Privacy Policy | NextX

1. Information we collect

NextX JSC ("NextX", "we") collects the information you provide directly when you sign up, use our services or contact support, including:

Identity information: full name, email address, phone number
Business information: company name, industry, size
Usage data: access logs, features used, device, IP address
Content you enter into the system (contacts, deals, notes)

2. How we use information

We use information to:

Provide, operate and improve the NextX services
Verify identity and secure your account
Send transaction notices and technical support messages
Send marketing information (only with your consent)
Analyse and improve the user experience
Comply with legal obligations

3. Sharing information

NextX does not sell your personal data. We only share information with:

Service providers: technical partners that help us operate (hosting, email, payments) under strict confidentiality agreements
Public authorities: when there is a valid legal request
Business transfers: in a merger or acquisition — you will be notified in advance

4. Data security

We apply appropriate technical and organisational measures to protect your data, including TLS/HTTPS encryption, encryption at rest (AES-256), role-based access control, full audit logs and regular backups.

5. Your rights

You have the right to:

Access and receive a copy of your personal data
Request correction of inaccurate information
Request deletion of your data (subject to legal exceptions)
Withdraw marketing consent at any time
Export all your data when you cancel your subscription

To exercise these rights, contact: support@nextx.vn

6. Cookies

We use cookies that are necessary to run the service (session, authentication) and analytics cookies (anonymous, optional). You can refuse analytics cookies in your browser settings.

7. Data retention and deletion

Data is kept for as long as your contract is active plus 30 days for export. It is then permanently deleted from our systems unless the law requires us to keep it.

8. Changes to this policy

We will notify you at least 30 days before any material change. Continuing to use the service after that date means you accept the updated policy.

9. Data from Google services

Some NextX features let you voluntarily connect your own Google account via OAuth. We request only the scopes needed for the features you turn on, and use the data solely to provide those features to you.

9.1. What we access and why

Google Sign-In (email, name, profile picture): to create and authenticate your NextX account.
Google Calendar (calendar.events scope): two-way sync of appointments and meetings between NextX Calendar & Meetings (NextX AI Office, customer appointments in NextX AI CRM) and your own Google Calendar — events created in NextX appear in Google Calendar and vice versa; for online appointments NextX creates a Google Meet link for that event.
Google Meet (meetings.space.readonly scope, read-only): to read the Meet conference attached to appointments created by NextX, to show meeting status and attach meeting notes to the right appointment.
YouTube (youtube.force-ssl scope): when a business connects its YouTube channel to NextX AI Chat, NextX lists the channel's videos and comments in the shared inbox and posts a reply only when the business's staff click send.
Google Analytics, Google Search Console, Google Ads (read-only): to show charts and performance reports about your own websites and campaigns in your NextX dashboard. NextX never changes any configuration, campaign or setting in these accounts.
Google Drive and Google Sheets (drive.file and spreadsheets.readonly scopes): when you pick a spreadsheet of leads to sync into NextX AI CRM, NextX accesses only the file you selected through Google's file picker and only reads its data. NextX never views, edits or deletes any other file in your Google Drive.

9.2. Storage, sharing and protection

Google access and refresh tokens are encrypted at rest with AES-256 and used only by NextX servers to call Google APIs on your behalf; they are never shown to anyone.
NextX does not sell or share your Google data with third parties (other than hosting providers under confidentiality agreements, or when required by law), and does not use it for advertising, including personalised advertising.
NextX does not use your Google data to train generalised artificial intelligence or machine-learning (AI/ML) models.
NextX staff do not read your Google data unless you consent for a specific support request, it is necessary for security purposes (investigating abuse), or it is required by law.

9.3. Revoking access and deleting data

You can disconnect at any time inside NextX (the Disconnect button in Calendar & Meetings, or removing the YouTube channel on the Channels page) or revoke access at myaccount.google.com/permissions. On disconnection, NextX revokes the grant with Google and deletes the tokens immediately — from that moment NextX can no longer access your Google data. To also delete data already synced (calendar events, YouTube comments), email support@nextx.vn; NextX deletes it within 30 days of your request.

NextX's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

10. NextX mobile apps

This section covers the NextX apps on iOS and Android (NextX AI, NextX AI DMS, NextX AI Operator and other NextX apps). An app asks for a device permission only when you use a feature that needs it, and you can turn it off at any time in your device settings.

10.1. Data the apps use

Account: your email and password to sign in, sent over an encrypted connection. The session is stored in the device's secure storage (Keychain on iOS, Keystore on Android).
Face ID / fingerprint: the app only asks the operating system to confirm it is you for a quick unlock. NextX never receives or stores your face or fingerprint data.
Camera, photos and files: only when you choose to take or pick a photo or file to attach (support tickets, receipts, store photos…). Files are uploaded to NextX servers and can be seen only by people with access in your organization.
Location: only apps with location features ask for it, for example NextX AI DMS when a field employee checks in or visits a store during a work shift. NextX AI Operator does not use location.
Microphone: only during calls or recordings in apps with calling features (NextX AI).
Push notifications: the device's notification token, delivered through Apple or Google notification services, to tell you about new work (tickets, approvals, appointments…). You can turn them off in your device settings.
Crash and performance reports: when the app crashes or runs slowly it sends technical details (device model, OS and app version, error logs) and aggregate usage data through Google's measurement services, used only to fix bugs and improve the app.

10.2. What the apps do not do

No ads, and your data is never used for personalized advertising. NextX AI Operator does not read the device advertising ID.
No tracking across apps or websites owned by other companies.
No reading of contacts, messages or photos you did not choose.
No selling of data collected by the apps.

10.3. Deleting your data and account

Uninstalling an app removes the data stored on the device. To delete your account and the data on our servers, email support@nextx.vn or ask your organization's administrator; NextX completes the request within 30 days. NextX AI Operator accounts are issued by NextX to its staff and are revoked when an employee leaves.

11. Contact

If you have any questions or privacy requests, please contact:

NextX Future Joint Stock Company (NextX JSC)
Support & privacy email: support@nextx.vn
Hotline: +84 902 243 822 — 1900 61 29

Hanoi office:
6th floor, Sudico Building, Me Tri Street, Tu Liem Ward, Hanoi, Vietnam

Ho Chi Minh City office:
69/2 Phan Dinh Phung, Tan Phu Ward, Ho Chi Minh City, Vietnam