Privacy Policy

We collect the following categories of information:

1.1 Information you provide

• Account information (name, work email, organization, role)
• Profile information from your identity provider (e.g., display name, profile image, organization identifier)
• Billing information processed through our payment processor (we do not store credit card numbers)
• Communications you send to us (sales inquiries, support requests, feedback)
• Content you submit to the Services (prompts, agent definitions, integration configurations, custom tools)

1.2 Information collected automatically

• Usage data (features accessed, agent activity, action logs)
• Device and browser information (user agent, IP address, locale)
• Authentication events (sign-in timestamps, sign-in method)
• Performance and reliability telemetry (latency, error rates)

1.3 Information from third parties

• Identity providers (when you sign in with single sign-on)
• Tools you connect to NxGen (only the data you authorize us to access)

• To provide, operate, and maintain the Services
• To authenticate users and authorize access
• To process transactions and manage subscriptions
• To execute agent actions on your behalf, within the policies you configure
• To monitor performance, debug issues, and improve reliability
• To detect, prevent, and respond to fraud, abuse, or security incidents
• To communicate with you about your account, the Services, and important changes
• To comply with applicable legal obligations

We do not train our models on your customer content. Content you submit to the Services through agent activity is used only to serve you and is isolated to your tenant.

We share information only in the following circumstances:

• Service providers and processors that help us operate the Services (hosting, monitoring, payment processing). These parties are contractually obligated to safeguard your information and use it only to provide services to us.
• Identity providers and integrations you authorize. When you connect NxGen to a third-party tool, we exchange information with that tool only as required to perform the action you have asked for.
• Legal compliance. When required by law, court order, or to protect the rights, property, or safety of NxGen, our customers, or others.
• Business transfers. In connection with a merger, acquisition, or sale of assets, subject to standard confidentiality protections.

We do not sell personal information. We do not share customer content with model providers or third parties for advertising purposes.

Each NxGen customer is a fully isolated tenant. Your conversations, action logs, agent definitions, integration credentials, and custom tools are stored in a logical boundary tied to your account. We do not co-mingle customer data, and one tenant cannot read another tenant's data.

For workloads that touch your cloud accounts directly, NxGen runs a dedicated compute boundary per tenant. Credentials you provide for integrations are encrypted at rest and used only to perform the actions you authorize.

We retain information for as long as your account is active or as needed to provide the Services. After account termination, we retain residual data in encrypted backups for up to ninety (90) days, after which it is permanently deleted. We retain billing and tax records for the period required by applicable law.

You may request deletion of your account and associated data at any time by contacting us at privacy@nxgenailabs.com.

We implement administrative, technical, and physical safeguards designed to protect your information against unauthorized access, alteration, disclosure, and destruction. These include encryption in transit and at rest, least-privilege access controls, audit logging, multi-factor authentication, and continuous monitoring.

No security measure is perfect. You are responsible for safeguarding your account credentials and integration keys.

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Restrict or object to certain processing
• Receive a portable copy of your information
• Withdraw consent at any time (where processing is based on consent)

To exercise these rights, contact privacy@nxgenailabs.com. We will respond within the timeframe required by applicable law.

The Services are operated from the United States. If you access the Services from outside the United States, your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

The Services are intended for use by businesses and are not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

We use cookies and similar technologies for session management, authentication, and reliability monitoring. We do not use third-party advertising cookies. You can configure your browser to refuse cookies, but doing so may impair the functionality of the Services.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through a notice in the Services. The “Last updated” date at the top reflects the most recent revision.

Questions about this Privacy Policy or our privacy practices? Reach out at privacy@nxgenailabs.com.