Legal
Privacy policy
Last updated July 2026 · Plain-English summary first, full terms below each heading.
1. Who we are and what this covers
In short: Next Collective Pty Ltd runs Nextversity, and this policy covers everyone who uses it, anywhere.
Nextversity is operated by Next Collective Pty Ltd, an Australian company. This policy explains how we handle personal information for visitors and members worldwide, including rights under the EU and UK GDPR, the California Consumer Privacy Act, and the Australian Privacy Principles. Contact for anything in this policy: support@nextversity.com.
2. What we collect
In short: what you give us, plus what running your account requires.
When you contact us or request a course guide, we collect what you enter: name, email, phone if you provide it, and your message. When you subscribe, we hold your account details, profile, course progress, quiz results, reflections, certificates, and the notes and voice notes you create. Voice notes are transcribed and summarized by AI so you can search them. Next Tutor conversations are stored with your account so you can continue them. Payment details go directly to Stripe; we never see or store full card numbers. We do not buy data about you from anyone.
3. Who processes it for us
In short: a short list of providers, each doing one job under contract.
We use Supabase (hosting, authentication, database and file storage), Stripe (payments and billing), Resend (transactional email), Vercel (website hosting), Google Analytics and Google Ads via Google Tag Manager with Consent Mode (usage analytics and advertising measurement, consent-gated where required), HubSpot (our contact records and newsletter), Cloudflare Turnstile (spam protection on forms), Vimeo (video playback, embedded in do-not-track mode), Sentry (error logs so we can fix crashes), and Deepgram, OpenAI and Anthropic (voice note transcription, AI summaries, and Next Tutor answers). Each provider processes data only to provide its service to us. We do not sell or rent personal information, and we never have.
4. Why we use it (legal bases)
In short: to run the service you pay for, with consent for anything optional.
We process your information to perform our contract with you (your account, subscription, progress and certificates), for legitimate interests that do not override your rights (security, spam prevention, fixing errors, understanding which pages help), with your consent where the law requires it (analytics and advertising cookies in consent regions, marketing email), and to meet legal obligations (tax and business records).
5. Retention
In short: voice audio goes after 90 days; your account stays until you delete it.
Raw voice note audio is deleted 90 days after upload; the transcript and summary stay with your notes. Accounts are never deleted automatically: if your subscription lapses, your progress and certificates wait for you. You can delete your account yourself from account settings, which erases your personal data, notes, and files, subject to records we must keep by law (such as tax records). Analytics and error logs are kept only as long as they are useful.
6. Your rights (GDPR, CCPA, Australian Privacy Principles)
In short: access, correct, export, delete. Self-serve where possible, by email otherwise.
Wherever you live, you can ask what we hold about you, have it corrected, or have it deleted. Under the EU and UK GDPR you also have rights to portability, restriction, and objection, and you can complain to your local supervisory authority. Under the CCPA, California residents have the right to know, delete, and not be discriminated against for exercising rights; we do not sell personal information, so there is nothing to opt out of. Under the Australian Privacy Principles you can access and correct your information and complain to the OAIC (oaic.gov.au) if you believe we have mishandled it. Self-serve: download everything from the data export in account settings, and delete your account from the same page. For anything else, email support@nextversity.com and a real person will handle it.
7. International transfers and security
In short: your data crosses borders to the providers above, protected in transit and at rest.
Our providers store and process data in various countries, including the United States and Australia. Where data leaves a region with transfer rules (like the EU or UK), it moves under recognized safeguards such as standard contractual clauses. Personal information is encrypted in transit and at rest, and access inside Nextversity is limited to what the job requires.
8. Cookies
In short: covered in their own policy.
What the site stores on your device, and the consent choices around it, are covered in the cookie policy.
Questions? Contact us. See also the terms of service, the refund policy and the cookie policy.