Who we are
NextStage is a strategy, brand, and transformation consultancy based in Tel Aviv, Israel. This policy explains how we handle personal data collected through our website at nextstage.co and related services.
Contact: ben@nextstage.co
Data we collect
- Newsletter sign-up: Your email address, collected with your consent when you subscribe.
- AI-powered tools: Business information you enter into our interactive tools (e.g., brand audits, strategy assessments). Inputs are sent to the Anthropic (Claude) API to generate results.
- Meeting booking: Name, email, and scheduling details collected through Cal.com when you book a consultation.
- Analytics: We use Plausible Analytics, a privacy-focused, cookieless analytics service. It collects no personal data and does not track individual visitors.
- Contact form & email: Information you provide when reaching out to us directly.
- Platform connections (LinkedIn, Google): When you connect third-party accounts through our products, we collect OAuth access tokens, refresh tokens, and basic profile information (name, email, profile photo) from those platforms. We also access the data necessary to perform actions you authorize—such as publishing content to LinkedIn or saving documents to Google Drive on your behalf.
How we use your data
- Deliver and manage our newsletter
- Power AI-driven tools and return results to you
- Schedule and manage consultation meetings
- Improve our website and services based on aggregate analytics
- Respond to inquiries and provide support
- Publish content to third-party platforms (LinkedIn, Google Docs) when you explicitly initiate these actions
- Display engagement metrics and analytics from connected platforms
We do not sell your personal data to third parties.
AI tools — transparency disclosure
Our interactive tools use the Anthropic (Claude) API to process your inputs and generate outputs. Under Anthropic's commercial API terms, your inputs are not used to train their models. AI outputs are informational only, may contain inaccuracies, and should not be treated as professional advice. Please avoid entering confidential or sensitive personal data into these tools.
Platform actions on your behalf
When you connect LinkedIn, Google, or other platforms, our tools may publish content, read engagement metrics, and manage comments on your behalf—only when you explicitly initiate these actions. We do not post, modify, or access your platform data without your direct instruction. You can disconnect any platform at any time through your account settings, which immediately revokes our access.
Third-party processors
We use the following services to operate our website and deliver our services:
- Vercel — Website hosting and deployment
- Resend — Email delivery for newsletters
- Anthropic (Claude) — AI processing for interactive tools
- Cal.com — Meeting scheduling
- Plausible Analytics — Privacy-focused, cookieless website analytics
- Supabase — Database infrastructure
- LinkedIn — Content publishing and analytics when you connect your LinkedIn account
- Google (Drive, Docs, Calendar) — Document publishing, file storage, and scheduling when you connect your Google account
Legal basis for processing (GDPR)
- Consent: Newsletter subscription, AI tool usage, and platform connections such as LinkedIn and Google (you choose to provide your data and authorize access).
- Legitimate interest: Aggregate analytics to improve our website, and security measures to protect our services.
- Contractual necessity: Processing booking information to schedule meetings you request.
Data retention
- Newsletter: Your email is retained until you unsubscribe.
- AI tool inputs: Not stored long-term. Inputs are processed in real-time and not retained after your session.
- Analytics: Plausible stores only aggregated, anonymous data.
- Booking data: Retained as long as necessary to manage our relationship with you.
- Platform tokens: OAuth credentials are retained until you disconnect the platform from your account. Tokens are stored securely server-side and are never exposed to the client application.
- Published content: Content you publish through our tools to third-party platforms (LinkedIn, Google Docs) is governed by those platforms' own privacy policies once published.
International data transfers
Your data may be processed in the United States by our service providers (Anthropic, Resend, Vercel). Israel holds an adequacy decision from the European Commission, meaning data transfers from the EU to Israel are permitted under GDPR. For transfers to the US, our providers maintain appropriate safeguards as required by applicable law.
Your rights
Depending on your location, you may have the following rights regarding your personal data:
- GDPR (EU/EEA): Access, rectification, erasure, restriction of processing, data portability, and objection to processing. You may also lodge a complaint with your local data protection authority.
- CCPA (California): Right to know what data we collect, right to delete, and right to opt out of the sale of personal information. We do not sell personal information.
- Israel Protection of Privacy Law: Right to access and correct your personal data held in our databases.
To exercise any of these rights, contact us at ben@nextstage.co.
Cookies
We do not use cookies. Our analytics provider, Plausible, is fully cookieless. No cookie consent banner is needed.
Children
Our website and services are not directed at children under 16. We do not knowingly collect personal data from children.
Future product features
When you create an account or use our product features, additional data practices may apply. This policy will be updated to reflect any new data collection at that time.
Changes to this policy
We may update this policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.