Privacy policy

Version 2026-10-21. This policy explains which data Next processes, why, for how long, and what your rights are under the Brazilian General Data Protection Law (LGPD, Law 13.709/2018). For a client subject to the European Union General Data Protection Regulation (GDPR), document processing also follows the Data Processing Addendum of the Terms of use.

1. Who processes the data

Controller: RevByte Consulting LTDA, CNPJ (Brazilian company registration) 69.267.754/0001-09, with registered office at Rua Aurea Batista dos Santos, 334, Vila Morse, São Paulo/SP, Brazil, postal code 05623-000, which provides Next (rkm-next.com.br). The data protection officer is Fernando Canelas. The officer's contact is shown in the footer of this page and the support channels are in the company area inside the portal.

2. Which data we process

Account: name, e-mail, company, plan, language, version and date of acceptance of the terms.
Access: IP address, date and time, identifier of the key used and name of the tool called. The content of your questions is not stored.
Documents: the files the people of your account upload, and the indexes generated from them.
Connected sources: when an administrator authorizes an external source, Next uses read-only scope, stores encrypted tokens, lets the administrator disconnect at any time, and removes imported files when requested.
Login: signing in to the portal uses a code sent to your e-mail. We store no password.
Billing: card payment data is processed by Stripe, Next's processor for billing; Next does not store card numbers. Plan, account status and commercial history remain linked to the account for service delivery.

3. Why, and on which legal basis

Providing the contracted service: account, keys, indexing and search (performance of a contract, art. 7, V).
Billing paid plans and granting or blocking access according to the subscription (performance of a contract, art. 7, V); keeping billing records for the period required by tax law (legal obligation, art. 7, II) and for defence in billing disputes (regular exercise of rights, art. 7, VI).
Service security: abuse protection, anti-bot check at sign-up and usage limits (legitimate interest, art. 7, IX).
Keeping access logs for the legal period (legal obligation, art. 7, II, and Internet Civil Framework, art. 15).
Sending account notices: security incidents and changes to these terms (performance of a contract). We send no advertising.

4. Who we share with

Only with processors needed to run the service: Cloudflare (network, protection and cookieless audience measurement), the provider that sends login codes and other account e-mails, Stripe (subscription, billing and invoices of paid plans), and the artificial-intelligence tool you connect to Next, such as Claude, ChatGPT or Codex. Each processor handles data under contract and for a specific purpose. We never sell or transfer data to third parties. Next's servers and those processors may be located in Brazil or abroad; every international transfer follows the safeguards of art. 33 of the LGPD.

5. How long we keep it

Account data and documents: as long as the account exists.
On account closure by the company administrator, documents, indexes, keys and the list of people are permanently deleted 7 days after closure, following the process in section 7 of the Terms of use.
Access logs: 6 months, the period set by art. 15 of the Internet Civil Framework. The IP address is removed from the log at the end of that period; the rest, such as date, time and key used, is kept.
Commercial history: for the period required by applicable law.
Backups: daily backup, retained for 30 days and overwritten in the normal cycle.

6. Your rights

At any time and free of charge you may request confirmation of processing, access, correction, anonymisation, portability, deletion, information about sharing, and withdrawal of consent in cases where consent is the legal basis (art. 18 of the LGPD). In the portal, you export your data in bulk and request deletion in the My data area. Requests can also be made through the data protection officer's contact and are answered within 15 days. You may also file a complaint with the Brazilian data protection authority (ANPD).

7. How we protect it

All traffic is encrypted (TLS). The server is never exposed directly to the internet.
Each account has an isolated space; a key only reaches the documents of its own account.
Access keys are stored only as a hash; the plain value is shown once.
In case of a security incident with relevant risk, we notify the ANPD and the affected people as required by current regulation.

8. Cookies and audience measurement

The site uses only necessary cookies: language preference, signed-in indicator and login authentication. Audience measurement is done without cookies (Cloudflare Web Analytics). There are no advertising or tracking cookies.

9. Group contract

On the Empresarial plan, the contract belongs to a group, made up of the parent company and the other companies of the group.

Each company of the group has its own space, physically separate, with its own people, its own keys and its own administrator.
The group space is used to publish folders to the companies: to all, to some or to none.
What the group publishes to a company appears to its people as read-only, with the origin “group” in search.
A company of the group does not see the files, the search results or the counts of another company of the group.
The contracted space belongs to the group and adds up the group space and that of every company, including the personal spaces.
A client that already uses Next only joins a group after its administrator accepts, and the acceptance is recorded with who accepted and when.

10. What the group sees of each company

The Group view is off by default in every company that is created in the group or joins it.
With the Group view off, the group sees only totals of each company: space used, documents, people and calls per day, plus the name and e-mail of whoever administers the company.
In that situation, the group does not see the names of the company's files or folders.
The questions asked to the AI, the excerpts returned and the names of people who do not administer the company never appear to the group.
Only the company administrator turns the Group view on or off, and each change is recorded with who made it and when.
With the Group view on, the group administrator reads and downloads the Company documents, without uploading, changing or removing anything.
The Group view never reaches anyone's personal space.
A search made by the AI with one company's key never adds up the documents of another company.

11. End of the group contract

Closing the group closes, in the same operation, the group space and every company in it.
The group space and all those companies have the same purge period, of 7 days, following the process in section 7 of the Terms of use.
In the purge, the files and indexes of the group space and of each company are deleted, along with their personal spaces, and each purge is kept in a record that cannot be deleted.
Before the group is closed, a company that is not the parent company can leave the group, at the request of the group administrator or of the company administrator, through the Next operator.
On leaving, the company continues as a standalone client on the Free, 5 GB or 20 GB plan, with its files, index, keys, pairings and connectors, and no longer sees what the group published.
A company that left the group before the closure is not touched by the group purge.
The personal space of someone who leaves a company is kept for 30 days, outside any search, and is deleted at the end of that period.

12. Personal space

Each person has a personal space in each company they belong to, separate from the company space and with its own index.
Files in the personal space never enter the company index.
Neither the company nor the group reads the personal space: the company administrator and the group administrator do not open anyone's personal list or files.
A person's key never reaches another person's personal space, nor their own personal space in another company.
The person can connect Google Drive and SharePoint/OneDrive to their personal space, within the source limit of the company's plan.
Access to the provider is stored encrypted and is deleted when the person disconnects the source or leaves the company.
The company administrator sees only how many personal sources exist, without the name of the person, the provider or the folder.
The personal space of someone who leaves a company is kept for 30 days, outside any search, and is deleted at the end of that period.

13. Client brand

On paid plans, the administrator can put the organization's logo, colors, name and icon on the portal, the sign-in page, the e-mails and the AI connector.
E-mails with the brand keep being sent from Next's sending address, with the sender in the form “organization name via Next”.
“Powered by Next” appears on the portal, the e-mails and the connector, identifies Next as the provider of the service, and no brand field removes it.
A display or sender name with a term from the list of reserved terms, such as Next, Claude, Google or Microsoft, is refused on saving.
The organization's audit log keeps who saved the brand, when and which fields changed, without keeping the image.
The Next operator maintains the list of reserved terms and can suspend an organization's brand, with a reason.
With the brand suspended, the portal, the sign-in page, the e-mails and the connector go back to the Next theme, and each administrator of the organization receives an e-mail with the reason.
The organization's audit log keeps who suspended the brand, when and the reason.

14. Changes

Changes get a new dated version and are announced by e-mail to the account administrator.