Privacy Policy

1. Information We Collect

We collect information to provide, improve, and protect our Service. The types of information we collect include:

1.1 Information You Provide

• Account Information: Name, email address, password when you create an account.
• Payment Information: Billing details processed securely through Razorpay and PayPal (we do not store credit card numbers).
• User Content: Images, files, and projects you upload or create using the Service.
• Communications: Messages, feedback, or support requests you send us.

1.2 Automatically Collected Information

• Usage Data: Features used, actions taken, time spent, frequency of visits.
• Device Information: IP address, browser type, operating system, device identifiers.
• Cookies & Tracking: Session cookies, analytics cookies, and local storage (see Section 3).

1.3 Third-Party Information

• OAuth Providers: If you sign in via Google, GitHub, or other providers, we receive basic profile information (name, email) per their policies.
• Analytics: We use tools like Google Analytics to understand how users interact with the Service.

2. How We Use Your Information

We use collected data for the following purposes:

2.1 Marketing & Optional Communications

• With your consent, we may send promotional emails about new features, tips, or offers.
• You can opt out anytime via unsubscribe links or account settings.

2.2 Legal & Safety

• Comply with legal obligations, enforce our Terms, prevent fraud or abuse.
• Protect rights, property, or safety of Clicks, our users, or the public.

3. Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your experience and understand how you use the Service.

3.1 Types of Cookies

• Essential Cookies: Required for authentication, security, and core functionality.
• Analytics Cookies: Help us understand usage patterns (e.g., Google Analytics).
• Preference Cookies: Remember your settings, theme, or language.
• Marketing Cookies: Track conversions and ad performance (if applicable).

3.2 Managing Cookies

• Most browsers allow you to control or block cookies via settings.
• Disabling essential cookies may impact functionality (e.g., staying logged in).

3.3 Third-Party Analytics

• Google Analytics: Tracks anonymized usage data to improve the Service.
• You can opt out via Google Analytics Opt-out Browser Add-on.

4. How We Share Your Information

We do not sell your personal data. We only share data in limited circumstances:

4.1 Service Providers

• Payment Processors: Razorpay, PayPal for billing.
• Hosting & Infrastructure: Cloud storage, CDN, database providers (e.g., AWS, Vercel).
• Analytics: Google Analytics, error tracking tools.
• Email: Transactional email services (e.g., Resend, SendGrid).

4.2 Legal Requirements

• If required by law, court order, or government authority.
• To enforce our Terms, prevent fraud, or protect safety.

4.3 Business Transfers

• In the event of a merger, acquisition, or sale of assets, your data may be transferred. We'll notify you of any such change.

4.4 With Your Consent

• We may share data with third parties if you explicitly consent (e.g., integrations, partner features).

5. Data Security

We implement industry-standard security measures to protect your data:

• Encryption: Data transmitted over HTTPS; passwords hashed and encrypted.
• Access Controls: Restricted access to personal data on a need-to-know basis.
• Regular Audits: Security reviews, vulnerability scans, and updates.
• Secure Infrastructure: Hosted on trusted platforms with built-in security.

Important: No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. Use strong, unique passwords and enable two-factor authentication where available.

6. Your Privacy Rights

Depending on your location, you may have the following rights:

6.1 How to Exercise Your Rights

• Account Settings: Update profile, email, and preferences directly.
• Export Data: Download your projects via the Service.
• Delete Account: Contact us at support@nextjsshop.com or visit Support.

6.2 GDPR (EU/EEA Users)

• Right to access, rectify, erase, restrict, or object to processing.
• Right to data portability.
• Right to withdraw consent.
• Right to lodge a complaint with your local data protection authority.

6.3 CCPA (California Users)

• Right to know what personal information is collected, used, or shared.
• Right to delete personal information.
• Right to opt out of sale (we do not sell personal data).
• Right to non-discrimination for exercising privacy rights.

7. Data Retention

We retain your data only as long as necessary to provide the Service and fulfill legal obligations.

7.1 Account Data

• Retained while your account is active.
• After deletion, we may retain certain data for legal, tax, or audit purposes (typically 90 days to 7 years depending on jurisdiction).

7.2 User Content & Projects

• Saved projects are stored while your account is active.
• No retention guarantee: We recommend keeping your own backups.
• Deleted projects may be removed immediately or after a grace period (e.g., 30 days).

7.3 Usage Logs & Analytics

• Anonymized analytics retained for service improvement.
• Server logs retained for security and troubleshooting (typically 30–90 days).

8. International Data Transfers

Clicks by Nextjsshop is operated from India. Your data may be transferred to and processed in countries with different data protection laws.

• Cross-Border Transfers: We use cloud infrastructure (e.g., AWS, Vercel) that may store data in multiple regions.
• Safeguards: We ensure service providers implement adequate security measures (e.g., Standard Contractual Clauses, encryption).
• EU/EEA Users: Where applicable, we rely on approved transfer mechanisms under GDPR.

By using the Service, you consent to the transfer of your data to India and other jurisdictions as necessary to provide the Service.

9. Children's Privacy

The Service is not intended for children under 13 years of age (or under 16 in the EU/EEA).

• We do not knowingly collect personal information from children.
• If we discover we've collected data from a child, we will delete it promptly.
• If you are a parent/guardian and believe your child has provided us with data, contact us at support@nextjsshop.com.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Service features.

• Notification: We'll post the updated policy on this page and update the "Last updated" date.
• Material Changes: For significant changes, we may notify you via email or in-app notification.
• Continued Use: Your continued use of the Service after changes constitutes acceptance of the updated policy.

We encourage you to review this Privacy Policy periodically.