Privacy Policy

NextLeadium ("we", "us") is an executive practice platform. For the purposes of GDPR, we are the data controller for the personal data you provide when using the platform. Contact: support@nextleadium.com.

• Account data: your email address and password credentials. Accounts created earlier through a third-party sign-in provider may also hold the name and profile picture that provider supplied at the time.
• Application data: the information you submit in the Access Application: full name, current role/title, company stage, years of experience, motivation, and an optional LinkedIn URL.
• Practice data: the free-text commitments and rationales you write, the Cash and Team Capacity you commit, the resulting company state, and the Board, Coach and scenario text generated for you. Submitted decisions are permanent and cannot be edited.
• Feedback: messages you send through the in-app feedback tool, plus the page and browser details at the time of submission.
• Technical data: basic logs (IP, timestamps, user agent) generated by our hosting and infrastructure providers.

• To operate your account and the practice experience.
• To review access applications and communicate the decision.
• To improve the platform based on your feedback.
• To comply with legal obligations and protect the service against abuse.

Legal bases (GDPR Art. 6): performance of a contract (running your account), legitimate interest (improving and securing the product), and consent (marketing communications, if any).

To run the practice, parts of your practice data are sent to external AI processing services operated by third-party AI/model providers. This includes your commitment and rationale, the scenario, and relevant context from your earlier decisions. It is used to interpret the meaning of a decision, write your Board members' reactions and Coach observations, and generate new scenarios for your company.

Company Pulse scores, resource balances and consequence outcomes are calculated by fixed rules in our own code, not by AI. Please do not enter confidential business information or personal data about other people into free-text fields.

We rely on a small number of infrastructure providers to host the application, run the database and authentication layer, send emails, and provide the AI processing described above. These providers process personal data on our behalf and may process it outside your country, including in the United States.

We send account emails (sign-up confirmation, password reset, email change and similar security messages) and emails about your access application decision (approved or declined). We do not currently send marketing emails.

Account, practice and feedback data are kept for as long as your account exists. When you delete your account, we delete your sign-in account and the application, practice and feedback records linked to it from the live system. Limited operational records, such as email delivery logs containing your email address, and copies held in our providers' backups may persist for a period afterwards.

Under GDPR, you have the right to access, rectify, erase, restrict, or port your personal data, and to object to processing. Signed-in users can export their data and delete their account from Settings. For anything else, email support@nextleadium.com. You also have the right to lodge a complaint with your national data protection authority.

Your sign-in session is kept in your browser's local storage, not in a cookie. Our hosting provider may set a strictly necessary security cookie to protect the site against automated abuse. No advertising or third-party tracking cookies are set.

If we make material changes to this policy, we will notify you by email and update the effective date above.