This Privacy Policy describes how Next Up ("we", "us", "Next Up") collects, uses, and shares information when you use our web application and related services (the "Service"). Next Up is a multi-tenant turn-taking and task-rotation tool for teams.
1. Information we collect
Information you provide
- Account data: name, work email, password (stored as a salted hash by our authentication provider), and the name of the team or department you create.
- Workspace content: staff names, roles, task lists, assignments, status updates, and notes you enter into a workspace.
- Billing data: when you subscribe, our payments provider (Stripe) collects and processes your payment details. We store a customer identifier, subscription status, plan, and renewal dates — we do not see or store full card numbers.
- Support requests: messages you send us via the contact form or email.
Information collected automatically
- Log data such as IP address, browser type, pages viewed, and timestamps.
- Cookies and similar technologies strictly necessary to keep you signed in.
Information we intentionally do not collect
Next Up is designed to avoid Protected Health Information (PHI). Do not enter patient identifiers, diagnoses, or other regulated health data into the Service. We are not a HIPAA Business Associate.
2. How we use information
- To provide, maintain, and improve the Service.
- To authenticate users and operate workspaces.
- To process subscriptions, trials, renewals, cancellations, and refunds.
- To send transactional emails (welcome, trial reminders, subscription activity, invites, password resets, and support replies).
- To detect, prevent, and respond to abuse, fraud, or security incidents.
- To comply with legal obligations.
We do not sell your personal information. We do not use your workspace content to train machine-learning models.
3. How information is shared
- Within your workspace: content you add (staff entries, tasks, status) is visible to other members of that workspace and, if you choose to share a public board link, to anyone with that link.
- Service providers (subprocessors): we use Supabase (database, auth, storage), Stripe (payments), and an email delivery provider configured through our sender domain
notify.nextuplist.com. - Legal: we may disclose information when required by law or to protect rights, safety, or the integrity of the Service.
- Business transfers: in connection with a merger, acquisition, or sale of assets, with notice to affected users.
4. Public boards
Workspace owners can publish read-only "public boards" protected by a passcode. Anyone with the URL and passcode can view the contents of that board. Do not include sensitive information on a public board.
5. Data retention
We retain account and workspace data for as long as your account is active. If you cancel and do not resubscribe, we may delete your workspace data after a reasonable retention period. You can request deletion at any time by emailing support@nextuplist.com.
6. Security
We use industry-standard safeguards including TLS in transit, row-level security in the database, hashed passwords, and least-privilege server credentials. No method of transmission or storage is 100% secure.
7. Your choices and rights
Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact support@nextuplist.com. You can also unsubscribe from non-essential emails using the link in those messages; transactional emails (billing, security, account) will continue.
8. International users
The Service is operated from the United States. If you access it from elsewhere, you consent to processing of your information in the United States and other countries where our service providers operate.
9. Children
The Service is not directed to children under 16, and we do not knowingly collect personal information from them.
10. Changes
We may update this Policy from time to time. Material changes will be announced in the app or by email. The "Effective" date above reflects the latest revision.
11. Contact
Questions about this Policy: support@nextuplist.com.