Privacy Policy

1.1 Information You Provide

• Account Information: We collect your email address when you register for an account through Supabase authentication.
• Integration Data: When you connect third-party accounts (such as Google Ads, Meta, etc.), we request read-only access to retrieve your marketing and advertising data.
• Uploaded Content: In certain cases, based on individual client agreements, you may have the ability to upload data or files.

1.2 Information Collected Automatically

We do not use cookies, tracking pixels, or analytics services to monitor your usage of the Service at this time.

1.3 Information from Third Parties

When you authorize connections to third-party platforms (Google Ads, Meta, etc.), we receive data from those platforms in accordance with your authorization and their respective privacy policies.

3.1 Within Our Organization

Your data may be accessed by employees of The Next Practice LLC for the purpose of providing marketing services as specified in your client agreement with us.

3.2 Service Providers

We share information with third-party service providers who perform services on our behalf:

• Supabase: Authentication and database services (data stored in US region)
• Vercel: Application hosting
• Resend: Email delivery services
• Third-Party Platforms: Google Ads, Meta, and other platforms you authorize us to access

These service providers are contractually obligated to use your information only to provide services to us.

3.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

3.4 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5.1 Access and Deletion

You may request that we delete your account data, including your email, password, and any third-party data connections. Contact us at contact@thenextpractice.com to submit a deletion request.

5.2 Third-Party Connections

You may disconnect third-party integrations at any time through the Service. Note that disconnecting an integration will prevent us from displaying data from that platform.

5.3 Export

You may export your data through the Service's export functionality where available.

7.1 For Users in the European Economic Area (EEA) and United Kingdom

If you are located in the EEA or UK, you have certain rights under the General Data Protection Regulation (GDPR), including:

• The right to access your personal data
• The right to rectify inaccurate personal data
• The right to erase your personal data
• The right to restrict processing of your personal data
• The right to data portability
• The right to object to processing
• The right to withdraw consent

To exercise these rights, contact us at contact@thenextpractice.com.

Our lawful basis for processing your data is primarily the performance of our contract with you (your client agreement) and our legitimate interests in providing and improving the Service.

7.2 For California Residents

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have specific rights regarding their personal information:

• Right to Know: You can request information about the categories and specific pieces of personal information we've collected about you.
• Right to Delete: You can request deletion of your personal information.
• Right to Opt-Out: We do not sell your personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise these rights, contact us at contact@thenextpractice.com.