism where required.

Depending on the circumstances, this may include:

• an adequacy decision or regulation;
• approved standard contractual clauses;
• the UK International Data Transfer Agreement or applicable UK addendum;
• another legally recognized safeguard; or
• a lawful exception available for the particular transfer.

We may also conduct assessments or implement supplementary safeguards where legally required.

11. How Long We Keep Information

We do not want to keep personal information forever simply because storage is available.

How long we retain information depends on why we have it.

We generally keep:

Account information while your account remains active and for a reasonable period afterward where needed for account closure, support, disputes, fraud prevention, or legal obligations.

Transaction and financial records for the periods necessary to satisfy accounting, tax, fraud prevention, payment, and legal requirements.

Customer Content for as long as necessary to provide the relevant service and according to the applicable account, plan, deletion controls, or agreement.

Support and communication records for as long as reasonably necessary to resolve the issue, maintain an appropriate business record, and protect legal rights.

Security and technical logs for periods reasonably necessary for security, investigation, troubleshooting, reliability, and abuse prevention.

Marketing information until you unsubscribe, withdraw consent where relevant, or the information is no longer reasonably needed.

Consent and preference records for as long as reasonably necessary to demonstrate and respect the choices you made.

Information may remain temporarily in backups after deletion until those backups are overwritten under normal backup cycles.

We may retain information for longer where required by law, necessary for an active dispute, or reasonably needed to establish or defend legal claims.

We may also anonymize information so that it can no longer reasonably identify an individual. Properly anonymized information may be retained and used without being treated as personal information.

12. How We Protect Information

We use reasonable technical and organizational measures appropriate to the nature of the information and services involved.

These measures may include access controls, authentication, encryption where appropriate, secure communications, infrastructure safeguards, logging, monitoring, permission controls, and operational security practices.

No online system can honestly guarantee absolute security.

You also play an important role in protecting your information.

Use strong credentials, protect your devices, assign permissions carefully, and tell us promptly if you believe your account or a connected system has been compromised.

If a personal data breach occurs, we will investigate it and notify affected individuals or relevant authorities where applicable law requires us to do so.

13. Your Privacy Rights

Privacy rights differ by location.

Depending on the laws that apply to you, you may have the right to:

• know whether we process your personal information;
• obtain access to it;
• receive a copy of certain information;
• correct inaccurate or incomplete information;
• request deletion;
• restrict certain processing;
• object to certain processing;
• receive certain information in a portable format;
• withdraw consent where processing relies on consent;
• object to direct marketing;
• opt out of certain sales, sharing, profiling, or targeted advertising;
• limit certain uses of sensitive personal information;
• request information about how automated decision making affects you;
• appeal certain privacy request decisions where applicable; and
• make a complaint to an appropriate privacy or data protection authority.

You will not be discriminated against merely because you exercise a privacy right provided by applicable law.

Some rights are subject to legal exceptions. For example, we may need to retain information required for taxation, fraud prevention, security, contractual obligations, or legal claims even after a deletion request.

14. UK and EEA Privacy Rights

If UK GDPR or EU GDPR applies to our processing of your personal information, you may have rights including:

1. access;
2. rectification;
3. erasure;
4. restriction;
5. data portability;
6. objection;
7. withdrawal of consent; and
8. rights relating to qualifying automated decision making.

Where we rely on legitimate interests, you may object to processing based on your particular situation.

You have an unconditional right to object to the use of your personal information for direct marketing.

You may also complain to the competent data protection authority where you live, work, or believe a violation occurred.

15. United States Privacy Rights

Privacy laws in certain US states provide additional rights when their legal thresholds and scope apply to a business.

Where an applicable US state law applies to NxtGen and to your information, your rights may include:

• requesting the categories or specific pieces of personal information we maintain;
• requesting information about sources, purposes, or recipients;
• requesting correction;
• requesting deletion;
• obtaining a portable copy;
• opting out of qualifying sale or sharing of personal information;
• opting out of qualifying targeted advertising;
• limiting certain uses of sensitive personal information;
• opting out of certain profiling;
• appealing a decision relating to a privacy request; and
• exercising your rights without unlawful discrimination.

Where applicable law requires recognition of legally valid browser based opt out preference signals, we will honor those signals as required.

We will not require you to waive privacy rights that applicable law says cannot be waived.

16. How to Exercise Your Rights

To submit a privacy request, use the official NxtGen Stack Contact or Support channel available through:

Tell us that your request concerns privacy and describe what you are asking us to do.

We may need to verify your identity before fulfilling certain requests.

We will ask only for information reasonably necessary to verify the request.

Where applicable law allows an authorized agent to make a request for you, we may require reasonable evidence that the agent is authorized to act on your behalf.

We respond within the period required by the law applicable to the request.

If we cannot fulfill all or part of a request, we will explain why where legally required.

17. Marketing Choices

You can unsubscribe from promotional emails using the unsubscribe option provided in the message or through another preference mechanism we make available.

Even if you unsubscribe from marketing, we may still send necessary nonmarketing communications concerning matters such as:

• your account;
• security;
• purchases;
• subscriptions;
• changes to a service you use;
• legal notices; or
• support requests.

18. Children's Privacy

NxtGen services are intended for adults, businesses, professionals, and general audiences capable of entering into the relevant agreement.

They are not designed as services directed specifically at children.

We do not knowingly seek to collect personal information from children where doing so would require parental authorization under applicable law.

If you believe a child has provided personal information improperly, please contact us so that we can investigate and take appropriate action.

19. Third Party Websites and Services

NxtGen websites and services may contain links to third party websites, products, or services.

Once you leave NxtGen or deliberately interact with an independent third party, that third party may process information under its own privacy policy.

We do not control the independent privacy practices of third parties.

We encourage you to review their policies before providing personal information.

20. Privacy When NxtGen Acts for a Business Customer

A Business Customer may use NxtGen to process personal information relating to its own customers, employees, users, partners, or other individuals.

When the Business Customer determines why and how that information is processed and NxtGen processes it only on the customer's instructions, the Business Customer is normally responsible for the relationship with the affected individual.

If your information has been placed into NxtGen by one of our Business Customers, you may need to direct your privacy request to that organization.

Where appropriate, we will assist the Business Customer in responding to valid requests according to the applicable agreement and law.

21. Changes to This Privacy Policy

NxtGen will continue to evolve, and this Privacy Policy may need to evolve with it.

We may update it to reflect changes in:

• our services;
• technology;
• privacy practices;
• service providers;
• law or regulation; or
• our legal or business structure.

The Last Updated date at the top shows when this Policy was most recently revised.

If a change materially affects how we use personal information, we will provide additional notice where applicable law requires it.

We will not treat a new use of personal information as automatically permitted simply because this Policy can be edited.

Where law requires consent or another legal basis for the new use, we will obtain or establish that basis before the processing begins.

22. Contact Us

If you have questions about this Privacy Policy, want to exercise a privacy right, or believe your personal information has been handled incorrectly, please contact us through the official NxtGen Stack Contact or Support channel: