Privacy policy

Version 2026-09-02. This policy explains which data Next processes, why, for how long, and what your rights are under the Brazilian General Data Protection Law (LGPD, Law 13.709/2018).

1. Who processes the data

Controller: Fernando Canelas, operator of Next (rkm-next.com.br), who also acts as data protection officer. Support channels are listed in the company area inside the portal.

2. Which data we process

• Account: name, e-mail, company, plan, language, version and date of acceptance of the terms.
• Access: IP address, date and time, identifier of the key used and name of the tool called (for example, a search). The content of your questions is not stored.
• Documents: the files the people of your account upload, and the indexes generated from them.
• Login: signing in to the portal uses a code sent to your e-mail. We store no password.
• Payment: payment data is handled by the payment provider; Next keeps only the plan, the status and the billing history.

3. Why, and on which legal basis

• Providing the contracted service: account, keys, indexing, search and billing (performance of a contract, art. 7, V).
• Service security: abuse protection, anti-bot check at sign-up and usage limits (legitimate interest, art. 7, IX).
• Keeping access logs for the legal period (legal obligation, art. 7, II, and Internet Civil Framework, art. 15).
• Sending account notices: billing, security incidents and changes to these terms (performance of a contract). We send no advertising.

4. Who we share with

Only with processors needed to run the service: Cloudflare (network, protection and portal login), the provider that delivers account e-mails, and the payment provider. They process data under contract and only for those purposes. We never sell or transfer data to third parties. Next's servers and those processors may be located in Brazil or abroad; any international transfer follows the safeguards of art. 33 of the LGPD.

5. How long we keep it

• Account data and documents: as long as the account exists.
• On account closure, by cancellation or by payment overdue for more than 30 calendar days: documents, indexes, keys and the list of people are permanently deleted, following the process in section 7 of the Terms of use (notices on the 1st, 15th and 25th day of delay; deletion on the 31st).
• Access logs: 6 months, the period set by art. 15 of the Internet Civil Framework.
• Billing history: for the period required by tax law.
• Backups: overwritten in the normal cycle, at most 30 days after deletion.

6. Your rights

At any time and free of charge you may request confirmation of processing, access, correction, anonymisation, portability, deletion, information about sharing, and withdrawal of consent where consent is the legal basis (art. 18 of the LGPD). Requests are made through the support channels listed in the portal and answered within 15 days. You may also file a complaint with the Brazilian data protection authority (ANPD).

7. How we protect it

• All traffic is encrypted (TLS). The server is never exposed directly to the internet.
• Each account has an isolated space; a key only reaches the documents of its own account.
• Access keys are stored only as a hash; the plain value is shown once.
• In case of a security incident with relevant risk, we notify the ANPD and the affected people as required by current regulation.

8. Cookies

The site uses only necessary cookies: the language preference, the signed-in indicator and the login authentication cookies. There are no advertising or tracking cookies.

9. Changes

Changes get a new dated version and are announced by e-mail to the account administrator.