Privacy Policy

NexxtInvest is operated by the operator of NexxTrades in the Netherlands, which is responsible for the personal data processed to provide this service. Contact info@nexxtrades.com for privacy questions and requests, identifying NexxtInvest in your message.

Account data includes your email, account identifier, authentication information and session details. Portfolio data includes assets, transaction dates, quantities, prices, fees, notes, cash movements, goals and DCA selections. Analytics and projections are calculated from those records and the settings you choose.

Billing data includes customer and subscription identifiers, plan, billing status and subscription dates. Stripe collects the payment and billing information needed for checkout; full payment-card details are not stored by NexxtInvest.

Support messages contain the information you send us. Technical information such as request logs, IP addresses, browser information and error reports may be processed by the infrastructure used to operate and secure the website. IP addresses and identifiers can be personal data, even when no name is attached.

Only provide records you are entitled to use. Do not include broker passwords, API secrets or unrelated sensitive personal information in notes or support messages.

We process account and portfolio data to deliver the service you request, authenticate access, store records and calculate analytics, goals and projections. The legal basis for processing necessary to these services is performance of our contract with you.

Subscription administration and requested support also support that contract. Where records are required by tax, accounting or other law, the basis is legal obligation. Necessary security, abuse prevention and service diagnosis may rely on legitimate interests, balanced against your rights.

Processing that legally requires consent, such as non-essential tracking, must rely on a separate choice rather than acceptance of this notice. You can withdraw consent without affecting the lawfulness of processing before withdrawal. We do not use portfolio rankings to make legally significant automated decisions about you.

We also use usage and interaction data to understand how the service is used and to optimize it: which pages and features are visited, where visitors get stuck or leave, and which screens are slow or confusing. That insight is used to improve the product, its performance and its layout. It is not used to make decisions about you personally, and not for advertising or personal profiling.

Where we run online advertising, we also measure how those campaigns perform: which ad or campaign a visitor arrived from, which pages they then visit, and whether they create an account or start a subscription. Google (Google Ads, through the Google tag / gtag.js) processes that measurement on our behalf. It is used to judge and improve advertising, not to decide anything about you personally.

Lovable Cloud provides the application's hosting, account authentication and database infrastructure. Stripe provides payment processing and subscription management. Microsoft Clarity and Google Ads (the Google tag) provide usage and advertising measurement. Infrastructure and transactional-email providers may process data needed to operate the service. Providers may act as processors or, for their own regulated functions, independent controllers.

Market data comes from sources such as CoinGecko and Yahoo Finance. Price requests use asset identifiers, rather than requiring a connection to your personal broker account. Links to NexxTrades open a separate product; visiting it is not a portfolio-data transfer or shared sign-in.

Data may also need to be disclosed where required by law, to address abuse or legal claims, or as part of a lawful business transfer with applicable protections. Contact us for information about providers relevant to your account and their processing arrangements. Stripe's own privacy notice explains its payment-data processing.

The app uses browser storage for authentication sessions and preferences, including appearance, privacy mode and selected views or filters. These settings let the service remember your choices. Privacy mode only hides amounts on your screen; it does not delete records or make them anonymous.

Browser settings can clear or block local storage and cookies, but doing so may sign you out or reset preferences. Stripe and external sites have their own storage practices. This notice does not authorize non-essential analytics or advertising cookies without any consent required by law.

Microsoft Clarity is used to understand how the site is used so it can be optimized. Clarity records interaction patterns such as clicks, scrolling and pointer movement, together with a session identifier and device and browser information, and stores them in cookies and local storage. Microsoft processes this on our behalf for service optimization; the data is not used for advertising and is not combined with your portfolio records to profile you personally.

The Google tag (gtag.js) is used to measure advertising performance. It records the pages you visit, the ad or campaign that brought you here, and device, browser and referring-site information, and it stores cookies for that measurement. Google Ads processes this data to report how campaigns perform and to measure actions such as a new account or a subscription start. It is not used to see or read your portfolio records.

Portfolio records are kept to maintain your account and the services you use. Canceling Elite returns the account to Free and does not itself delete records. You may delete individual records through the app or request account deletion at info@nexxtrades.com.

On a deletion request, we assess which records can be erased and which must be retained for legal obligations or legal claims. Billing and accounting records may need to be retained after the account closes. Backups and technical records may persist until their applicable retention or overwrite cycle ends; we do not promise immediate removal from every backup.

Contact us for retention information about a particular category of your data. We do not retain personal data indefinitely merely because you once had an account; retention must remain necessary for a stated purpose or legal requirement.

Authentication and access controls are used to protect account records. Online systems cannot guarantee absolute security; use a strong password, protect access to your email and report suspected unauthorized access promptly. A security limitation does not waive our legal data-protection responsibilities.

Cloud and payment providers may process data in more than one country, including outside the European Economic Area. Where an international transfer is subject to GDPR, an appropriate legal transfer mechanism is required, such as an adequacy decision or applicable contractual safeguards. Contact us for the locations and safeguards relevant to your data; we do not represent that all processing takes place within the EEA.

Depending on applicable law, you may request access, correction, deletion, restriction or portability of your personal data; object to processing based on legitimate interests; and withdraw consent where processing relies on it. Rights can be subject to legal exceptions, for example required accounting records.

Email info@nexxtrades.com with your request. We may ask for proportionate proof of identity, but do not send passwords or full payment details. Under GDPR, requests are generally answered within one month; if a lawful extension is needed, we will explain it within that initial period.

You may lodge a complaint with the Dutch Autoriteit Persoonsgegevens or the supervisory authority in your country of residence, work or the alleged infringement. You do not have to contact us before exercising that right.

Email verification, password resets, support responses and necessary account or billing notices are service communications. Promotional communications, if offered, are subject to applicable consent and opt-out requirements; calling a promotional message a service update does not remove those requirements.

NexxtInvest is intended for adults aged 18 or over. If you believe a child has provided personal data, contact us so we can assess and address it under applicable law.

We may revise this policy as the service or legal requirements change. The date above identifies the current revision. Material changes will be communicated where legally required. Updating a privacy notice does not itself grant consent to a new processing purpose.

For privacy requests or questions about this policy, email info@nexxtrades.com.