Privacy Policy

About this policy

NextDoer is a structured process automation service. This policy explains what personal information we collect when you interact with our website and how we handle it.

This policy covers information collected through the process review form on this website. It does not cover business data that a client's runner processes on their behalf, that data stays inside the client's isolated environment and is governed by the service agreement.

What we collect

Process review requests. When you fill in the process review form, we collect your name, work email address, company name, and the description of the recurring process you want to automate.

Website usage. Our web server logs basic request data, IP address, browser type, pages visited, and timestamps. We may use a privacy-respecting analytics service to understand aggregate traffic. We do not use advertising trackers.

How we use it

We use the information from the process review form to:

• Read and evaluate the process you described
• Draft a scoped playbook describing how a runner could take it over
• Contact you with our assessment and next steps

We do not use your information for advertising, do not profile you for marketing purposes, and do not sell it.

Your business data

If you become a client, the business data your runner processes, invoices, emails, names, amounts, correspondence, stays inside your isolated runner environment. Each client gets their own container, database, and encryption key. No business data store is shared between clients.

We hold playbook definitions and operational metadata (task counts, success rates, timestamps). We do not hold your business data, cannot read it as a matter of routine operation, and do not use it for any purpose other than performing the agreed process.

AI processing

When a runner processes a case, content from that case is sent to an AI model provider to perform reasoning steps. This happens under a zero-retention, no-training agreement with the provider: content is used solely for the inference call and is not stored or used to train any model. A redaction filter sits in front of the model gateway.

When you submit a process review request on this website, the description you write may also be sent to an AI model as part of our internal evaluation, under the same terms.

Who we share information with

We do not sell personal information. We may share it with:

• Our AI model provider, to process content submitted via the form and, for clients, to run agreed processes, under zero-retention terms as described above.
• Infrastructure providers, who host the servers our service runs on. These providers are bound by data processing agreements.
• Professional advisers, where required by law, regulation, or to defend or assert a legal claim.

Retention

We keep information from the process review form for as long as there is an active engagement or a reasonable prospect of one. If we determine there is no fit, we remove the submission from active files within a reasonable time.

Operational metadata from a runner is retained for the duration of the engagement and up to 12 months after it ends, for billing verification and performance review.

If you ask us to delete your information, we will do so unless we are legally required to retain it.

Your rights

You have the right to ask us what personal information we hold about you, to correct anything inaccurate, and to ask us to delete it. To exercise any of these rights, email us at the address below.

This policy is intended to comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws of Canada.

Cookies and analytics

We use session cookies necessary for the website to function. We may use a privacy-respecting analytics service to understand aggregate usage patterns. We do not use advertising cookies, third-party tracking pixels, or behavioural profiling tools.

Changes to this policy

We will update this policy when our practices change. The effective date at the top reflects when the current version took effect. We will notify active clients directly of any material changes before they take effect.

Contact

Questions about this policy or requests regarding your personal information: privacy@nextdoer.co