Privacy policy

At NimbleX ("we", "us", or "our"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use NextFeed (the "Service"), a software-as-a-service platform for ecommerce product feed management, optimization, and distribution. By using the Service, you consent to the data practices described in this policy.

1. Information We Collect

We collect information you provide directly to us, as well as data collected automatically when you interact with the Service.

• Account Information: Name, email address, company name, password (hashed), and authentication credentials when you register or sign in.
• Payment Information: Billing details such as credit card number and billing address. Payment data is processed and stored by our PCI-compliant payment processor (Stripe); we do not store full card numbers on our servers.
• Product Feed Data: Catalog data, product attributes, images, pricing, inventory levels, and channel configurations you connect to or upload through the Service.
• Usage Data: Log data, IP address, browser type, pages visited, time spent, and interaction patterns collected via cookies and similar technologies.
• Communication Data: Records of correspondence when you contact us for support, including email content and attachments.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain the Service.
• To process transactions and send billing confirmations.
• To personalize your experience and improve platform functionality.
• To communicate with you about product updates, security notices, and support responses.
• To detect, prevent, and address fraud, abuse, and security vulnerabilities.
• To comply with legal obligations and enforce our agreements.

3. Data Sharing & Third Parties

We do not sell, rent, or trade your personal information. We share data only with the following categories of recipients:

• Hosting & Infrastructure: Cloud hosting providers (e.g., AWS, Google Cloud) that store data on our behalf under strict data processing agreements.
• Payment Processing: Stripe for secure payment handling.
• Analytics: Privacy-respecting analytics tools that help us understand usage patterns.
• Legal & Compliance: Government authorities or regulators when required by law, court order, or to protect our rights and the safety of our users.

4. Data Security

NextFeed implements industry-standard technical and organizational measures to protect your data, including:

• TLS/SSL encryption for all data in transit.
• AES-256 encryption for sensitive data at rest.
• Role-based access controls and least-privilege principles for our team.
• Regular security audits and penetration testing.
• Multi-factor authentication for administrative access.

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We encourage you to use a strong, unique password and enable two-factor authentication where available.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. Account data is retained while your account is active. You may request deletion of your account and associated data at any time by contacting us.

6. Your Rights

Depending on your jurisdiction (including under GDPR, CCPA/CPRA, and similar privacy laws), you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data ("right to be forgotten").
• Restriction: Request restriction of processing in certain circumstances.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests or for direct marketing.
• Withdraw Consent: Withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at support@nx-feed.com. We will respond within 30 days.

7. Cookies & Tracking Technologies

We use cookies and similar technologies to operate the Service, remember preferences, and analyze usage. You can control cookies through your browser settings. Disabling certain cookies may affect platform functionality.

8. Children's Privacy

The Service is not directed to children under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.

9. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including standard contractual clauses (SCCs) and adequacy decisions where applicable.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on the Service. The "Last updated" date above reflects the most recent revision.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, contact us at: