← Back to NextLeap CORE

Privacy Policy & Data Disclosure

Last Updated: September 14, 2026 | Effective Date: September 14, 2026

1. Executive Overview

NextLeap CORE ("we", "our", or "us") provides enterprise-grade AI infrastructure for startup founders and capital allocators at https://nextleap.global. We are committed to maintaining the highest standards of data security, user privacy, and compliance with global regulatory frameworks.

This Privacy Policy details how we collect, process, store, and safeguard your personal information when you sign in via Google OAuth or utilize our services.

2. Information We Collect via Google OAuth

When you authenticate into NextLeap CORE using Google OAuth 2.0, we request access strictly to non-sensitive identity scopes. The specific data points collected include:

  • Email Address: Used as your primary account identifier, session token anchor, and for operational notifications.
  • Full Name & Profile Name: Used to personalize your workspace and display your identity on internal deal room cards.
  • Profile Picture URL: Displayed within your secure user dashboard avatar.
  • Google OAuth ID / Subject Identifier: A cryptographic token used to verify authentic logins and prevent account spoofing.

Google User Data & AI Disclosure

The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements. We do not use, transfer, or sell Google user data to train or improve generalized AI/ML models.

3. How We Use Your Information

Information collected via Google OAuth and direct interaction is strictly used for the following legitimate business purposes:

  • Authenticating user sessions and enforcing Row-Level Security (RLS) across database tables.
  • Auto-provisioning workspace environments (Founder Studio or Investor Terminal).
  • Managing credit ledger usage and tracking activity history within your isolated workspace.
  • Sending critical platform updates, security alerts, and data room access confirmations.

4. Enterprise Data Security & AI Non-Training Guarantee

AES-256 Encryption: All user data, pitch decks, and financial metrics are encrypted at rest using AES-256 and in transit using TLS 1.3 encryption protocols.

No Selling of Data: NextLeap CORE does NOT sell, rent, lease, or trade your personal information or pitch deck metrics to any third parties or advertisers under any circumstances.

AI Non-Training Commitment: Data extracted from uploaded files or user profiles is processed strictly for real-time analysis within your explicit workspace session. Your data is NEVER used to train, fine-tune, or improve public or proprietary LLM models.

5. User Rights & Data Deletion Request Process

In accordance with GDPR and global privacy standards, you retain full ownership and control over your personal data. You have the right to:

  • Request a full export of all personal data and workspace metrics held in our database.
  • Revoke NextLeap CORE access permissions at any time via your Google Account Security Settings.
  • Request permanent deletion of your account, workspace records, and stored files.

To submit a formal data deletion or account removal request, please email our Privacy Compliance Team at:

privacy@nextleap.global

Data purge requests are processed and confirmed within 48 business hours.

6. Contact Information

NextLeap CORE — Global Infrastructure & AI Capital Allocation

Website: https://nextleap.global

Privacy Email: privacy@nextleap.global