Privacy Policy

This Privacy Policy explains how Next Automate AI Solutions LLC (“Next Automate”, “we”, “us”) handles personal data when you visit our website or use NEXT BOSS (Business Operating System Suite). Please read it together with our Terms of Service.

1. Who we are

NEXT BOSS is a business-to-business software-as-a-service platform for SMEs and service companies. It covers CRM and sales pipeline, clients, projects, invoices, quotes and payments, support tickets, a client portal, a knowledge base, an AI assistant (“Bossy”), conversations (email, WhatsApp and Instagram), and HR and finance modules.

NEXT BOSS is operated by Next Automate AI Solutions LLC, Dubai, United Arab Emirates. The service is available at app.next-boss.comand at customer workspace addresses (<workspace>.next-boss.com). Our website is www.next-boss.com and our documentation is at docs.next-boss.com.

Our role: controller or processor

• Workspace content.For data that our customers put into their NEXT BOSS workspace (for example, their clients, contacts, leads, projects, invoices, tickets, documents and messages), the customer is the controller and Next Automate acts as the customer's processor. We process that data on the customer's instructions to provide the service. If you are a contact of one of our customers, please direct privacy requests to that customer first; we will assist them.
• Account and website data. For data about our own account holders and website visitors (for example, sign-in details, billing contacts and access requests), Next Automate is the controller.

2. Data we collect

Account data

Name, business email address, phone number (if provided), company name, role, workspace membership, authentication details and settings such as two-factor authentication preferences.

Workspace content

Information your organisation enters or uploads into NEXT BOSS, such as client and contact records, leads and opportunities, projects, tasks, invoices, quotes, payment records, support tickets, knowledge articles, documents, HR and finance records, notes, and prompts and responses exchanged with the Bossy assistant.

Meta messaging data (WhatsApp and Instagram)

If a workspace connects a WhatsApp Business or Instagram account, we receive messages and profile information (such as name, username, phone number and profile picture, as made available by Meta) sent to or from that account. This data is stored only in the workspace that connected the account and is used only to provide the inbox and lead features. It is never sold and never used for advertising.

Payment information

Where payments are enabled, card payments are handled by Stripe. We do not store full card numbers. We may receive limited information from Stripe, such as the payment status, amount, and card brand or last four digits.

Technical logs

When you use the service, our systems record technical information such as IP address, browser and device type, timestamps, pages or features accessed, and error logs. We also keep audit logs of important actions inside a workspace (for example, who changed a record and when).

3. How we use data

• To provide, operate and maintain NEXT BOSS and each customer's workspace.
• To authenticate users, secure accounts and prevent fraud or misuse.
• To provide AI assistant features when you choose to use them.
• To send service emails, such as sign-in, notification and billing messages.
• To process payments and manage subscriptions, where applicable.
• To provide customer support and respond to requests.
• To troubleshoot, monitor performance and improve the service.
• To comply with legal obligations and enforce our terms.

4. Legal bases

Where the law requires a legal basis for processing, we rely on:

• Contract — to provide the service to our customers and their users.
• Legitimate interests — to secure, maintain and improve the service and to communicate with business contacts, balanced against your rights.
• Legal obligation — for example, keeping financial records required by law.
• Consent — where we ask for it; you can withdraw consent at any time.

For workspace content, the customer (as controller) is responsible for having a valid legal basis for the data it puts into NEXT BOSS.

5. Sharing and sub-processors

We do not sell personal data. We share data only with service providers that help us run NEXT BOSS, when required by law, or in connection with a merger, acquisition or sale of assets (subject to this policy). Our current sub-processors and infrastructure providers are:

Within a workspace, data is visible to that workspace's authorised users according to their roles. Client portal users see only records shared with their client account.

6. International transfers

Our service providers may store or process data outside the United Arab Emirates. Where data is transferred internationally, we take steps to protect it, such as using providers that offer contractual data protection commitments, and applying the security measures described below.

7. Retention

We keep data for as long as the workspace or account is active. After a verified deletion request or account closure, we delete or anonymise the data within 30 days, except where the law requires us to keep it longer (for example, invoices and other financial records). Backups roll off automatically within 90 days.

8. Security

We use measures designed to protect your data, including:

• Encryption in transit (HTTPS with HSTS).
• Role-based access control.
• Isolation between customer workspaces.
• Audit logs of important actions.
• Optional two-factor authentication.
• Short-lived links for file access.

No system is completely secure, and we cannot guarantee absolute security.

9. Your rights

Depending on where you are and the laws that apply to you, including the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data.
• Portability — receive your data in a structured, commonly used format.
• Object to or restrict certain processing.

Where the EU or UK General Data Protection Regulation (GDPR) applies to you, we respect the rights it gives you, including the right to lodge a complaint with your data protection authority.

How to exercise your rights

Email support@nextautomateai.comfrom the email address linked to your account. We may need to verify your identity before acting on a request. If your data is held in a customer's workspace, we will pass your request to that customer or help them respond. For deletion specifically, see our User Data Deletion Instructions.

10. Children

NEXT BOSS is a business service and is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

11. Cookies

We use only strictly necessary cookies:

We do not use analytics or advertising cookies.

12. Changes to this policy

We may update this policy from time to time. We will post the updated version on this page with a new effective date and, for material changes, notify account holders by email or in the product.

13. Contact

Next Automate AI Solutions LLC, Dubai, United Arab Emirates.
Privacy questions and requests: support@nextautomateai.com