The short version
- We collect what we need to run Nexthand for you, and nothing for advertising.
- We never sell your personal information or use it to show you ads.
- Your content is not used to train AI models.
- Nexthand asks for your OK before it sends, books or buys anything in your name.
- You can disconnect any app, delete what Nexthand remembers, or delete everything. See Delete your data.
1. Information we collect
Information you give us
- Waitlist details: your name, email address, company (optional), phone type, and anything you tell us you'd hand off first.
- Account details: your name, email address and profile picture, and the sign-in method you choose.
- Your content: the requests, messages and voice input you send, the files you upload, notes, lists, routines, and anything you ask Nexthand to remember.
- Messages to us: what you send when you contact support or make a privacy request.
Information from sign-in providers
If you sign in with Google, Microsoft, Apple or Facebook, that provider shares basic profile information with us: usually your name, email address, profile picture and a unique account ID. We use it only to create and secure your account. We do not get your password for those services.
Information from apps you connect
You can choose to connect apps such as Gmail, Google Calendar, Google Drive, GitHub and smart home services. When you do, Nexthand can access the data covered by the permissions you approve, such as email messages, calendar events, files or device status, only to do the tasks you ask for. You can see and revoke each connection at any time.
Information collected automatically
- Usage and device information: app version, device type, operating system, approximate location from your IP address (country or region), and push notification tokens so we can send you alerts.
- Task activity: the steps Nexthand took, the tools it used, the websites its browser visited for you, and how much each task used.
- Logs: technical logs for reliability and security. We remove secrets and message content from these logs.
The nexthand.ai website does not use advertising or analytics cookies. The app uses only the cookies and local storage it needs to keep you signed in and remember your settings.
2. How we use your information
- To provide Nexthand: understand your requests, carry out tasks, run routines, send notifications, and show your results.
- To ask for your approval before actions that leave your account, such as sending an email or message, booking or buying.
- To remember the preferences and facts you want Nexthand to keep, which you can review and delete.
- To keep the service secure, prevent abuse and fix problems.
- To contact you about your account, the waitlist, important changes and support requests.
- To meet legal obligations.
Where the GDPR or a similar law applies, we rely on: performing our contract with you (running the service), your consent (connected apps, which you can withdraw), our legitimate interests (security and improving reliability), and legal obligations.
3. Google user data
Nexthand's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In particular, data we receive from Google (for example Gmail, Calendar or Drive) is:
- used only to provide and improve the features you use in Nexthand;
- never used to serve ads, and never sold;
- never used to train generalized AI or machine learning models;
- not read by people, except with your explicit permission for specific items, when needed for security or to investigate abuse, or to comply with the law.
You can remove Nexthand's access at any time in the app or at myaccount.google.com/permissions.
4. AI processing
To answer you and plan tasks, Nexthand sends the relevant parts of your request and context to AI model providers through their business APIs. Depending on the model you choose, this can include providers such as Anthropic, OpenAI and Google. These providers process the data to return a response, and under their API terms they do not use it to train their models.
Tasks that need code, files or a web browser run in a private, isolated cloud workspace created for your task and shut down afterwards.
5. Who we share it with
We do not sell or rent your personal information. We share it only with service providers that help us run Nexthand, under contracts that limit their use of it to providing their service to us:
| Provider type | Purpose |
|---|---|
| Cloud hosting | Running our servers and storing data (for example Oracle Cloud, Amazon Web Services) |
| Website and network | Serving nexthand.ai and protecting it from attacks (Cloudflare) |
| AI model providers | Generating responses (for example Anthropic, OpenAI, Google), accessed through Vercel AI Gateway |
| Cloud workspaces | Running code and a private browser for your tasks (E2B) |
| App connections | Securely connecting the apps you choose (Composio) |
| Email delivery | Sending account, waitlist and support emails (SMTP2GO) |
| Push notifications | Delivering alerts to your phone (Apple, Google) |
When you approve an action, Nexthand sends what you approved to the recipient you chose, for example an email to a contact or a message to a seller. We may also disclose information if required by law, to protect the rights and safety of our users or others, or as part of a merger or acquisition, in which case we will tell you before your information becomes subject to a different policy.
6. How long we keep it
| Data | Kept for |
|---|---|
| Account and profile | Until you delete your account |
| Tasks, messages and files from tasks | 30 days after the task ends, then deleted automatically |
| Notes, lists, routines and memory | Until you delete them or your account |
| App connections | Until you disconnect the app or delete your account |
| Technical logs | 7 days |
| Waitlist details | Until you join, ask us to remove them, or we close the waitlist |
We may keep limited records longer when the law requires it, for example billing records, or to resolve disputes and prevent abuse.
7. Your choices and rights
- Control what Nexthand can do: connect or disconnect apps, and approve or decline any action that goes out in your name.
- Review memory: see what Nexthand remembers about you and delete any of it.
- Access and portability: ask for a copy of your personal information.
- Correction: ask us to fix information that is wrong.
- Deletion: ask us to delete your information.
- Objection and withdrawal of consent: object to certain processing, or withdraw consent at any time.
- Emails: unsubscribe from non-essential emails using the link in them.
Depending on where you live (for example the EU, UK or California), you may have these rights by law. We honor them for everyone. To make a request, email [email protected]. We will respond within 30 days and will not treat you differently for using your rights. If you are in the EU or UK, you can also complain to your local data protection authority.
8. Deleting your data
You can ask us to delete your account and all associated data at any time using the form on our Delete your data page, or by emailing [email protected] from the email address on your account. This also covers data we received through Google, Microsoft, Apple or Facebook sign-in. We confirm the request with you and complete it within 30 days.
9. Security
We protect your information with encryption in transit (HTTPS), access controls that keep each person's data separate, short-lived isolated workspaces for tasks, and logs that strip out secrets. Connection credentials for your apps are held by our connection provider and are never shown to the AI model. No system is perfectly secure, but we work to protect your data and will notify you and the authorities of a breach as the law requires.
10. International transfers
We and our providers may process your information in the United States and other countries. Where required, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses.
11. Children
Nexthand is not intended for children under 13, or under 16 in the European Economic Area and UK. We do not knowingly collect their information. If you believe a child has given us information, contact us and we will delete it.
12. Changes to this policy
We will update this page when our practices change and revise the effective date above. If a change is significant, we will tell you by email or in the app before it takes effect.
13. Contact us
Questions about this policy or your information: [email protected].