1. Introduction

Next For Decision ("N4D", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our strategy execution platform and related services (the "Service").

This Privacy Policy complies with the California Consumer Privacy Act (CCPA), the General Data Protection Regulation (GDPR), and other applicable privacy laws.

For account and billing information, N4D acts as a data controller. For strategy data and content uploaded by customers, N4D acts as a data processor on behalf of the customer.

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: Name, email address, company name, job title, phone number
• Billing Information: Bank account details for invoice payment, billing address (processed securely through Stripe Invoicing)
• Strategy Data: Themes, strategies, tactics, initiatives, KPIs, budgets, reports, and retrospectives you input into the Service
• Communications: Messages, feedback, and support requests you send to us

2.2 Information Collected Automatically

• Log Information: Minimal server logs for security and troubleshooting purposes (IP address, access timestamps)
• Device Information: Browser type and operating system (collected in limited form for compatibility purposes)
• Essential Cookies: Session cookies required for the Service to function (see our Cookie Policy)

2.3 Information From Third Parties

We do not automatically sync data from third-party services. However, if you choose to import data via CSV, we will process that information according to this policy.

3. How We Use Your Information

We use your information for the following purposes:

• Provide the Service: Operate the platform, calculate ROI/ROAS/CPX, generate dashboards and reports
• Account Management: Create and manage your account, authenticate users, process payments
• Customer Support: Respond to inquiries, troubleshoot issues, provide technical assistance
• Service Improvement: Analyze aggregated and minimal usage data to improve features and develop new functionality
• Communications: Send service updates, security alerts, and (with your consent) marketing emails
• Legal Compliance: Comply with applicable laws, regulations, and legal processes

3.1 Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data based on the following legal grounds:

• Contract performance: To provide and operate the Service (Article 6(1)(b))
• Legitimate interests: To improve our Service, ensure security, and prevent fraud (Article 6(1)(f))
• Consent: For optional communications such as marketing emails (Article 6(1)(a))
• Legal obligation: To comply with applicable laws (Article 6(1)(c))

4. Data Sharing and Disclosure

4.1 We Do NOT Sell Your Data

We do not sell, rent, or trade your personal information or strategy data to third parties for marketing purposes.

4.2 Service Providers (Sub-processors)

We use a limited number of third-party service providers (Sub-processors) to assist us in providing the Service, including:

• Infrastructure Providers: Cloud hosting and storage services
• Payment Processors: Secure billing and transaction handling
• Communications: Email delivery and customer support tools

All Sub-processors are contractually obligated to protect your data and use it only for specified purposes. A current list of Sub-processors is maintained internally and is available to customers upon request by contacting privacy@n4decision.com.

4.3 Legal Requirements

We may disclose your information if required by law or in response to:

• Valid legal processes (subpoenas, court orders)
• Government or regulatory requests
• Protection of our rights, safety, or property
• Prevention of fraud or illegal activity

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. You will be notified of any such change.

5. Data Security

We implement reasonable security measures based on industry standards to protect your data:

• Encryption: Data encrypted in transit (TLS/SSL) and at rest
• Multi-Tenant Isolation: Company data is logically separated in our database architecture
• Access Controls: Role-based permissions, authentication mechanisms
• Security Reviews: Periodic security assessments as appropriate for our business
• Backup and Recovery: Backup procedures in place

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Data Retention

• Active Accounts: We retain your data for as long as your account is active
• Canceled Accounts: Data is retained for 90 days after cancellation, then permanently deleted
• Legal Obligations: We may retain certain data longer if required by law (e.g., financial records, audit logs)
• Anonymized Data: We may retain anonymized, aggregated data for legitimate business purposes

7. Your Rights

Depending on your location, you may have rights to access, correct, or delete your personal data. We do not sell personal data. To make a request, contact us at privacy@n4decision.com and we will respond within 30 days.

Note on B2B Data Integrity: Since N4D is a platform for recording organizational strategy and history, personal data (such as names associated with specific actions or records) may be anonymized or deactivated rather than physically deleted to maintain the integrity of the company's historical records.

8. Cookies

We use cookies and similar technologies on our Service. Depending on the type of cookie, your consent may be required. Essential cookies are always active as they are necessary for the Service to operate. We may also use analytics and marketing cookies with your consent.

For detailed information about the types of cookies we use and how to manage your preferences, see our Cookie Policy.

9. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States. We ensure that such transfers comply with applicable data protection laws through:

• Standard Contractual Clauses (SCCs) approved by the European Commission (2021 version), copies of which are available upon request
• Adequate security measures and data protection safeguards

10. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will delete it immediately.

11. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. Please review their privacy policies before providing any information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Significant changes will be communicated via email or in-app notification.

Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

• Email: privacy@n4decision.com
• Mail: 1021 E Lincolnway Suite #9885, Cheyenne, Wyoming 82001, United States