Privacy
Policy

We collect the data needed to operate the website, process purchases, provide the Software, protect the service, and support customers:

• Account and contact data — email address, password (stored only as a cryptographic hash), company name, postal address, VAT number, and correspondence or support requests.
• Purchase and license data — the license type and products purchased, license key, payment reference and payment status. Card details are processed by Stripe and are not stored on our servers.
• Activation data — machine name and identifier, installed product and version, activation, revocation, and license-validation/check-in records needed to operate the license service.
• Security and download records — IP address, user-agent, referrer, approximate download location, login activity, download-token activity, and administrative security records. We use this data to protect the service, investigate abuse, and provide support.

We do not currently collect crash reports, behavioural analytics, or general usage telemetry from the Software. If this changes, we will update this Policy and provide any notice or obtain any consent required by law before the new processing begins.

The Google Slides Helper uses Google OAuth to request the read-only https://www.googleapis.com/auth/presentations.readonly scope. It does not request permission to edit, create, or delete Google Slides presentations.

• What the Helper accesses — the selected presentation URL and ID, deck title and revision, slide order, rendered slide thumbnails, slide content needed to render those thumbnails, and speaker notes including their formatting.
• Why — solely to show the current, next, and subsequent slides and speaker notes in NextNote Display, and to refresh that information when the presentation changes.
• Local storage — the Helper stores its Google refresh token in macOS Keychain or Windows Credential Manager. It stores the last presentation URL, settings, a dedicated Chrome profile, and locally cached slide thumbnails in its application-data folder. The token is removed when you sign out; other local application data remains on the device until it is deleted from the device.
• Sharing — presentation data is sent only to NextNote Display instances selected or connected by you on your local network. Visionmill does not receive, read, sell, use for advertising, or otherwise disclose your presentation content.

NextNote's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google controls its own processing of Google account and Slides data under its own terms and privacy policy.

We use personal data to:

• create and administer accounts, process purchases, issue licenses, and provide downloads and Software updates;
• activate, validate, renew, revoke, and support licenses and installations;
• respond to enquiries and send transactional, security, and license-related notices;
• operate, secure, and improve the website and license service, including preventing fraud, unauthorised use, and abuse; and
• meet legal, accounting, tax, and regulatory obligations.

We do not sell personal data or use it for targeted advertising or profiling.

We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects. You need to provide the account, purchase, and license information required to enter into and administer a purchase or license; Google Slides access is optional, but necessary if you choose to use the Google Slides Helper.

We rely on the following legal bases under UK GDPR:

• Contract — where processing is necessary to provide the account, purchase, license, download, or support you request.
• Legitimate interests — to secure the service, prevent abuse and unlicensed use, maintain records, and operate and improve our business. We balance these interests against your rights and freedoms.
• Legal obligation — where we must retain or disclose information to comply with applicable law.
• Consent — where required, including optional marketing communications. You may withdraw consent at any time using the contact details below.

We do not sell or rent personal data. We use service providers where necessary to provide NextNote:

• Stripe — payment processing and payment-fraud prevention. Card information is processed directly by Stripe. Stripe privacy policy.
• IONOS — website hosting, email-related infrastructure, and database hosting.
• Google — Google OAuth, Google Slides API, Google Chrome, and Google Fonts. Google receives data needed to provide those services, including OAuth/API requests and technical information such as IP address.
• ipapi.co — approximate country and city lookup for download requests; the service receives the request IP address.
• jsDelivr and Cloudflare CDN — delivery of website icon and script resources; these services may receive your IP address and technical request information.

Some providers may process data outside the UK or EEA. Where a transfer is restricted by applicable data-protection law, we will use an approved transfer mechanism or other appropriate safeguard. You can contact us for further information about applicable safeguards.

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected. In practice, this means that account and license records are retained while the account or license remains active and afterwards where needed for support, accounting, tax, legal claims, fraud prevention, or legal compliance. Security and download records are retained for the period reasonably required to investigate security or service issues. We review retention using these criteria and delete or anonymise data when it is no longer needed.

Google Slides refresh tokens are retained in OS secure storage until you sign out or the token is revoked. The dedicated Chrome profile, cached slide images, and the last presentation URL are local device data and are retained until removed from that device.

We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

You have the following rights in relation to your personal data:

• Right of access — to request a copy of the data we hold about you
• Right to rectification — to request correction of inaccurate data
• Right to erasure — to request deletion of your data where there is no overriding legal basis for retention
• Right to restriction — to request that we limit how we use your data
• Right to object — to object to processing based on legitimate interests
• Right to data portability — to receive your data in a structured, machine-readable format

You may also withdraw consent at any time where we rely on consent. To exercise your rights, contact us at nextnote.co.uk or email support@nextnote.co.uk. We will respond within the time required by applicable law.

This Policy covers the NextNote website as well as the Software. We use essential cookies or equivalent local browser storage to maintain signed-in sessions, protect accounts, and support security features. We do not use advertising cookies or third-party behavioural analytics.

Our pages may load fonts, icons, and scripts from Google Fonts, jsDelivr, and Cloudflare CDN. Those providers may receive technical information, including your IP address, when your browser requests those resources. You can control or block cookies through your browser settings, although essential website features may then not work correctly.

We may update this Privacy Policy from time to time. Updated versions will be published at nextnote.co.uk/legal/privacy with a revised date. We encourage you to review this page periodically.

Where changes are material, we will make reasonable efforts to notify you directly.

Visionmill Limited

For any questions or requests relating to this Privacy Policy or your personal data, please contact us at nextnote.co.uk or email support@nextnote.co.uk.

All legal documents including our Software Licence Agreement and this Privacy Policy are available at nextnote.co.uk/legal.