Privacy Policy

Last updated: August 2026

This policy explains what personal data we collect through this website, why we collect it, who else sees it, and what you can ask us to do with it.

1. Who we are

NextToAI LLC ("Next2AI", "we", "us") is a limited liability company formed in Florida, United States. For anything in this policy, the controller of your personal data is NextToAI LLC, 18117 Biscayne Blvd #1623, Miami, FL 33160.

This policy covers the website at next2.ai and the blog at blog.next2.ai. It does not cover data we process on behalf of a client under a services agreement. In that case the client decides what happens to the data and their own policy applies.

2. What we collect

What you type into the contact form. First and last name, business email, company or institution, country and your message. Phone number and job title are optional. The form carries one hidden field: where your visit came from, meaning the campaign parameters in the link you followed and the site that linked you. Nothing else.

What your browser sends. Like any website, ours receives your IP address, browser and operating system, the page you asked for and the page you came from. Our hosting provider keeps these in server logs for a short period as part of running and protecting the service.

Usage data, only if you accept. If you accept analytics cookies, Google Analytics records which pages you visit, roughly where you are (derived from your IP, which Google truncates), and basic device information. If you do not accept, none of this is collected.

We do not buy personal data from third parties, and we do not enrich what you send us with data from other sources.

3. Why we use it

  • To answer you. The contact form exists so we can reply. That is its only purpose, and we do not add you to a marketing list for having written to us.
  • To keep the site working and free of abuse. Server logs and the anti-bot check on the form.
  • To understand what is worth keeping. Aggregate analytics, only with your consent.
  • To meet legal obligations when we have to.

4. Legal basis (EEA and UK)

If you are in the European Economic Area or the United Kingdom, we rely on: your consent for analytics cookies; our legitimate interest in responding to enquiries, keeping the site secure and preventing abuse; and legal obligation where a law requires us to keep or disclose something. You can withdraw consent at any time without affecting what happened before.

5. Who else sees it

We keep this list short deliberately. We do not sell personal data, and we do not share it with advertising networks.

  • Google (Workspace). Messages from the contact form are delivered to our own mailboxes, which run on Google Workspace.
  • Google (Analytics). Only if you accepted. Google acts as our processor for this.
  • Cloudflare. Serves the site and runs the anti-bot check on the form.
  • Google Cloud. Hosts the blog.
  • Google Fonts. Typefaces are requested from Google's servers, which means your IP address reaches Google when a page loads.
  • Authorities, where a valid legal request obliges us.

If we are ever part of a merger, acquisition or sale of assets, personal data may transfer with the business. We would say so on this page before it takes effect.

6. International transfers

We are based in the United States and our providers operate globally, so your data will be processed outside your country. Where data leaves the EEA or the UK, the transfer relies on the European Commission's Standard Contractual Clauses or another mechanism permitted by law, as agreed with each provider.

7. How long we keep it

Contact-form messages stay in our mailboxes for up to four years from our last exchange with you, so we can pick up a thread later. The clock runs from the last message, not from the first: if we keep talking, it keeps resetting; if a conversation goes nowhere, it ends four years after it stopped.

Analytics data follows Google's retention setting, which we keep at 14 months. Server logs are short-lived. You can ask us to delete your messages sooner at any time, and we will unless a law requires us to keep them.

8. Security

The site is served over HTTPS, the form is protected against automated abuse, and the credentials that let our server send email are stored as secrets, never in the code. That said, no transmission over the internet can be guaranteed to be completely secure, and we cannot promise absolute security.

9. Your rights

Depending on where you live, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or hand it over in a portable format. Write to compliance@next2.ai and we will answer within the period the applicable law sets, which is one month under the GDPR.

We may need to confirm who you are before acting, which usually means replying from the address that contacted us. If you think we handled your request badly, you can complain to your local data protection authority, though we would rather you tell us first so we can fix it.

10. California residents

This section applies if you live in California, under the California Consumer Privacy Act as amended.

Categories we collect. Identifiers (name, email, IP address), professional information (company, job title) and internet activity (pages viewed), as described in section 2. We do not collect sensitive personal information as the CCPA defines it.

We do not sell or share your personal information in the sense the CCPA gives those words, and we have not done so in the past twelve months. We do not knowingly collect personal information from anyone under sixteen.

Your rights. You can ask what we have collected about you in the past twelve months, request a copy, ask us to correct or delete it, and you will not be treated differently for asking. Write to compliance@next2.ai. You may use an authorised agent, who will need to show they are acting for you.

11. Children

This site is aimed at businesses and is not directed at children. We do not knowingly collect data from anyone under sixteen. If you believe a child has sent us personal data, write to us and we will delete it.

Where we link out, the other site's own policy governs what happens there. We have no control over how those sites handle your data.

13. Changes

If we change this policy we will update the date at the top of this page. If a change matters to you, such as a new purpose or a new recipient, we will make it visible on the site rather than quietly editing the text.

14. Contact

compliance@next2.ai
NextToAI LLC
18117 Biscayne Blvd #1623, Miami, FL 33160