Privacy Policy

Introduction

Nextvestment Inc., a Delaware corporation ("Nextvestment", "we", "us", or "our"), together with its subsidiary Nextvestment Pte. Ltd. (Singapore), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at nextvestment.com and use our services.

Please read this Privacy Policy carefully. By accessing or using our website and services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

Information We Collect

Personal Information You Provide

We may collect personal information that you voluntarily provide, including:

• Name and contact details (email address, phone number)
• Company name and job title
• Information provided through contact forms or demo requests
• Communications you send to us

Information Collected Automatically

When you visit our website, we may automatically collect:

• Device information (browser type, operating system, device type)
• IP address and approximate geographic location (derived from IP address for analytics purposes; we do not store precise geolocation data and IP addresses are anonymized or deleted after processing)
• Pages visited, time spent on pages, and navigation paths
• Referring website or source
• Session recordings — mouse movements, clicks, scrolls, and page content (via PostHog, only when analytics consent is granted). Sensitive input fields such as passwords and payment details are automatically masked and not captured. Session recordings are used solely to understand user experience and improve our website.
• Cookie data and similar tracking technologies (see our Cookie Policy)

How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our website and services
• Respond to your inquiries and fulfill your requests
• Send you relevant information about our products and services
• Analyze and improve our website and services
• Detect, prevent, and address security issues or fraud
• Comply with legal obligations

Legal Basis for Processing

European Economic Area (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, our legal basis for collecting and using your personal information depends on the data concerned and the context in which we collect it. We process your data based on:

• Consent: Where you have given us explicit consent to process your data (e.g., marketing communications, analytics cookies)
• Legitimate interests: Where processing is necessary for our legitimate business interests (e.g., improving our services, security)
• Contractual necessity: Where processing is necessary to perform a contract with you
• Legal obligation: Where processing is necessary for compliance with a legal obligation

Singapore (PDPA)

Nextvestment Pte. Ltd. is incorporated in Singapore and complies with the Personal Data Protection Act 2012 (PDPA). Under the PDPA, we collect, use, and disclose your personal data only with your consent or as otherwise permitted under the Act. You may withdraw your consent at any time by contacting us, subject to legal or contractual restrictions.

We apply the PDPA's data protection obligations, including the Consent, Purpose Limitation, Notification, Access and Correction, Accuracy, Protection, Retention Limitation, Transfer Limitation, and Openness obligations. For users in Singapore, Hong Kong, Japan, and other APAC jurisdictions, we additionally respect applicable local data protection requirements.

California (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), including the right to know what personal information we collect, the right to delete your personal information, the right to correct inaccurate personal information, and the right to opt out of the sale or sharing of personal information. We do not sell or share personal information as defined under the CCPA/CPRA.

To exercise your California privacy rights, please contact us at support@nextvestment.com.

Sharing Your Information

We may share your information with:

• Service providers: Third-party companies that perform services on our behalf, such as analytics (Google Analytics, PostHog), advertising (Google Ads), and customer communication tools
• Legal requirements: When required by law, regulation, or legal process
• Business transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal information to third parties.

International Data Transfers

Nextvestment Inc. is headquartered in the United States (Delaware), with operations in Singapore through Nextvestment Pte. Ltd. Your personal data may be transferred to and processed in countries other than your country of residence, including the United States, Singapore, and other jurisdictions where our service providers operate (e.g., cloud infrastructure providers, analytics platforms).

These countries may have data protection laws that differ from those in your jurisdiction. Where we transfer personal data from the EEA, UK, or Switzerland, we rely on appropriate safeguards, including:

• Standard Contractual Clauses (SCCs): EU Commission-approved contractual clauses that provide adequate data protection guarantees
• Adequacy decisions: Where the European Commission or relevant authority has determined that a country provides an adequate level of data protection
• Service provider safeguards: Contractual obligations requiring our service providers to protect personal data in accordance with applicable data protection laws

For transfers from Singapore, we comply with the PDPA's Transfer Limitation Obligation, ensuring that recipients of personal data provide a standard of protection comparable to that under the PDPA.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. When we no longer need your data, we will securely delete or anonymize it.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate personal data
• Erasure: Request deletion of your personal data
• Restriction: Request restriction of processing of your personal data
• Portability: Request transfer of your personal data to another service
• Objection: Object to processing of your personal data
• Withdraw consent: Withdraw consent where processing is based on consent

For PDPA (Singapore): You have the right to access and correct your personal data held by us. You may also withdraw consent for our collection, use, or disclosure of your personal data, subject to legal or contractual restrictions.

For GDPR (EEA/UK): You also have the right to lodge a complaint with your local supervisory authority if you believe your data protection rights have been violated.

To exercise any of these rights, please contact us at support@nextvestment.com. We will respond to your request within 30 days (or as required by applicable law).

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is completely secure.

Third-Party Links

Our website may contain links to third-party websites and services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

Governing Law

This Privacy Policy is governed by the laws of the State of Delaware, United States, without regard to conflict of law provisions. For users in the EEA or UK, nothing in this policy limits your rights under the GDPR or applicable local data protection law. For users in California, your rights under the CCPA/CPRA are preserved regardless of governing law. For users in Singapore, your rights under the PDPA are preserved. Any disputes relating to this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of the State of Delaware, without prejudice to your right to bring proceedings in your local jurisdiction where permitted by applicable law.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Data Protection Officer

Given the nature and scale of our data processing activities, we have not appointed a formal Data Protection Officer (DPO) or EU representative at this time. However, for all privacy-related inquiries, data protection requests, or complaints — including those under the GDPR, PDPA, or CCPA — please contact:

We will review our obligation to appoint a DPO or EU/UK representative on an ongoing basis as our operations evolve.

Contact Us

If you have any questions about this Privacy Policy, please contact us at: