Privacy Policy

1. Scope

This Privacy Policy applies to all individuals and entities who access or use the Services, regardless of their country of residence. This Policy does not apply to:

- Third-party websites, applications, or services that may be linked from or integrated with our Services;

- Data collected by third parties independently of their integration with Nextbrowser;

- Any use of your data by external automation scripts or web pages visited during the execution of browser tasks.

We are not responsible for the privacy practices of such third parties, and we encourage you to review their privacy policies separately.

2. Information We Collect

A. Information You Provide

We collect information you voluntarily submit to us, including:

- Account Registration: Your email address and a hashed version of your password;

- User Input: Task names, configurations, workflows, or any custom scripts or data you upload to our platform;

- Communication: Any communication with our support team, community, or feedback forms.

We strongly advise users not to upload or process sensitive personal information unless absolutely necessary.

B. Information Collected Automatically

When you interact with our Services, we may automatically collect:

- Device data (e.g., IP address, browser type, operating system, screen resolution);

- Usage data (e.g., clicks, interactions, time on page, task execution logs);

- Location data inferred from IP;

- Session IDs, cookies, and device identifiers.

This data is collected via third-party tools, including but not limited to:

- Amplitude

- Google Analytics

- Google Tag Manager

We do not combine this data with personal identifiers unless necessary to detect fraud, abuse, or technical issues.

C. Device and Environment Data from the Desktop App

When you are signed in, the Nextbrowser desktop app sends us information about the device and environment it runs on. This information is organized into the following groups:

- Language and region: the operating system's interface language, your preferred languages, regional format, time zone, and offset from UTC;

- Keyboard layouts: the list of keyboard layouts installed in the operating system and which of them is the default. We never collect keystrokes or the text you type;

- Device: operating system name, version, and build; architecture; CPU model and number of cores; amount of RAM; graphics adapters (name, vendor, and driver version); and the number, resolution, and scaling of your displays;

- App setup: versions of the Nextbrowser app, the nbc command-line tool, and the browser runtimes; which types of AI agents are connected (the agent type only); whether Multilogin is connected; and the number of workspaces and browser profiles;

- Network location: country, region, city, and internet provider, which we derive from the IP address the app connects from. The IP address itself is not stored with this data.

We use this data to resolve support requests faster, to tune our anti-fraud checks and browser fingerprints to the environments our users actually run, and to decide which operating systems, languages, and regions to support.

The app sends this data only while you are signed in: at most once a day, and again when you change these settings. The data is linked to your account and to the installation of the app it came from.

You can turn each group off separately in the app under Settings → Privacy → Device data. When you turn a group off, the app stops sending it and the data stored for that group is deleted. If you use the app in the European Union or the European Economic Area, these settings are off until you turn them on.

If an installation of the app has not reported to us for 12 months, we delete the data stored for that installation.

This data never includes your computer name, your operating system user name, file paths, the list of programs installed on your computer (other than the Nextbrowser components listed above), your browsing history, the contents of your clipboard, or your keystrokes.

D. Error Reports from the Desktop App

When something fails in the Nextbrowser desktop app, the app sends us an error report so we can find and fix the problem. A report contains the error code and a short technical description from which we remove your user folder in file paths, query strings and credentials in web addresses, email addresses, and access keys; the versions of the app, of the nbc command-line tool, and of the operating system; the processor architecture; an identifier of the installation; and a short list of the app's recent actions (for example, that a browser profile was started). It never contains the content of your chats, prompts, web pages, or files.

When a connection fails (for example, the app cannot reach our service or a browser profile cannot connect through its proxy), the report also describes how your computer's network is set up, so that we can tell a problem on our side from one caused by a VPN or proxy: whether a VPN tunnel carries your traffic, whether a system or environment proxy is set, what kind of DNS servers are in use, how our service and our proxy provider's gateway resolve, and whether they can be reached. This part never includes IP addresses, the addresses of your VPN, proxy, or DNS servers, the names of your networks, or the names of VPN or other apps installed on your computer.

Error reports are linked to the installation of the app and, when you are signed in, to your account. You can turn them off in the app under Settings → Privacy → Send error reports.

3. How We Use Your Information

We use your data to:

- Provide, maintain, and improve the functionality and performance of our Services;

- Authenticate and manage user accounts securely;

- Execute and store automated browser tasks initiated by users;

- Analyze usage trends and troubleshoot performance or security issues;

- Prevent misuse, fraud, and unauthorized access;

- Comply with legal and regulatory obligations.

We may also use anonymized or aggregated data for research, analytics, and product improvement purposes. This data does not identify individual users.

We do not use your personal data for profiling or automated decision-making that produces legal or similarly significant effects.

4. Data Storage and Processing

All data is stored securely on Amazon Web Services (AWS), specifically in the us-east-1 region. Our services operate on Amazon Elastic Kubernetes Service (EKS) and Amazon RDS. Data backups are encrypted and regularly tested for integrity. We may process data outside your country of residence, subject to appropriate safeguards such as Standard Contractual Clauses or other legal mechanisms as required.

You acknowledge and agree that your data may be transferred to, stored in, and processed in jurisdictions that may not have the same level of data protection laws as your home country.

5. Sharing Your Information

We do not sell or rent your personal data to third parties. We may share your data with the following categories of recipients, under strict contractual and confidentiality obligations:

- Infrastructure & Cloud Providers: (e.g., AWS, Cloudflare);

- Analytics & Monitoring Tools: (e.g., Amplitude, Google Analytics);

- Customer Support Platforms or CRM systems;

- Legal or regulatory authorities, if required by applicable law, subpoena, or court order;

- Corporate Transactions: In the event of a merger, acquisition, sale, or asset transfer, user data may be disclosed or transferred to the acquiring party under confidentiality obligations.

We take reasonable steps to ensure that third-party service providers implement comparable levels of data protection and comply with applicable privacy regulations.

6. Data Security

We maintain industry-standard security measures to protect your data, including:

- Encryption at rest and in transit (TLS 1.2 or higher);

- Password hashing using secure cryptographic algorithms;

- Role-based access control and logging of privileged activity;

- Firewall, intrusion detection, and rate-limiting measures.

Despite these measures, no method of transmission over the Internet or method of electronic storage is 100% secure. We disclaim any liability for unauthorized access, disclosure, or loss of data beyond our reasonable control.

7. Data Retention

We retain your personal data for as long as (i) You maintain an active account with us, (ii) It is necessary to provide the Services, and (iii) It is required to comply with our legal obligations or resolve disputes.

After your account is deleted or becomes inactive, we may retain data in backups or archives for a limited period, subject to legal or operational requirements. Task execution logs and telemetry may be retained in anonymized or aggregated form for statistical and performance analysis.

Device and environment data from the desktop app (Section 2.C) is deleted for any installation of the app that has not reported to us for 12 months.

Error reports from the desktop app (Section 2.D) are deleted 30 days after we receive them.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

- Right of Access: Request a copy of your personal data;

- Right to Rectification: Request correction of inaccurate or incomplete data;

- Right to Erasure: Request deletion of your data, subject to legal or legitimate business interests;

- Right to Restrict Processing: Temporarily limit processing in certain cases;

- Right to Data Portability: Request your data in a structured, machine-readable format;

- Right to Object: Object to certain types of data processing (e.g., direct marketing);

- Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at legal.public@nextbrowser.com. We may require identity verification and reserve the right to decline requests that are manifestly unfounded or excessive.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to (i) Authenticate users and maintain session states, (ii) Personalize the user experience, (iii) Measure performance and usage metrics, and/ or (iv) Detect security threats or abuse.

You can manage cookie preferences through your browser settings. Disabling cookies may impact the functionality of certain Services.

We may also use local storage or similar mechanisms in web applications to store temporary data required for automation workflows.

10. Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy at any time. If we make material changes, we may notify you via (i) A prominent notice on the website or application dashboard, or (ii) Email notification (if you have provided an email address).

Your continued use of the Services after such changes constitutes your acknowledgment and acceptance of the updated policy.

11. Contact Us

For any questions or concerns about this Privacy Policy or our data practices, you may contact us at legal.public@nextbrowser.com.

We will respond within a reasonable timeframe, and in accordance with applicable data protection laws.