Privacy Policy

    Version 2026-06-09

    Next Day Sales, operated by Four49 Media LLC ("we," "us," or "our"), respects your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard personal information in connection with our website and platform (the "Service"). It is designed to meet the disclosure requirements of the EU General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA).

    1. Controller vs. processor roles

    App-level data (your account, billing, usage of the Service): Four49 Media LLC is the data controller.

    Customer-end data (leads, prospect messages, embedded-widget interactions, AI chat transcripts, crawled site content): the customer workspace that collected the data is the controller. Four49 Media LLC acts as processor on the workspace's behalf, governed by our Data Processing Agreement and the Sub-processor List.

    2. Information we collect

    Information you provide

    • Account information: name, email, company, industry, role.
    • Profile & branding: logo, brand colors, business brief, marketplace profile.
    • Content: pricing tables, proposals, calculators, sales guides.
    • Payment data: processed by Stripe — we never store card numbers.
    • Communications: support messages and feedback you send us.

    Information collected automatically

    • Usage data: pages visited, features used, AI credit usage.
    • Device data: browser, OS, screen resolution, IP address.
    • Cookies / local storage: session (widget dismiss, consent acknowledgment, exit prompt shown), theme, consent state.

    Information collected on behalf of customer workspaces

    • Leads submitted to a customer's proposal or embedded site widget (name, email, phone, message, consent metadata).
    • Anonymous visit telemetry (page views, session id) on customer sites.
    • AI chat / guided-search transcripts on customer sites.

    3. Lawful basis (GDPR)

    • Contract: to provide the Service to you and process your subscription.
    • Legitimate interest: security, fraud prevention, product analytics, service improvement.
    • Consent: non-essential cookies / trackers on customer sites; marketing communications.
    • Legal obligation: tax, accounting, anti-fraud, lawful requests.

    4. How we use information

    • Operate, maintain, and improve the Service.
    • Process subscriptions and payments.
    • Generate AI content using your business context.
    • Send lead notifications and transactional emails on behalf of customer workspaces.
    • Track proposal views and dashboard analytics.
    • Send service updates, security alerts, and policy changes.

    5. Sharing & disclosure

    We do not sell personal information. We share data with:

    • Sub-processors listed on our Sub-processor page.
    • Reseller marketplace: published seller profiles are publicly visible.
    • Shared proposals: proposal content shared via link is publicly accessible.
    • Legal requirements: when required by law or to protect rights and safety.

    6. International data transfers

    Our infrastructure and sub-processors are primarily based in the United States. When personal data is transferred outside the EEA or UK, we rely on the Standard Contractual Clauses (2021) and equivalent UK addendum. See the Sub-processor list for processor locations and transfer mechanisms.

    7. Data retention

    Account data is retained while your account is active. Deleting your account triggers a 7-day grace period followed by hard deletion, with backup expiry within 30 days.

    Lead and analytics data in customer workspaces is automatically purged on a nightly schedule based on each workspace's configured retention period (default: 12 months for leads, 6 months for analytics — workspace-configurable between 3–36 months and 1–24 months respectively).

    Email send logs are retained for 13 months for deliverability dispute resolution.Suppression lists (bounces, complaints, unsubscribes) are retained indefinitely as required by anti-spam regulations.

    8. Your rights

    Depending on your jurisdiction you may have the right to:

    • Access a copy of your data.
    • Rectify inaccurate information.
    • Erase ("right to be forgotten") your account and data.
    • Restrict or object to processing.
    • Data portability — export in a structured machine-readable format.
    • Withdraw consent at any time.
    • Lodge a complaint with your data protection authority.

    If you are the account holder: use Settings → Privacy to update your data, configure retention, or schedule account deletion.

    If your data is held in a customer's workspace (e.g. you filled in a contact form on a customer site): submit a request at /privacy-request. We forward verified requests to the relevant workspace owners, who must action them within 30 days.

    9. California privacy rights (CCPA / CPRA)

    California residents have the rights of access, deletion, correction, and to know what categories of personal information are collected and shared. We do not sell or share personal informationwithin the meaning of the CCPA and therefore do not provide a "Do Not Sell or Share My Personal Information" link. To exercise your rights, use the channels in Section 8.

    10. Security

    • Encrypted transmission (HTTPS/TLS 1.2+).
    • Encryption at rest at our hosting provider.
    • Row-level security on every database table.
    • Hashed IP addresses for proposal analytics.
    • PCI-DSS-compliant payments via Stripe.
    • Security incident response with 72-hour breach notification to controllers.

    11. Cookies & tracking

    On nextdaysales.com we use essential cookies for authentication and Google Analytics for anonymized usage statistics. You can opt out via Google's opt-out add-on. We do not use third-party advertising trackers.

    On customer sites that embed our widgets, our widgets present a consent banner to EU/EEA/UK visitors before storing any non-essential identifiers. Widgets may render inline, as a floating button, or as a persistent bottom bar; all modes are dismissible without consequence.

    12. Children's privacy

    The Service is not intended for individuals under 16. We do not knowingly collect data from children.

    13. Prohibited data

    You may not submit Protected Health Information (PHI) or any data subject to HIPAA, financial account credentials, government-issued identifiers, or other sensitive categories prohibited by our Terms of Service. Next Day Sales is not a HIPAA Business Associate and signs no BAAs.

    14. Changes

    We update this policy as the Service evolves. Material changes will be communicated by email or in-app notification and require renewed acceptance.

    15. Contact

    Data controller: Four49 Media LLC.
    Privacy contact: privacy@nextdaysales.com