Terms of use

Version 2026-10-21. By creating an account you accept these terms. The accepted version and the date of acceptance are recorded on the account.

1. The service

Next lets the AI you already use, such as Claude, Codex or any MCP-compatible client, search your company documents and answer citing the source. It is a corporate (B2B) service, not directed at children or adolescents. Documents are indexed in a space isolated per account and served only to the access keys of that account.

2. Account, administrator and users

• Whoever creates the account is the administrator and is responsible for the account, the contracted space and the people they invite.
• Each person receives a personal access key. The key is shown once, must not be shared, and can be replaced or revoked at any time.
• You are responsible for keeping keys secret and for all use made with them until they are replaced or revoked.

3. Plans and billing

The plan defines the contracted storage and usage limits for the account. The limits are those of the plan, and the price of each plan is the one charged by Stripe and shown on the Plans page.

• The free plan has no charge, does not ask for a card and has no time limit.
• Next may change the limits of the free plan. A reduction is announced by e-mail to the administrators of accounts on the free plan at least 30 days in advance, and the over-the-space period only starts on the date it takes effect.
• Paid plans are subscribed through the portal, via Stripe, with a 7-day trial without a card for those who never had a subscription, and the subscription renews every month on the card. With a card on file during the trial, the first charge happens at the end of it, with no further confirmation. Without a card on file at the end of the trial, the subscription is canceled and the account returns to the free plan. Next does not store card numbers.
• Until whoever signs up for a paid plan completes the Stripe Checkout or chooses the free plan, the account's users can only reach Preferences (with the export of and the request to erase their own data), switching company and Sign out, and administrators also the Billing page, the export of the company's documents and closing the space; only an administrator can complete the subscription or choose the free plan. Meanwhile, no new key, connection or sync client is created, and the connectors and access keys that already exist keep working within the limits of the free plan. Choosing the free plan has no cost, releases the account immediately, is recorded, and does not remove the 7-day trial of those who subscribe later.
• Only the account administrator changes the plan, updates the card, views the invoices or cancels the subscription, in Stripe's subscription portal, opened from the Billing page. A change to a larger plan takes effect immediately, with a prorated charge. A plan reduction and a cancellation take effect at the end of the period already paid.
• The invoices, the new charge attempts and the declined-payment e-mail are Stripe's. With the payment declined once, access continues in full and the Billing page asks for the card to be updated. If the payment is declined a second time, access is blocked until it is settled, and the files stay stored; on the third decline, the subscription is canceled and the account returns to the free plan.
• If the account moves to a plan with less space than it uses, including the return to the free plan through cancellation, non-payment or the end of the trial without a card, the administrators receive an e-mail on the same day, and the deadline is 20 calendar days after the first delivered notice, with reminders 10, 3 and 1 day before. Until then, it is enough to bring usage below the plan's space or subscribe to a larger plan. If no notice is delivered to the administrators, nothing is deleted. If on that date usage still exceeds the space, all the content of the space is deleted, including the people's personal spaces, and Next does not restore it. Each person with files in their personal space also receives the notice and the reminders, and sees the notice on the portal. Before the deadline, the administrator can export the company's documents and each person can export their own, as in section 7. After the space is emptied, the administrators and the people who were notified receive an e-mail with the date and the volume deleted.
• The Empresarial plan, for groups with several companies, is contracted through a contact request on the portal and a contract with Next, which sets the space, the people and the connected sources.

4. Your documents

• Your documents are yours. You grant Next only the license needed to index them and serve them to the keys of your account.
• Documents are never used to train models and are never shared between accounts.
• You declare that you have the right to upload each document and to let the people of your account query it, and you are responsible for having a legal basis for the personal data you upload.

5. Acceptable use

You may not use Next to store or distribute illegal content, to attack the service or third parties, to try to reach other accounts' data, or to circumvent space and usage limits. A serious violation allows immediate suspension of the account, with notice to the administrator, and may lead to the closure described in section 7.

6. Availability and backups

Next keeps a daily backup retained for 30 days and an operational restore procedure. We recommend that you also keep the originals of your documents in your own environment.

7. Account closure and data deletion

Who can close the account. The company administrator, at any time, in the company area, confirming the name of the space. Next, for a serious violation of section 5.

Immediate effect. Closure shuts the space at once: the access keys stop working, sessions are ended and access through the sync client is refused.

Before the purge. As long as the account exists, the administrator can export the company documents in bulk and each person can export their own, in the corresponding area of the portal. After the purge there is no recovery.

Definitive purge within 7 days. The definitive deletion happens 7 days after closure. Within that window the closure can still be reversed; after it, it cannot.

What is deleted. In the purge, the following are permanently deleted from the service: the company's and each person's documents, the indexes generated from them, all access keys and tokens, the sync pairings, the usage record and the account's list of people.

What is kept. Only what the law requires, and without the documents: access logs for 6 months, under art. 15 of the Internet Civil Framework, and the internal mutation audit, which keeps the e-mail only as a hash, never in clear text. The IP address is removed from the log at the end of 6 months.

Person removed from the account. The administrator can remove a person at any time. That person's personal space is deleted within 30 days, and their keys stop working immediately.

8. Changes to these terms

Changes are announced to the administrator by e-mail at least 15 days in advance and get a new dated version. Continued use after the effective date counts as acceptance of the new version.

9. Governing law

These terms follow Brazilian law, including the General Data Protection Law (Law 13.709/2018, LGPD) and the Internet Civil Framework (Law 12.965/2014). For a client subject to the GDPR, the Data Processing Addendum in section 11 also applies.

10. Contact

Next is provided by RevByte Consulting LTDA, CNPJ (Brazilian company registration) 69.267.754/0001-09, with registered office at Rua Aurea Batista dos Santos, 334, Vila Morse, São Paulo/SP, Brazil, postal code 05623-000.

The data protection officer's contact is shown in the footer of the public pages and in the Privacy policy. Other support channels are in the company area inside the portal.

11. Data Processing Addendum (DPA)

This addendum applies to a client subject to the GDPR (Regulation (EU) 2016/679) or to parties that adopt it in writing, and it supplements these Terms without replacing them.

• Roles. As to the client's documents and content, the client is the controller and Next is the processor (LGPD art. 5, VII; GDPR art. 4(8)). As to account data (name, e-mail, company, IP), Next is the controller, as set out in the Privacy policy.
• Subject matter, duration, nature and purpose. Next indexes and serves the client's documents so that the AI tool chosen by the client can answer citing the source, for as long as the account lasts.
• Types of data and data subjects. These are determined by the client, through the content they upload; Next does not determine them.
• Documented instructions. Next processes the documents only to provide the service and on the client's instructions, and informs the client if an instruction appears to infringe the law.
• Confidentiality and security. Everyone with access is bound by confidentiality; the security measures are those in section 7 of the Privacy policy.
• Sub-processors. The client authorises the sub-processors needed for the service: Cloudflare, the e-mail provider (SMTP), and the AI tool the client connects. Each processes data under a contract compatible with this addendum.
• Assistance to the controller. Next assists the client in meeting data subject requests, assessing impacts and responding to incidents, through the portal features and the incident runbook.
• Return and deletion. At the end of processing, the client exports their data and, on closure, the data is purged within 7 days, as set out in section 7.
• Audit. Next makes available, on reasonable request, the information needed to demonstrate compliance with this addendum.
• International transfer. As Brazil has no adequacy decision from the European Commission, the transfer of EU data subjects' data to Next relies on the Standard Contractual Clauses of Implementing Decision (EU) 2021/914 (module 2, controller to processor), incorporated into this addendum by reference. The EU representative (GDPR art. 27) is named for clients subject to that requirement.