Privacy statement

Who we are

NextWave is a trade name of Fast Solution, registered with the Dutch Chamber of Commerce (KvK) under number 67506127. For anything about privacy, you can reach us at hello@nextwave.works.

What this statement covers

This statement covers the personal data for which we ourselves decide why and how it is processed: from visitors to nextwave.works, from people who request a demo or a trial, and from users who log in to the platform.

For the email and data NextWave processes on behalf of a customer, that customer is the controller and we are the processor. The customer's own privacy statement and the data processing agreement we conclude with them apply to that.

Which data and why

• Demo or trial request: your first name, work email address and company name, your answers to the follow-up questions (which email system, how many messages, which line-of-business application), the page where you filled in the form and, if you came through a campaign, the campaign code or the click ID from Google or LinkedIn. We use this to contact you, prepare the demo or trial, and see which campaigns lead to requests. Legal basis: your request for a demo or trial, and our legitimate interest.
• Demo appointment: if you pick a time in the calendar, Cal.com processes your name, your email address, the chosen time and your answers as a note, so the appointment ends up in our calendar.
• Website visits: we measure visits with Plausible Analytics, without cookies and without data that can identify you. We only use your IP address to limit misuse of the forms; we do not store it with your request.
• Fonts: the site loads fonts from Google Fonts. In doing so, Google receives your IP address.
• Platform accounts: your name, email address and role, your securely stored login details and, if you switch it on, your second factor. What you change in the platform is recorded in an audit log. Legal basis: the agreement with your organisation and our legitimate interest in a secure platform.

How long we keep it

• A request that does not lead to working together is kept for up to twelve months after the last contact.
• If we do work together, we keep your contact details for as long as the agreement runs. Invoices and the related records are kept for seven years, because the law requires it.
• The platform audit log is kept for twelve months.
• Data we process on behalf of a customer is deleted no later than ninety days after the agreement ends, unless the customer asks for deletion sooner or the law requires us to keep it longer.

Who we share data with

We do not sell personal data. We only share it with service providers we need to deliver NextWave, and we have agreements with each of them about security and confidentiality.

• Railway — hosting of the platform, the database, file storage and backups. Everything is in their data centre in Amsterdam, the Netherlands.
• Anthropic (United States) — the language model that reads email, drafts replies and answers questions. Anthropic does not use what comes in through the API to train models.
• Voyage AI (United States) — builds the search index over a customer's knowledge.
• Resend — sends email from the platform, such as invitations and notifications.
• Sentry — error reports, so we notice a failure quickly.
• Cal.com — the calendar in which you schedule a demo.
• Plausible Analytics — visitor statistics without cookies.
• Google — the website's fonts.

Some of these parties are outside the EEA, mainly in the United States. Data only goes there on the basis of the standard contractual clauses, or of the Data Privacy Framework if the recipient is certified under it.

If a customer connects a service themselves, such as Microsoft 365, Gmail, monday.com, Slack or WhatsApp, that service processes data under the arrangements the customer has with that party.

Security

Connections are encrypted. Login details for connected systems are stored encrypted, separately per organisation. Every organisation has its own database schema, and that separation is tested with every build. Two-factor authentication is available, and changes in the platform are logged.

Your rights

You can ask us which data we hold about you, and have it corrected, deleted or transferred. You can also object to processing or ask us to restrict it. Email hello@nextwave.works; we reply within a month.

If it concerns data we process on behalf of a customer, we forward your request to that customer, because they decide on it.

If you disagree with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

Automated decisions

We do not take decisions about visitors or applicants that are based solely on automated processing and that affect you.

Cookies

nextwave.works does not place cookies of its own. What the site does store in your browser is described on the cookies page.

Changes and language

If anything changes in how we handle data, we update this statement; the date of the latest version is at the top. This statement is a translation of the Dutch version. If the two differ, the Dutch text applies.