1. Introduction
At NextEpi, we take your privacy seriously. This policy describes what data we collect, how we use it and what rights you have over it. We apply standards compatible with the Brazilian General Data Protection Law (LGPD) and the General Data Protection Regulation (GDPR).
2. Information collected
- Name
- Account identifier (Auth0)
- Basic social login information (Google)
- Series and content being tracked
- Episodes marked as watched
- User preferences and settings
- Premium subscription data
- Technical access information
- IP address (where applicable)
- Device and browser information (where applicable)
We only collect information necessary to provide and improve NextEpi's services.
3. Information we do not collect
- Full credit card numbers
- Payments are processed directly by Stripe
4. Legal basis for data processing
The processing of personal data by NextEpi is based on legal grounds set out by LGPD and GDPR, including:
- Performance of the service requested by the user
- Compliance with legal obligations
- Legitimate interest for platform improvement
- Consent where required
5. How we use your data
- Authentication and login
- Cross-device sync
- Sending notifications
- Payment processing
- Continuous platform improvements
6. Data sharing
We share data only with providers essential to the platform's operation:
Responsible for account authentication and security.
Responsible for subscription and payment processing.
Responsible for hosting and platform operations.
Services used to send notifications and communications.
We never sell or share personal data for commercial purposes with third parties.
7. Data security
NextEpi adopts technical and organizational measures to protect information against unauthorized access, loss, alteration, or improper disclosure.
- Encrypted communication (HTTPS)
- System access control
- Specialized authentication providers
- Infrastructure in protected environments
- Continuous security monitoring
8. Data retention
We retain your data while your account remains active or while necessary to provide the services.
After account deletion, data may be removed or anonymized in accordance with legal and operational requirements.
9. International data transfers
Some providers used by NextEpi may process information outside the user's country of residence.
When this occurs, we adopt measures compatible with LGPD and GDPR to ensure adequate levels of protection.
12. Communications and notifications
NextEpi may send notifications related to your account, tracked series, releases and important service information.
Users can manage communication preferences in the platform settings.
13. Account deletion
Users can request account deletion at any time.
⚠Account deletion does not automatically cancel active Premium subscriptions.
Subscription cancellation must be done separately through the subscription portal.
14. User rights
You have full control over your data and may request at any time:
- Access to your data
- Correction of information
- Account deletion
- Data portability
- Revoke granted consents
- Request information about data sharing
- Request data anonymization where applicable
15. Minors
NextEpi is not intended for users under 13 years of age and does not intentionally collect personal data from children.
16. Changes to this policy
This Privacy Policy may be updated periodically.
When relevant changes are made, we will notify users through appropriate channels.