Privacy Policy for NextSay AI

Last Updated: September 10, 2026

NextSay AI ("we," "us," or "our") provides conversation assistance, transcription, note-taking, and related communication tools through our applications and services (the "Service"). This Privacy Policy explains what information we process, how we use it, and what controls you have.

1. Information We Collect

A. Account and Billing Information

• Account information: email address, authentication credentials, account identifiers, and email verification status.
• Profile information: nickname, optional role or goal context, and account preferences.
• Subscription information: plan status, entitlement state, and billing-related metadata needed to manage access to paid features.

B. Conversation and Session Data

• Microphone and conversation data: audio captured during supported sessions, together with resulting transcript and session content.
• Generated content: notes, summaries, follow-ups, Copilot cues shown during a sales or negotiation call (Next Move and Key Signals), Call Analysis output such as commitments, call metrics and the debrief, Ask NextSay responses, and related output. Guidance shown during a call is kept with that session so you can review what was suggested; it is capped per session.
• Roleplay practice data: briefs you create or generate for practice, the transcript of a practice conversation with a simulated counterpart, and the resulting debrief. A practice conversation is a simulation; it is not a recording of another person.
• User-provided context: session setup details such as conversation area, conversation type or context, contact or audience, company, offer, goal, watch-for items, scheduled date, title, and free-text notes you provide.
• Feedback: ratings, comments, and other feedback you submit about outputs or product behavior.

C. Recording Notice and Participant Consent

You are responsible for providing any required disclosure, notice, or consent before using NextSay AI to record, transcribe, monitor, or process a conversation. Recording, transcription, monitoring, and AI-assistance rules vary by location, participant, organization, platform, and conversation type. Do not use the Service where recording, transcription, monitoring, or AI processing is prohibited or requires approval you do not have.

D. Audio Files and Voice Data

• Audio recordings: audio recording files may be stored locally and, when Cloud Sync is enabled and upload succeeds, in cloud storage for cross-device playback, export, and recovery.

E. Technical and Usage Data

• Device, app, and platform information necessary to operate the Service.
• Usage and limit-tracking information, including session counts, monthly usage, and feature usage events.
• Website analytics data such as page views and referral information when analytics is enabled on our public website. Analytics cookies are optional and controlled through the cookie preferences banner.
• Support and diagnostic information needed to maintain security, reliability, and performance.

2. How Cloud Sync Works

NextSay AI separates account and operational data from user content. Cloud Sync is an account-level setting that controls whether supported user content is backed up and kept available across signed-in devices. Voice profile sync is a separate opt-in.

A. Account and Operational Data

Certain data is processed or stored on our systems because it is required to operate the Service for signed-in users, whether or not Cloud Sync is enabled:

• Account identity and authentication records.
• User profile metadata and selected preferences.
• Subscription and entitlement information.
• Usage, limit, and operational metadata needed to secure accounts, enforce tiers, prevent abuse, and support the Service.

B. User Content Synced When Cloud Sync Is Enabled

When Cloud Sync is enabled, supported user content may be synced to your account and made available across supported devices. This may include:

• Scheduled sessions and setup details.
• Completed sessions, transcripts, summaries, notes, Copilot cues, Ask NextSay messages, and follow-ups.
• Session metadata such as status, outcome, area, conversation type or context, scheduled time, duration, and related preferences.
• Audio recordings when cloud audio upload is supported and succeeds.

C. Turning Off Cloud Sync

Turning off Cloud Sync stops future cloud backup and cross-device updates for supported user content. It does not automatically delete content that was already synced to your account. To remove previously synced content, use deletion controls such as deleting a session, deleting cloud backup where offered, clearing all data, or deleting your account.

D. Deleting Synced Data

When you delete a session or choose a cloud deletion control, NextSay AI attempts to remove the corresponding cloud records and cloud audio where available. Other signed-in devices update after they sync. Local device copies, browser caches, exported files, and downloaded audio may remain until removed from that device. Some data may also remain temporarily in backups or be retained where required for legal, security, fraud-prevention, billing, or operational reasons.

E. Data That May Stay Local to Your Device

• Audio recording files and downloaded exports may remain on your device.
• Browser cache, temporary files, and offline data may remain on your device to support performance, reliability, or local playback.

3. How We Process Your Data

• Transcription: we process audio and related content to generate transcripts and related outputs.
• AI analysis: we process conversation content and context to generate Copilot, summaries, notes, and related features.
• Search and retrieval: for some factual requests, we may use search or retrieval services.
• Data minimization: we seek to limit processing to the data reasonably needed to provide the requested feature.

4. Service Providers

We use service providers to operate the Service. In line with common industry practice, we describe them by function rather than exposing internal implementation details. These categories may include:

• Identity and account providers: authentication, account security, and sign-in infrastructure.
• Cloud infrastructure providers: hosting, databases, storage, and operational infrastructure.
• Speech processing providers: transcription and related speech-to-text services.
• AI model providers: generation, summarization, Copilot, and related language-processing features.
• Billing and subscription providers: plan management, entitlement management, and payment-platform integration.
• Search and retrieval providers: factual web search or retrieval services used through our backend when applicable.
• Website analytics providers: aggregate measurement tools used to understand public website usage and improve pages.

We do not sell your data or share it with third parties for their own advertising or marketing purposes.

5. Google Workspace Data and Limited Use

When you connect Google Calendar, NextSay accesses your calendar events on a read-only basis (the calendar.events.readonly scope) for a single purpose: to help you prepare for a meeting you choose. NextSay reads the event you select — such as its title, description, time, and attendees — and uses AI to pre-fill a session brief. The data is processed live for that feature and is not copied into any training dataset.

Adding planned calls to your calendar (optional). If you choose to turn on calendar writing, NextSay can create a calendar entry for a call you have planned in NextSay, and update or remove that entry if you later change or delete the plan. This is limited in three ways. NextSay only creates and manages entries that it created itself — it does not modify or delete events created by you or anyone else. It writes only when you ask it to, for a specific plan. And it never adds guests or sends invitations to anyone else on your behalf; the entry is a reminder on your own calendar, not a meeting invite. You can turn calendar writing off at any time in Settings, and you can revoke NextSay's access entirely from your Google Account permissions page. Existing entries remain on your calendar and are yours to keep or delete.

AI processing of Workspace data. To build the brief, the content of the calendar event you select is sent to our third-party AI model provider through that provider's API. The provider does not use data submitted through its API to train or improve its models, and NextSay does not use, transfer, or sell Google Workspace data — raw, aggregated, anonymized, or derived — to create, train, or improve any foundational or generalized artificial intelligence or machine learning model.

Limited Use. NextSay's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We only use Google Workspace data to provide or improve the specific user-facing features you request, we do not transfer or sell it except to provide those features, to comply with law, or in connection with a merger or acquisition, and we do not use it for advertising.

6. How We Use Your Information

• To provide transcription, Copilot, note-taking, and related features.
• To create, secure, and maintain your account.
• To manage subscriptions, limits, and plan access.
• To sync or store your content across supported devices and service surfaces when Cloud Sync is enabled.
• To improve product reliability, performance, and feature quality.
• To investigate abuse, fraud, security incidents, and legal compliance issues.

7. Your Controls and Rights

• Product controls: the Service may provide settings that let you manage Cloud Sync, voice profile sync, deletion, and other data-related behavior.
• Session and content deletion: you may be able to delete sessions or other user-created content. Deletion attempts to remove local and cloud copies where available, but downloaded files and device/browser caches may need to be removed locally.
• Account deletion: if you can still access your account, you may delete it through available authenticated account controls in the app. If you cannot access your account, you may request deletion by contacting support from the email address associated with your account. We may require verification before processing the request, and some information may be retained where necessary for legal, security, fraud-prevention, billing, or operational reasons.
• Cookie preferences: on the public website you can accept or reject optional analytics cookies when the notice appears, and change that decision at any time from cookie settings. Closing the notice keeps only necessary storage. Necessary storage for security, preferences, and service operation remains active. We do not currently use advertising or promotion cookies. You can reset your choice by clearing site data in your browser.
• Device permissions: you can control microphone and other device permissions through your device settings.
• Legal rights: depending on your location, you may have rights to access, correct, export, or delete personal information.

8. Security

• We use authentication and access controls to restrict access to user data.
• Data is transmitted over encrypted connections.
• Cloud data access is protected by backend and database authorization controls.

9. Retention

We retain information for as long as reasonably necessary to provide the Service, comply with legal obligations, resolve disputes, enforce our agreements, and maintain operational integrity. Retention may vary by data type, settings, deletion activity, and backup or recovery requirements.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we may update the date above and provide notice where appropriate.

11. Contact Us

Questions? Contact us at: contact[at]nextsay.ai