Privacy Policy

Last Updated: October 22, 2026

1. Introduction

At Nextool, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI learning platform.

By using Nextool, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Information You Provide

We collect information you provide directly to us, including:

  • Account information (name, email address, password)
  • Profile information and preferences
  • Payment and billing information
  • Communications with our support team
  • Feedback, survey responses, and reviews
  • Onboarding responses and learning goals

2.2 Automatically Collected Information

When you use Nextool, we automatically collect:

  • Learning progress and course completion data
  • Time spent on lessons and challenges
  • Device information (type, operating system, browser)
  • IP address and approximate location
  • Usage patterns and feature interactions
  • Log data and error reports
  • Cookies and similar tracking technologies

2.3 Third-Party Information

We may receive information from third-party services you connect to your account, such as payment processors and analytics providers.

3. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve our services
  • Personalize your learning experience and recommendations
  • Process payments and manage subscriptions
  • Send important updates, notifications, and receipts
  • Respond to your inquiries and provide customer support
  • Generate certificates and track achievements
  • Analyze usage patterns to improve our platform
  • Detect and prevent fraud, abuse, and security issues
  • Comply with legal obligations
  • Send marketing communications (with your consent)

We use your data to create a better, more personalized learning experience while maintaining the highest standards of privacy and security.

4. Data Sharing and Disclosure

4.1 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4.2 Service Providers

We may share your information with trusted service providers who assist in:

  • Hosting and infrastructure (Supabase, cloud services)
  • Payment processing (Stripe or similar)
  • Email delivery and communications
  • Analytics and performance monitoring
  • Customer support tools

These providers are contractually obligated to protect your data and use it only for the services they provide to us.

4.3 Legal Requirements

We may disclose your information if required by law or in good faith belief that such action is necessary to:

  • Comply with legal obligations or court orders
  • Protect and defend our rights or property
  • Prevent or investigate fraud or security issues
  • Protect the safety of users or the public

4.4 Business Transfers

If Nextool is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and the choices you have.

5. Data Security

We implement comprehensive security measures to protect your personal information:

  • Industry-standard encryption for data in transit and at rest
  • Secure authentication and password hashing
  • Regular security audits and vulnerability assessments
  • Access controls and employee training
  • Automated backup systems
  • Compliance with data protection regulations

While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but continuously work to improve our protections.

6. Data Retention

We retain your information for as long as necessary to:

  • Provide our services and maintain your account
  • Comply with legal obligations
  • Resolve disputes and enforce agreements
  • Maintain business records

When you delete your account, we will delete or anonymize your personal data within 90 days, except where we are required to retain it by law. Course certificates you've earned may be retained for verification purposes.

7. Your Privacy Rights

You have the following rights regarding your personal information:

  • Access: Request a copy of your personal data
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your personal data
  • Portability: Request your data in a portable format
  • Opt-out: Unsubscribe from marketing communications
  • Objection: Object to certain data processing activities
  • Restriction: Request limitation of data processing

To exercise these rights, contact us through the app's settings or email support@nextool.academy. We will respond within 30 days.

8. Cookies, Analytics and Advertising Tools

We use cookies and similar technologies (such as local storage) to keep you signed in, remember your preferences, understand how the platform is used and measure our advertising.

8.1 Strictly necessary

Your sign-in session (Supabase), your language and theme, and your cookie choice are stored on your device because the service cannot work without them. Stripe sets cookies on the checkout page to prevent fraud. These do not require consent.

8.2 Analytics and advertising tools

With your consent (see 8.3), the following third-party processors receive usage data from our website:

  • Google Analytics 4 (Google): measures visits, page views and sign-ups.
  • Google Ads (Google): measures which ads lead to sign-ups and purchases.
  • Microsoft Clarity (Microsoft): heatmaps and session recordings that help us find usability problems. Clarity may also set Microsoft Advertising (Bing) cookies.
  • Amplitude (Amplitude): product analytics and session replay of a sample of visits.
  • PostHog (PostHog, EU hosting): product analytics for the sign-up and learning funnel.

8.3 Your choice

If you are in the European Economic Area, the United Kingdom or Switzerland, we ask for your consent before any tool in 8.2 sets cookies or receives data that identifies you. Until you accept, Google Analytics runs in a cookieless mode (Google Consent Mode) that sends no cookies or advertising identifiers, and the other tools are not loaded. Outside these regions the tools run by default and you can opt out.

You can accept, reject or change your choice at any time with the “Cookie settings” link at the bottom of the page. You can also block or delete cookies in your browser settings; this may limit some features.

8.4 First-party usage statistics

We also record basic visit statistics in our own database (pages visited, referrer, campaign parameters, device and browser type, IP address and country) to operate and improve the service, based on our legitimate interest. This does not use third-party cookies.

9. Children's Privacy

Nextool is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

If we discover that we have collected information from a child under 13, we will delete it immediately. If you believe we have collected information from a child under 13, please contact us at support@nextool.academy.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.

We ensure appropriate safeguards are in place to protect your information during international transfers, including standard contractual clauses and data processing agreements.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

  • Right to know what personal information is collected
  • Right to know if personal information is sold or disclosed
  • Right to opt-out of the sale of personal information
  • Right to deletion of personal information
  • Right to non-discrimination for exercising your rights

We do not sell your personal information. To exercise your CCPA rights, email us at support@nextool.academy.

12. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation:

  • Right to access your personal data
  • Right to rectification of inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to restriction of processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent
  • Right to lodge a complaint with supervisory authorities

We process your data based on your consent, contract performance, legal obligations, or legitimate interests.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Material changes will be communicated through:

  • Email notification to registered users
  • In-app notification
  • Prominent notice on our website

The "Last Updated" date at the top of this policy indicates when it was last revised. Continued use of our services after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

  • Email: support@nextool.academy
  • Help Center: Available in-app under Settings → Help & Support

We are committed to resolving privacy concerns promptly and transparently.