NextAction, LLC (“NextAction,” “we,” “us,” or “our”) operates the nextaction.io website and the NextAction productivity application (collectively, the “Service”). This Privacy Policy explains what personal information we collect, how we use it, with whom we share it, and the rights you have regarding your data.
By using the Service, you agree to the collection and use of information as described in this policy.
NextAction, LLC is a Delaware limited liability company. For purposes of applicable data protection law, NextAction is the data controller for personal information collected through the Service.
Contact:
NextAction, LLC
3645 Grand Cypress Dr, Naples, FL 34119
Privacy inquiries: privacy@nextaction.io
When you create an account, we collect:
If you sign in using a third-party identity provider (such as Google), we receive basic profile information from that provider as permitted by your settings there.
Profile photo. If you sign in with Google, Google shares your profile photo link with us through our sign-in provider, Auth0. We show that photo to you, and only you, in the round picture at the top right of the NextAction app. We do not copy or store the photo: your browser loads it directly from Google each time, so Google may see that your browser requested it. If you sign in with an email and password, or if the photo is not available, NextAction shows your initials instead.
You can turn the photo off at any time under Preferences, with the switch “Show my profile picture.” When it is off, your browser does not request the photo at all.
The Service is a personal productivity tool. When you use NextAction, you create and store:
This content belongs to you. We do not analyze, sell, or use your content data for advertising purposes.
We automatically collect certain technical information when you use the Service, including:
This data is used to operate, maintain, and improve the Service.
Service monitoring. To keep the NextAction app working and secure, we send technical information about how it is running to Datadog, Inc. (United States): server logs, request traces, error reports, and measurements of how app pages load and respond in your browser. This includes your IP address and the approximate location worked out from it, your browser and device type, the pages and features you use, and a random identifier for your account in place of your name or email address. Monitoring data is kept for up to 90 days, as described in section 6.
Our website sets one first-party cookie, na_consent, to remember your cookie banner choice for 180 days. We do not use analytics or advertising cookies on the website. You can change your choice at any time using the “Cookie settings” link in the website footer, or through your browser settings.
Planned website measurement. We are adding performance and usage measurement to nextaction.io, provided by Datadog, Inc. (United States). Until we switch it on, the website sets no analytics cookies, as described above. Once it is on, it will run only if you choose Accept on the cookie banner; if you decline, or have not chosen, nothing from Datadog loads. When it runs, we will receive the pages you view, the page elements you click, page load times and errors, your browser and device type, and your approximate location, worked out from your IP address. We never send what you type into forms, including the early-access email address.
When it is on, it will set one more cookie, a Datadog session cookie named _dd_s_v2, which keeps your visits together as one session. It is extended by 15 minutes each time you interact with a page and ends after at most 4 hours. Datadog keeps the measurement data for 30 days. You will be able to change your choice at any time with the “Cookie settings” link in the website footer, and declining stops measurement from your next page load. When we switch measurement on, we will update this section, the cookie banner and the date at the top of this policy.
In the app. The NextAction app (app.nextaction.io) sets a Datadog session cookie, _dd_s_v2, as part of the service monitoring described above. It keeps one visit together as a session, is extended by 15 minutes each time you interact with a page, and ends after at most 4 hours. It is not used for advertising.
We use the information we collect to:
We do not use your content data (your tasks, projects, or notes) for any purpose other than providing the Service to you.
If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:
We do not sell your personal information. We share data only in the following circumstances:
We use trusted third-party providers to help operate the Service. These providers are contractually obligated to protect your data and may only use it as directed by us.
We may disclose your information if required to do so by law or in response to valid legal process (such as a court order or subpoena), or to protect the rights, property, or safety of NextAction, our users, or the public.
In the event of a merger, acquisition, or sale of all or a portion of NextAction's assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on the Service prior to your data being transferred and becoming subject to a different privacy policy.
We retain your personal information for as long as your account is active or as needed to provide the Service. If you close your account, we will delete or anonymize your personal data within 30 days unless we are required to retain it for legal or compliance purposes.
Usage logs and analytics data may be retained in aggregated, anonymized form after account deletion.
Service monitoring data sent to Datadog (see section 2) is kept for up to 90 days, after which it is deleted. If this changes, we will update this policy.
Depending on your location, you may have the following rights regarding your personal data:
In addition to the above, you have the right to:
California residents have the right to:
To exercise your rights, contact us at privacy@nextaction.io or through the Data & Privacy section in your account settings.
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit (TLS) and encryption at rest for stored data.
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
In the event of a data breach that affects your rights and freedoms, we will notify affected users and relevant authorities as required by applicable law.
The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us at privacy@nextaction.io and we will delete it promptly.
NextAction is based in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.
For transfers of personal data from the EEA to the United States, we rely on Standard Contractual Clauses (SCCs) to ensure your data receives adequate protection.
The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information.
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and/or by displaying a prominent notice in the Service at least 30 days before the change takes effect. The updated policy will be identified by a new “Last Updated” date at the top of this page.
Continued use of the Service after the effective date of a revised policy constitutes your acceptance of the changes.
NextAction is not affiliated with or endorsed by the David Allen Company. Getting Things Done® and GTD® are registered trademarks of the David Allen Company.
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
NextAction, LLC
3645 Grand Cypress Dr, Naples, FL 34119
privacy@nextaction.io