NEXTPERMISOS privacy policy

For questions about this policy, privacy or data requests, write to ikersk2@gmail.com. Businesses may also contact their Next workspace administrator.

• Account and business workspace data, including sign-in email, company name, settings and member permissions.
• Messages sent to the assistant, replies, dates, channels and data people voluntarily include in a conversation.
• Knowledge a company uploads or writes, including documents, frequently asked questions, links and content imported from Drive.
• When Google is connected, the authorizing account's email, granted permissions and refresh credentials stored in encrypted form.
• For appointments, the selected calendar, event identifiers and details needed to book, reschedule or cancel an appointment, such as title, customer name, date, time and time zone.
• Technical data needed to maintain sessions, protect the service and diagnose errors.

Data is used to operate accounts and business workspaces, retrieve knowledge for answering questions, show conversations to the team, handle requests for a human and perform features enabled by the company, such as calendar appointments.

Message content and relevant knowledge excerpts are sent to the AI provider configured for the workspace (for example, OpenRouter, OpenAI or DeepSeek) to generate a response. Providers may have different retention and usage rules; the administering company must review the terms of its chosen provider. Next does not use this content for targeted advertising.

The connection is optional, and each company authorizes its own Google account. NEXTPERMISOS uses this data for features the company requests within Next; it does not sell the data or use it for advertising.

Google Drive

The current authorization requests the drive.readonly permission. This permission technically allows viewing and downloading all Drive files belonging to the authorizing account. Next displays supported file formats (PDF, Word, Excel, Google Docs and Google Sheets) so an administrator can choose what to import. The selected file is downloaded or exported, its text is extracted, and that text is saved as a company knowledge source. Relevant excerpts may be sent to the AI provider described above when answering questions. Google's permission is broader than the file formats shown in the interface.

Disconnecting Drive removes the credential stored in Next for that company; previously imported sources remain in its knowledge until an administrator deletes them separately. Access can also be removed through the Google account's security settings.

Google Calendar

Authorization requests access to availability, calendar listings and viewing, creating, changing or deleting events on calendars owned by the connected account. The company chooses a calendar and can separately enable availability checks, booking, rescheduling and cancellation. Next stores basic details of the appointments it manages. Disconnecting Calendar revokes Google's access when the operation completes; existing Google Calendar events are not automatically deleted.

Google data is used only to provide the requested feature within Next. When a response uses Google data, OpenRouter requests are restricted to routes that declare they do not collect data. If DeepSeek is selected for a workspace using Drive or Calendar, Next does not send that information and refers the request to the team. With the OpenAI API, necessary content is sent to generate the response; the account must keep any explicit training data sharing option disabled. NEXTPERMISOS does not use Google data for advertising or training general models. This usage follows the Google API Services User Data Policy, including the Limited Use requirements.

Data is made available to authorized members of the business workspace and providers that enable the service: Google when an integration is connected; the AI provider chosen by the company to generate responses; the hosting and database provider; and the channel platform when the company enables WhatsApp, Instagram or another channel. These providers receive only the data necessary for the relevant feature and process it under their own terms and policies.

Knowledge sources can be deleted from the company's workspace. Conversations, messages and appointment records are retained in the business account while the workspace is active and according to operational and contractual needs. To request access, correction or deletion of data, contact the service and identify the company and affected data. The administering company may need to verify that the request belongs to its workspace.

Disconnecting an integration removes its connection credential from Next, but does not delete previously created sources or appointments, or data that remains in the external provider's account. To completely remove a Google authorization, also revoke it in your Google account.

Next uses HTTPS for its public service, access controls by company and role, and encrypts OAuth refresh credentials before storing them. No technical measure eliminates every risk; companies should limit member access and avoid uploading information that is unnecessary for the assistant.

Technical cookies or identifiers are used to sign in, maintain widget sessions and protect requests. If the service operator configures web analytics, navigation metrics may be collected using that tool; analytics can be disabled and are not necessary to use Google features.

This policy may be updated when features, providers or data practices change. The current version and its update date will be available on this page.