Privacy Policy

NextGen Engine ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy applies to all users of our platform, website, and services, including social media automation, AI-powered analytics, customer support automation, and all connected integrations.

We only access Meta account information (Instagram, Facebook, WhatsApp) after you have explicitly authorized the connection through Meta's official OAuth flow. We never sell, rent, or trade your personal data to third parties for marketing purposes.

We collect information necessary to provide and improve our services. Below are the categories of information we collect:

• Account Information

  When you create an account, we collect your name, email address, password (stored in hashed form), phone number, and account preferences. This information is used to identify you, manage your account, and provide customer support.

• Business Profile

  We collect your business name, industry, company size, logo, brand colors, and business description. This helps us tailor the platform to your needs and generate more relevant AI content.

• Connected Meta Accounts (Instagram, Facebook, WhatsApp)

  With your explicit permission, we access your connected Meta Business accounts to perform actions such as reading messages, posting content, retrieving insights, and managing comments. We only request permissions that are necessary for the features you use. Access is always revocable at any time.

• Uploaded Files (Excel)

  We process Excel and CSV files you upload for analysis, reporting, and AI-driven insights. File content is processed temporarily and is not used to train our AI models unless explicitly permitted.

• AI Conversations

  We store your chat history with our AI assistant (NextGen AI) to provide continuity, improve responses, and maintain conversation context. Conversation data may also be used for service improvement and analytics.

• Website URLs Provided by Users

  If you provide a website URL, we may crawl and index its content to enable website-aware AI responses. This data helps our AI understand your business and answer customer questions more accurately.

• Usage Analytics

  We collect data about how you interact with our platform, including pages visited, features used, session duration, and performance metrics. This helps us improve the user experience and optimize platform functionality.

NextGen Engine integrates with Meta's platforms (Facebook, Instagram, and WhatsApp Business) to deliver real value for your business. Our use of Meta platform data is governed by Meta's Platform Terms and our Privacy Policy:

• Explicit Authorization Only: We only access your Meta account data after you have explicitly authorized the connection through Meta's OAuth 2.0 flow. You can revoke access at any time through your Meta account settings or through our platform.
• Purpose Limitation: Data accessed from Meta is used solely for the features you have enabled, such as content scheduling, DM/comment automation, analytics, and customer support. We do not use this data for unrelated purposes.
• Data Deletion on Disconnect: When you disconnect a Meta account from NextGen Engine, we will delete all associated data, including stored messages, post history, insights, and cached analytics, within a reasonable timeframe.
• Compliance: We comply with Meta's Data Use Policy and Platform Terms. Our systems use Meta's official Graph API and Webhooks to ensure secure and compliant data exchange.
• No Data Sale: We never sell, rent, or share your Meta platform data with third parties for marketing or advertising purposes.

NextGen Engine uses artificial intelligence to provide personalized business automation, analytics, and customer support. Here is how your data is processed:

• AI Model Processing: Your data (including uploaded files, website content, and conversation history) may be processed by AI models to generate responses, insights, and automations. Depending on your configuration, we use third-party AI providers (such as OpenAI) or locally hosted models (such as Ollama).
• OpenAI Integration: If OpenAI is enabled for your account, relevant data is transmitted to OpenAI's API in accordance with OpenAI's privacy policy and our data processing agreements. We do not use your data to train OpenAI's general models unless explicitly agreed.
• Ollama (Local AI): If you choose to use Ollama or other local AI models, your data may be processed on your own infrastructure or servers designated by you. In such cases, data processing occurs outside of NextGen Engine's infrastructure, and you are responsible for the security and privacy of that data.
• Data Minimization: We implement data minimization principles, only sending the minimum necessary data to AI providers to fulfill your request.

We implement industry-standard security measures to protect your data:

• Encryption: All data is encrypted in transit using HTTPS/TLS (SSL 1.2+). Sensitive data at rest is encrypted using AES-256 standards where applicable.
• Access Controls: Access to your data is strictly limited to authorized personnel who require it to perform their job functions. All access is logged and monitored.
• Infrastructure: Our platform is hosted on secure cloud infrastructure with DDoS protection, network isolation, and regular security audits.
• Regular Backups: We perform regular encrypted backups to prevent data loss. Backups are stored securely with access restricted to essential operations personnel.
• Vulnerability Management: We maintain a vulnerability management program and promptly address security issues identified through internal testing or responsible disclosure.

NextGen Engine uses cookies and similar tracking technologies to enhance your experience:

• Essential Cookies: Required for the platform to function, including session management, authentication, and security tokens.
• Functional Cookies: Used to remember your preferences, settings, and dashboard customizations.
• Analytics Cookies: Used to understand how you interact with the platform, identify areas for improvement, and analyze feature usage.
• Marketing Cookies: Used to measure campaign effectiveness and deliver relevant content. These can be disabled through your account settings.
• You can manage or disable non-essential cookies through your browser settings. Disabling certain cookies may affect platform functionality.

You have full control over your data. You may exercise the following rights at any time:

• Access: Request a copy of all personal data we hold about you. We will provide this data in a machine-readable format within 30 days of your request.
• Correction: Update or correct any inaccurate or incomplete personal information through your account settings or by contacting support.
• Deletion: Request permanent deletion of your account and all associated data. This includes all personal information, conversation history, uploaded files, and connected integrations. Deletion requests are processed within a reasonable timeframe.
• Disconnect Social Accounts: Disconnect Meta, Instagram, Facebook, and WhatsApp accounts at any time. Upon disconnection, we will delete all associated data from our systems.
• Data Portability: Request your data in a portable format to transfer to another service provider.

We retain your data only as long as necessary to provide our services and comply with legal obligations:

• Account Data: Retained for the duration of your active account plus 90 days after account closure for legal and audit purposes.
• Conversation History: Retained while your account is active. Deleted within 30 days of account deletion request.
• Uploaded Files: Processed temporarily and deleted within 30 days of upload unless stored in your account for ongoing use.
• Analytics Data: Retained for up to 24 months for service improvement and trend analysis. Aggregated, anonymized analytics may be retained longer.
• Legal Compliance: If required by applicable law, we may retain certain data beyond the periods stated above to comply with subpoenas, court orders, or government investigations.

NextGen Engine is a business-to-business platform and is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a child, we will take immediate steps to delete such information. If you believe a child has provided us with personal information, please contact us immediately.

NextGen Engine operates globally, and your data may be transferred to and processed in countries other than your own. We ensure that all international data transfers are conducted in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and similar frameworks. When transferring data outside the European Economic Area (EEA), we implement appropriate safeguards such as Standard Contractual Clauses (SCCs) and adequacy decisions.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make significant changes, we will notify you by:

• Posting the updated Privacy Policy on this page with a revised "Last Updated" date.
• Sending an email notification to the address associated with your account.
• Displaying a prominent notification within the NextGen Engine platform.

We encourage you to review this Privacy Policy periodically. Your continued use of NextGen Engine after changes become effective constitutes your acceptance of the revised policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to us: