Privacy Policy

1. Scope

This Policy applies to our website nextHit.co, web app, dashboards, APIs, mobile or desktop clients, and any related services that link to or reference this Policy (collectively, the "Service").

2. Information We Collect

Cookies. We use first‑party and third‑party cookies to keep you logged in, remember settings, and analyse usage (see § 7).

3. How We Use Your Information

We process personal information to:

1. Provide the Service – authenticate you, generate analytics, deliver reports;
2. Process Payments – via our payment processor Stripe;
3. Maintain & Improve – monitor performance, debug, develop new features;
4. Communicate – send transactional e‑mails, product updates, and respond to inquiries;
5. Marketing (Optional) – send newsletters or promotional content with your consent; you can opt out anytime;
6. Legal & Security – detect fraud, enforce our Terms of Service, comply with legal obligations.

4. Legal Bases (EEA/UK Users)

If you are in the European Economic Area or United Kingdom, we process your data under the following legal bases:

• Contractual necessity – to provide the Service;
• Legitimate interests – to maintain security, improve the Service, and prevent fraud;
• Consent – for optional marketing e‑mails and cookie categories;
• Legal obligation – to comply with applicable laws, such as tax regulations.

5. Sharing & Disclosure

We do not sell your personal information. We share it only as described:

If Goforce Inc. undergoes a merger, acquisition, or asset sale, we will notify you before your data is transferred and becomes subject to a different policy.

6. Data Retention

7. Cookies & Tracking Technologies

We use four categories of cookies:

1. Strictly Necessary – authentication tokens (cannot be disabled);
2. Performance – PostHog analytics;
3. Functional – remember UI settings (e.g., dark mode);
4. Marketing – optional newsletters / referral tracking.

You can manage cookies via your browser or our cookie‑preferences banner.

8. Your Rights & Choices

Depending on your jurisdiction, you may have rights to:

• Access – obtain a copy of your personal data;
• Rectify – correct inaccurate or incomplete data;
• Delete – request erasure of personal data;
• Restrict or Object – limit or challenge certain processing;
• Portability – receive data in a structured, machine‑readable format;
• Opt Out of Marketing – unsubscribe via any marketing e‑mail;
• Do Not Sell or Share (California) – we do not sell, but you may exercise your CPRA rights at privacy (at) nexthit (dot) co.

We will respond within 30 days (or as required by law).

9. Security

We employ industry‑standard measures including TLS encryption in transit, AES‑256 at rest, role‑based access controls, and periodic penetration testing. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. International Transfers

We are headquartered in the United States. When we transfer data from the EEA/UK or other regions with differing laws, we rely on Standard Contractual Clauses, adequacy decisions, or your explicit consent.

11. Children's Privacy

The Service is not intended for children under 16. We do not knowingly collect personal data from children. If we learn that a child has provided us data, we will delete it promptly.

12. Changes to This Policy

We may update this Policy from time to time. We will post the revised version with an updated "Effective Date" and, if the changes are material, provide 30 days' prior notice (e.g., by e‑mail or in‑app).

13. Contact Us

If you believe we have not resolved your privacy concern, you have the right to lodge a complaint with your local supervisory authority or data‑protection regulator.