Privacy Policy

Last updated: April 3, 2026

1. What We Collect

We collect the minimum data needed to provide your relocation plan:

  • Email address (for authentication and notifications)
  • Relocation details you provide during intake (origin, destination, move date, preferences)
  • Plan interaction data (milestone completions, dashboard visits)

2. How We Use Your Data

  • Generate and maintain your personalized relocation plan
  • Send you move reminders and milestone notifications
  • Improve our product through aggregated, anonymized analytics

We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. AI-Powered Features

Some features use AI to personalize your experience. When you interact with AI features, your intake data is sent to our AI provider (Anthropic) to generate personalized advice. This data is not used to train AI models and is processed under strict data processing agreements.

4. Data Storage & Security

  • Data is stored in encrypted PostgreSQL databases hosted on Railway (SOC 2 Type II compliant infrastructure)
  • All connections use TLS/SSL encryption in transit
  • Authentication uses cryptographically signed magic links — no passwords are stored
  • Access controls enforce that users can only view their own data

5. Your Rights (GDPR)

You have the right to:

  • Access — Request a copy of all data we hold about you
  • Rectification — Correct inaccurate data
  • Erasure — Request deletion of your account and all associated data
  • Portability — Export your data in a machine-readable format
  • Withdraw consent — Opt out of non-essential communications at any time

To exercise these rights, use the account settings in your dashboard or contact us at privacy@nextnest.app.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, all personal data is permanently removed within 30 days. Anonymized analytics may be retained indefinitely.

7. Cookies

We use only essential cookies required for authentication and session management. We do not use tracking cookies, advertising cookies, or third-party analytics that track individuals.