Privacy Policy

Information We Collect

We collect information you provide directly to us, including:

• Business name, address, phone number, and website URL
• Email address and contact information
• Account credentials and profile information
• Payment and billing information
• Content you submit through our services (business descriptions, images, etc.)
• Communications you send to us

We also automatically collect certain information, including:

• Device information (browser type, operating system, device identifiers)
• Log data (IP address, access times, pages viewed)
• Location information (with your consent)
• Cookies and similar tracking technologies

NXTDIGITAL Mobile Application

The NXTDIGITAL mobile application provides role-authorized access to business workspaces for customers, sales personnel, and administrators. Depending on your account and permissions, the app may display and let you update business metrics, leads, appointments, websites, billing summaries, sales records, and administrative records.

Authentication and Device Security

• Your email address and password are transmitted over HTTPS for authentication. The mobile app does not store your password.
• Session credentials are stored in the iOS Keychain or Android Keystore using Expo SecureStore and are removed locally when you sign out.
• Administrator passwords are verified by the authentication service, then the mobile app retains only an opaque NXTDIGITAL session credential.
• If you enable App Lock, the operating system performs Face ID, Touch ID, or other device authentication. NXTDIGITAL does not receive or store your biometric template.

Mobile Notifications

Sales agents and managers may choose to enable operational push notifications. If enabled, the app sends an Expo push token, an opaque app-generated device identifier, the device platform, app version, and release environment to NXTDIGITAL. Expo processes the token on our behalf and coordinates delivery through Apple Push Notification service or the applicable Android push service. Notification permission is not requested until you choose to enable it, and you can unregister the device in the app or disable notifications in device settings.

Mobile Permissions and Tracking

The current mobile app does not request access to location, contacts, calendars, microphone, camera, photo library, health data, or advertising identifiers. It does not include an advertising SDK or request permission for cross-app tracking. Provider consent flows, such as connecting a Google Calendar account, remain in the web service unless the app states otherwise.

Google API Services

Our application uses Google API Services, including Google Business Profile, Google Places API, and Google OAuth. We only request access to a Google account after you explicitly connect it, we only request the permissions described below, and you can disconnect at any time from your account settings. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Google Places API

We use Google Places API to provide location-based services, including:

• Business address autocomplete and validation
• Location search functionality
• Business listing verification

When you use these features, your search queries and selected locations are sent to Google. Google's use of this data is governed by Google's Privacy Policy.

Google Business Profile

If you connect your Google Business Profile, we request the business.manage permission. We use it only to manage the specific business location or locations you select, on your behalf, inside your NXTDIGITAL dashboard. With this permission we:

• List the Business Profile accounts and locations you manage, so you can choose which one to connect
• Read your business information, such as name, address, phone number, hours, categories, and description
• Update that business information when you request a change from your dashboard
• Read customer reviews and ratings, and publish replies that you write or approve
• Create, schedule, and publish Business Profile posts and photos that you provide
• Read profile performance metrics, such as views, searches, and customer actions, to show your reporting

We store an encrypted Google access and refresh token so these features keep working without asking you to reconnect. We never use this access to view or change a business you did not connect, and we never sell or share this data. Disconnecting in your settings deletes the stored tokens, and you can also revoke access at any time from your Google Account permissions page.

Google Sign-In

When you connect a Google account we also receive the basic profile information Google provides with sign-in:

• Your name and email address
• Your Google profile picture (if available)
• Your Google account identifier

We use this information solely to identify the connected account and to show you which Google account is linked. We do not access your Gmail messages, your Google Drive files, your contacts, or your photos.

Administrator Google Connections

Separately from customer accounts, NXTDIGITAL staff may connect a company-owned Google account to operate the platform. These connections are made by our own administrators, never by customers, and are used only to run services on your behalf:

• Google Search Console and Site Verification: verifying the websites we build for you and submitting them to Google Search so they can be indexed
• Google Calendar: creating and updating scheduled meetings booked through our platform

These credentials belong to NXTDIGITAL, are stored encrypted, and give us no access to your personal Google account.

Limited Use Disclosure

NXTDIGITAL' use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use the data to provide and improve our services
• We do not transfer data to third parties except as necessary to provide our services
• We do not use the data for advertising purposes
• We do not allow humans to read the data unless required for security purposes, legal compliance, or with your explicit consent

Facebook (Meta) Platform

Our application integrates with Facebook (Meta) Platform services. Our use of Facebook data complies with Meta Platform Terms and Meta Developer Policies.

Facebook Conversions API

We use Facebook Conversions API (CAPI) for server-side event tracking to measure the effectiveness of our advertising on Facebook and Instagram. This may include:

• Hashed email addresses and phone numbers (never shared in plain text)
• Browser and device information
• IP addresses (used for matching, then discarded)
• Event data (page views, form submissions, purchases)

This data is used to attribute conversions to Facebook ads, optimize ad delivery, and build custom audiences. You can manage your Facebook ad preferences at Facebook Ad Preferences.

Connected Facebook Pages and Instagram Accounts

If you connect a Facebook Page and its linked Instagram professional account, we may access:

• Your public profile (name, profile picture)
• The Pages you manage and the Page or Instagram account you choose to connect
• Page and Instagram account identifiers, names, profile details, posts, and media metadata
• Public comments and related engagement on content owned by the connected account
• Access tokens and permission status needed to provide the connected features

We use this information to show the selected accounts in NXTDIGITAL, subscribe the selected Page to comment notifications, identify the post a comment belongs to, and help the customer manage or reply to comments. We do not access your friends list or post to a personal timeline. You can disconnect an account in NXTDIGITAL or revoke access through Facebook Settings > Apps and Websites.

AI-Assisted Comment Replies

When comment-reply features are enabled, the text of a public comment and limited business context may be processed by our AI service provider to create a suggested reply. New customer accounts default to draft mode, where the customer can review, edit, approve, or skip the reply. Customers may separately choose automatic posting. Replies are posted only to the Facebook Page or Instagram professional account the customer connected and authorized.

We use service providers including Vercel for application hosting, Supabase for encrypted data storage, and Anthropic for AI-assisted reply generation. They process this information on our behalf to provide the requested service and may not use it for their own independent purposes.

Data Deletion

To request deletion of data we have received from Meta, follow our account deletion instructions. You may also disconnect Facebook or Instagram from NXTDIGITAL to stop future access. We will process verified deletion requests within 30 days, subject to legal retention obligations.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send you technical notices, updates, and support messages
• Respond to your comments, questions, and requests
• Monitor and analyze trends, usage, and activities
• Detect, investigate, and prevent fraudulent transactions and abuse
• Personalize and improve your experience
• Measure advertising effectiveness (via Facebook CAPI)

Data Sharing and Disclosure

We may share your information in the following circumstances:

• Service Providers: With vendors and service providers who need access to perform services (payment processors, hosting providers, analytics services)
• Legal Requirements: If required by law, regulation, or legal process
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you have given us permission to share

We do not sell your personal information to third parties.

SMS and Text Messaging

If you give us your mobile number and agree to receive text messages, we use it only to send the messages you asked for: your onboarding link, updates about your website and account, appointment and follow-up reminders, and replies from the person handling your account.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. We do not sell, rent, or share your mobile phone number or your consent to receive text messages with anyone. Mobile numbers are disclosed only to the telecommunications provider that delivers the message on our behalf, strictly for that purpose, and never for their own marketing.

Consent to receive text messages is never a condition of buying anything from us. You can decline and still use every part of our service.

• Message frequency varies based on your activity with us.
• Message and data rates may apply.
• Reply STOP to any message to opt out. Reply HELP for help.
• You can also opt out by emailing support@thenxtdigital.com.
• Carriers are not liable for delayed or undelivered messages.

We keep a record of when and how you gave consent, and of any opt-out, so we can honour your choice and show that we did.

Cookies and Tracking Technologies

We use cookies, pixels, and similar technologies to collect information about your browsing activities. These technologies help us:

• Remember your preferences and settings
• Understand how you use our services
• Measure the effectiveness of our marketing
• Deliver relevant advertising

You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of our services.

Data Security

We implement appropriate technical and organizational measures to protect your information, including encryption in transit and at rest, access controls, and regular security assessments. However, no method of transmission over the Internet is 100% secure.

Data Retention

We retain your information for as long as your account is active or as needed to provide you services. We may retain certain information for legitimate business purposes or as required by law. Scan results from our Listing Scanner are stored temporarily and may be deleted after 90 days.

Your Rights and Choices

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Object to or restrict certain processing
• Data portability
• Withdraw consent where applicable

To exercise these rights, please contact us at pete@thenxtdigital.com.

California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete, and the right to opt-out of the sale of personal information. We do not sell personal information.

Children's Privacy

Our services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn we have collected information from a child under 13, we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

NXTDIGITAL
Email: pete@thenxtdigital.com
Naples, Florida, USA