Privacy Policy

Last Updated: October 19, 2025

1. Overview

NextPayments.cc ("we", "us", "our") operates a subscription and payment reminder tracking service. We are committed to protecting your personal information and your right to privacy.

This Privacy Policy applies to all information collected through our website (https://nextpayments.cc) and related services (collectively, the "Service").

Key Points:

• We collect minimal personal information necessary to provide the service
• We do NOT collect full credit card numbers or sensitive financial credentials
• We use third-party services for email delivery and analytics
• You have rights to access, modify, and delete your data
• We do NOT sell your personal information

2. Information We Collect

2.1 Information You Provide to Us

We collect information that you voluntarily provide when you register for an account or use our service:

2.2 Information Automatically Collected

When you access our service, we automatically collect certain information:

• Log Data: IP address, browser type, operating system, pages visited, time and date of visits
• Device Information: Device type, unique device identifiers
• Usage Data: Features used, actions taken within the service
• Cookie Data: Information stored in cookies (see Section 7 for details)

3. How We Collect Information

3.1 Direct Collection

We collect information directly from you when you:

• Create an account and provide registration information
• Enter payment tracking information into the service
• Update your account settings or preferences
• Contact us for support or feedback
• Subscribe to email communications

3.2 Automatic Collection

We automatically collect information through:

• Cookies and similar technologies (see Section 7)
• Google Analytics for usage statistics
• Server logs for security and performance monitoring

3.3 Third-Party Sources

We may collect information from third-party services:

• Currency exchange rate providers for multi-currency support
• Email delivery service (Resend) for email deliverability metrics

4. How We Use Your Information

We use your information for the following purposes:

4.1 To Provide and Maintain the Service

• Create and manage your account
• Store and organize your payment tracking information
• Calculate reminder dates based on your timezone
• Send payment reminder emails at scheduled times
• Generate calendar export files (iCal format)
• Display currency conversions using your preferred currency

4.2 To Improve and Optimize the Service

• Analyze usage patterns to improve features
• Monitor and analyze trends and user preferences
• Identify and fix bugs or technical issues
• Conduct research and development for new features

4.3 To Communicate with You

• Send payment reminder notifications
• Respond to your inquiries and support requests
• Send account-related notifications (password resets, security alerts)
• Notify you of service updates or changes to our policies

4.4 For Security and Legal Compliance

• Detect, prevent, and address fraud or security issues
• Enforce our Terms and Conditions
• Comply with legal obligations and law enforcement requests
• Protect the rights, property, and safety of NextPayments.cc and our users

5. Data Storage and Security

5.1 Data Storage

Your data is stored on secure servers provided by our hosting infrastructure:

• Database: PostgreSQL database with encryption at rest
• Passwords: Hashed using industry-standard algorithms (never stored in plain text)
• Backups: Regular automated backups for disaster recovery

5.2 Security Measures

We implement reasonable security measures to protect your information:

• Encryption: HTTPS/TLS encryption for data transmission
• Authentication: Secure session management and token-based authentication
• Access Controls: Limited employee access to personal data on a need-to-know basis
• Monitoring: Regular security audits and monitoring for suspicious activity
• Updates: Regular software updates and security patches

5.3 Security Limitations

6. Third-Party Services

We use the following third-party services that may collect or process your data:

6.1 Resend (Email Delivery)

• Purpose: Sending payment reminder emails and account notifications
• Data Shared: Email addresses, email content (payment reminders)
• Privacy Policy: https://resend.com/legal/privacy-policy

6.2 Google Analytics

• Purpose: Website analytics and usage statistics
• Data Shared: Anonymous usage data, page views, session duration
• Data Collection: Uses cookies to track visitor behavior
• Privacy Policy: https://policies.google.com/privacy
• Opt-Out: Google Analytics Opt-out Browser Add-on

6.3 Currency Exchange Rate APIs

• Purpose: Providing real-time currency conversion rates
• Data Shared: Currency codes only (no personal information)

6.4 Primer CSS (Content Delivery Network)

• Purpose: User interface styling
• Data Shared: Your IP address may be visible to the CDN provider

Third-Party Responsibility: We are not responsible for the privacy practices of third-party services. We encourage you to review their privacy policies before using our service.

7. Cookies and Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us provide and improve our service.

7.2 Types of Cookies We Use

7.3 Managing Cookies

You can control cookies through your browser settings:

• Accept or reject cookies: Most browsers allow you to refuse cookies
• Delete existing cookies: You can delete cookies already stored on your device
• Third-party cookies: You can block third-party cookies (like Google Analytics)

Note: Disabling essential cookies may affect the functionality of the service, including the ability to log in to your account.

7.4 Local Storage

We use browser local storage to save your theme preference (light/dark mode). This information is stored only on your device and is not transmitted to our servers.

8. Email Communications

8.1 Types of Emails

We send the following types of emails:

• Payment Reminders: Scheduled notifications about upcoming, current, or past-due payments
• Transactional Emails: Account confirmations, password resets, security alerts
• Service Updates: Important changes to the service or policies

8.2 Email Addresses

We send emails from addresses using the nextpayments.cc domain and its subdomains (e.g., noreply@nextpayments.cc, notifications@m25.nextpayments.cc).

8.3 Unsubscribe Options

• Payment Reminders: Can be disabled per payment or entirely in account settings
• Service Updates: Optional; can unsubscribe via link in email footer
• Transactional Emails: Cannot be disabled (required for account security)

8.4 CAN-SPAM Compliance

All emails comply with the CAN-SPAM Act:

• Clear identification of the sender (NextPayments.cc)
• Accurate subject lines
• Clear unsubscribe mechanism for non-transactional emails
• Prompt processing of unsubscribe requests (within 10 business days)

9. Data Sharing and Disclosure

9.1 We Do NOT Sell Your Data

9.2 When We May Share Your Information

We may share your information only in the following limited circumstances:

• Service Providers: Third-party services that help us operate the service (email delivery, hosting, analytics) under strict confidentiality agreements
• Legal Requirements: When required by law, subpoena, or court order
• Protection of Rights: To protect the rights, property, or safety of NextPayments.cc, our users, or the public
• Business Transfers: In connection with a merger, acquisition, or sale of assets (users will be notified)
• With Your Consent: When you explicitly authorize us to share information

9.3 Aggregated and Anonymized Data

We may share aggregated or anonymized data that cannot identify you individually for:

• Industry research and analysis
• Service improvement and development
• Public reporting and statistics

10. Data Retention

10.1 How Long We Keep Your Data

We retain your personal information for as long as necessary to provide the service and fulfill the purposes described in this Privacy Policy:

• Active Accounts: Data retained as long as your account is active
• Closed Accounts: Data may be retained for up to 90 days after account closure for backup and recovery purposes
• Legal Obligations: Some data may be retained longer to comply with legal or regulatory requirements
• Email Logs: Email delivery logs retained for up to 90 days
• Usage Analytics: Anonymous analytics data may be retained indefinitely

10.2 Data Deletion

You may request deletion of your data at any time by:

• Deleting your account through account settings
• Contacting us at privacy@m25.nextpayments.cc

Upon deletion request, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

11. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

11.1 General Rights

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a machine-readable format
• Objection: Object to processing of your personal information
• Restriction: Request restriction of processing in certain circumstances
• Withdraw Consent: Withdraw consent where processing is based on consent

11.2 How to Exercise Your Rights

To exercise any of these rights, please contact us at:

• Email: privacy@m25.nextpayments.cc
• Subject Line: "Privacy Rights Request"
• Include: Your account email, specific request, and verification information

We will respond to your request within 30 days.

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

12.1 Right to Know

You have the right to request:

• Categories of personal information we collect
• Specific pieces of personal information we hold about you
• Sources from which we collect personal information
• Purposes for collecting or selling personal information
• Categories of third parties with whom we share personal information

12.2 Right to Delete

You have the right to request deletion of personal information we have collected from you, subject to certain exceptions.

12.3 Right to Opt-Out of Sale

We do NOT sell your personal information. If our practices change, we will update this policy and provide a clear "Do Not Sell My Personal Information" link.

12.4 Right to Non-Discrimination

We will not discriminate against you for exercising your CCPA rights, including by:

• Denying goods or services
• Charging different prices or rates
• Providing different levels of quality
• Suggesting you will receive a different price or quality of services

12.5 Authorized Agents

You may designate an authorized agent to make a request on your behalf. We may require verification of the agent's authority.

12.6 Verification Process

To protect your privacy, we will verify your identity before processing requests by:

• Matching the email you provide with our records
• Requesting additional verification information if necessary

13. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR):

13.1 Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: You have given explicit consent (e.g., email marketing)
• Contract: Processing is necessary to perform our contract with you (providing the service)
• Legitimate Interests: We have a legitimate interest (e.g., fraud prevention, service improvement)
• Legal Obligation: Processing is required by law

13.2 GDPR Rights

You have the following rights under GDPR:

• Right to Access: Obtain confirmation of whether we process your data and access to that data
• Right to Rectification: Correct inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: Request restriction of processing under certain conditions
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time (where processing is based on consent)
• Right to Lodge a Complaint: File a complaint with your local data protection authority

13.3 Data Protection Officer

For GDPR-related inquiries, you may contact our privacy team at:

• Email: privacy@m25.nextpayments.cc
• Subject: "GDPR Inquiry"

13.4 Supervisory Authority

You have the right to lodge a complaint with a supervisory authority in your country of residence, place of work, or place of alleged infringement.

14. Children's Privacy

14.1 Age Restrictions

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

14.2 Parental Consent

If you are between 13 and 18 years old, you should have your parent or guardian's permission before using our service.

14.3 If We Learn of Child Data

If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information promptly.

14.4 Parental Rights

If you believe your child has provided personal information to us, please contact us at privacy@m25.nextpayments.cc so we can delete the information.

15. International Data Transfers

15.1 Data Storage Location

Your information may be transferred to and stored on servers located outside of your country of residence, where data protection laws may differ.

15.2 Safeguards for International Transfers

When transferring data internationally, we implement appropriate safeguards, including:

• Using service providers that comply with recognized data protection frameworks
• Implementing standard contractual clauses approved by regulatory authorities
• Ensuring adequate security measures are in place

15.3 Your Consent

By using our service, you consent to the transfer of your information to countries outside of your residence, including countries that may not have the same data protection laws as your jurisdiction.

16. Changes to This Privacy Policy

16.1 Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

16.2 Notification of Changes

When we make material changes to this Privacy Policy, we will:

• Update the "Last Updated" date at the top of this page
• Notify you via email at the address associated with your account
• Display a prominent notice on our website or within the service
• Require your consent for changes that materially affect your rights

16.3 Your Responsibility

We encourage you to review this Privacy Policy periodically. Your continued use of the service after changes are posted constitutes your acceptance of the updated Privacy Policy.

16.4 Version History

Previous versions of this Privacy Policy may be available upon request.

17. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Privacy Inquiries: privacy@m25.nextpayments.cc
General Support: support@m25.nextpayments.cc
Legal Matters: legal@m25.nextpayments.cc
Twitter/X: @NextPaymentsCC

We will respond to your inquiry within 30 days.