Privacy Policy

1. Who we are

This Privacy Policy applies to nextrion.ai (the "Site") and the inquiry and correspondence channels operated by Nextrion Inc. ("Nextrion", "we", "us", "our"), a Delaware corporation with offices at 100 Middlefield Rd, Menlo Park, CA 94025, United States.

Nextrion Inc. is a wholly-owned U.S. subsidiary of Nextpayments Inc., a Korean corporation. Nextrion operates independently with respect to information collected through the Site: we do not share Site data with our parent company, and our parent company does not have access to it.

2. Information we collect

2.1 Information you provide

When you submit our inquiry form, write to us, or otherwise interact with us, we collect the information you choose to share, which may include:

• Name
• Work email address
• Company name
• Number of locations
• Industry
• A free-text description of your space, operation, and what you are trying to solve
• Any other information you voluntarily include in correspondence with us

2.2 Information collected automatically

When you visit the Site or submit a form, we automatically receive a limited set of technical data that helps us route requests, troubleshoot, and protect against abuse:

• IP address and approximate geographic region (resolved by our infrastructure providers)
• Browser user-agent string
• The page on the Site from which a request was sent and any HTTP referrer
• Timestamp of the request

The Site does not currently use third-party advertising trackers or cross-site behavioral analytics. If we add product analytics or non-essential cookies in the future, we will update this policy and present a notice before they begin operating.

3. How we use it

We use the information described above to:

• Respond to your inquiry and discuss whether our products and services fit your operation
• Send follow-up correspondence relating to that inquiry
• Operate, secure, and improve the Site
• Detect and prevent fraud, abuse, and automated form submissions
• Comply with applicable law and respond to lawful requests

3.1 Legal bases (EEA / United Kingdom)

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR and UK GDPR:

• Performance of a contract or steps prior to entering one, where you ask us to respond to your inquiry.
• Legitimate interests:operating and securing the Site, preventing abuse, and conducting routine business correspondence with prospects and partners. You may object to processing on this basis at any time (see Section 7).
• Consent, where you have provided it (for example, by checking a consent box on a form). You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Compliance with a legal obligation, where we are required to retain or disclose information.

4. Who we share it with

We share information only with parties that help us operate the Site or that we are legally required to share with. We do not sell or rent personal information.

• Service providers operating under our instructions. Cloudflare, Inc. (site hosting, content delivery, and security); Google LLC (Workspace email, Google Sheets, and Google Apps Script, used to receive and store inquiry submissions). These providers process information on our behalf under their respective data processing terms.
• Legal and safety. We may disclose information when we reasonably believe disclosure is required by law, court order, or to protect the rights, property, or safety of Nextrion, our users, or the public.
• Corporate transactions. If Nextrion is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction; in such cases we will require the recipient to honor the commitments in this policy.

5. International transfers

Nextrion is based in the United States, and our service providers operate globally. As a result, information about you may be processed in the United States and other jurisdictions where our providers operate, whose data protection laws may differ from those of your home country.

Where required, we rely on appropriate safeguards for such transfers, including the European Commission's Standard Contractual Clauses, the equivalent UK International Data Transfer Agreement, and comparable mechanisms recognized in other jurisdictions. We work with providers that maintain comparable safeguards.

6. How long we keep it

We retain inquiry information for as long as we have a legitimate business reason to do so. Typically that means maintaining ongoing relationships with prospects, customers, and partners, and to satisfy legal, accounting, and dispute-resolution obligations. When we no longer need information for these purposes, we delete or anonymize it. You may also request deletion at any time as described in Section 7.

7. Your rights

Depending on where you live, you may have some or all of the following rights regarding the personal information we hold about you:

• Access:request a copy of the personal information we hold about you.
• Correction:ask us to correct inaccurate or incomplete information.
• Deletion:ask us to delete your information, subject to legal exceptions.
• Restriction or objection:ask us to restrict or stop processing in certain circumstances, including processing based on legitimate interests.
• Portability:receive your information in a structured, commonly used, machine-readable format.
• Withdraw consent:where processing is based on your consent.

To exercise any of these rights, email [email protected]. We will respond within the time required by applicable law and may need to verify your identity before fulfilling certain requests. We will not discriminate against you for exercising any right you have under applicable privacy law.

7.1 California residents

California residents have additional rights under the California Consumer Privacy Act ("CCPA"), as amended by the California Privacy Rights Act ("CPRA"), including the right to know what personal information we collect, the right to request deletion, the right to correct inaccurate information, the right to opt out of the sale or sharing of personal information for cross-context behavioral advertising, and the right to limit the use of sensitive personal information. In the preceding twelve months we have not sold or shared personal information for cross-context behavioral advertising as those terms are defined under the CCPA, and we do not use sensitive personal information for purposes that would trigger a right to limit. To exercise CCPA rights, contact us at [email protected].

7.2 EEA / United Kingdom residents

If you are in the EEA or the UK and believe we have not handled your personal information consistently with applicable law, you have the right to lodge a complaint with the data protection supervisory authority where you live, work, or believe the alleged infringement occurred.

7.3 Korean residents

Where the Personal Information Protection Act ("PIPA") applies, you have rights of access, correction, deletion, suspension of processing, and the right to file a complaint with the Personal Information Protection Commission of Korea. Requests can be directed to [email protected].

8. Children

The Site is intended for business use and is not directed to children under sixteen. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

9. Cookies and similar technologies

The Site does not currently set marketing or analytics cookies. A small number of strictly necessary cookies may be set by our hosting and security provider (Cloudflare) to load the page reliably and to protect the Site against abuse. If we add product analytics or any non-essential cookies in the future, we will update this policy and present a cookie notice before they begin operating.

10. Security

We use TLS encryption for traffic to and from the Site, restrict access to inquiry data to authorized personnel, and rely on providers (Cloudflare, Google Workspace) that maintain industry-standard security programs. No method of transmission or storage is perfectly secure; if you believe you have discovered a security issue, contact [email protected].

11. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Effective" date above and, for material changes, provide additional notice (for example, on the Site home page) before the changes take effect.

12. Contact us

For privacy questions or to exercise any rights described above, contact: