Privacy Policy

Last updated: September 27, 2026

This policy explains how Next Digital ("we") collects, uses and protects data when you use nextdigital.sa and the client portal portal.nextdigital.sa (the "Portal").

1. Data we collect

• Account data: name, email, phone number and company name.
• Project data: messages, files, tasks and meetings created in the Portal.
• Technical data: IP address, browser type and sign-in logs, for security and abuse prevention.
• Contact form: whatever you send us through the website contact form.

2. Use of Google user data

The Portal lets Next Digital staff connect their Google account to schedule meetings with clients. We request only these scopes:

• calendar and calendar.events: to create, update and delete meeting events in the staff member's calendar, with a Google Meet link and attendee invitations.
• meetings.space.settings: to set the access settings of the meeting's Google Meet space so the client can join.

OAuth tokens are stored in the Portal database and used only to perform actions the user requests in the Portal. We do not read or analyse other calendar content.

Next Digital's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we do not sell Google user data, do not use it for advertising, do not transfer it to third parties except as necessary to provide the service or comply with law, and do not allow humans to read it except with the user's consent or for security or legal purposes.

You can revoke access at any time from your Google Account permissions page; access stops immediately, and you can ask us to delete the stored tokens at info@nextdigital.sa.

3. How we use data

• To provide the Portal, manage projects and communicate with you about them.
• To send notifications and one-time verification codes (OTP).
• To protect accounts and detect unauthorised use.

We do not sell your personal data.

4. Sharing

We share data only with service providers needed to run the Portal (such as hosting, email and messaging platforms), only to the extent necessary, or when required by law.

5. Retention and security

Data is hosted on servers we manage, protected with HTTPS, access controls and sign-in rate limiting. We keep data for the duration of the engagement and delete or anonymise it on request or when no longer needed, unless the law requires us to keep it.

6. Your rights

Under the Saudi Personal Data Protection Law you may request access to, correction of, or deletion of your data. Email info@nextdigital.sa.

7. Changes

We may update this policy and will post any change on this page with the update date.

8. Contact

Next Digital — Jeddah, Saudi Arabia
Email: info@nextdigital.sa — WhatsApp: +966 55 823 0663