Privacy policy

In short

• We use your data to run NexTurn for you. We don't sell it, and we don't use it for advertising.
• What you put in your workspace is yours. Your workspace's owner decides who in it can see what.
• If you connect Gmail, Google Calendar, Outlook or Constant Contact, NexTurn reads only what the feature needs, and you can disconnect at any time.
• We don't use your data, or anything we receive from Google or Microsoft, to train AI models.

Who we are

NexTurn ("NexTurn", "we", "us") is the operator of nexturncre.com, the NexTurn CRM at crm.nexturncre.com (NexTurn for brokers and NexTurn for hotel owners), and the NexTurn API and AI connector at api.nexturncre.com. Together we call these "NexTurn" or "the service". This policy covers all of them. Our terms of service are separate.

What we collect

Your account

When you sign up we keep your name, your email address, your phone number if you give one, and the workspaces you belong to with your role in each. Sign-in is handled by Clerk, our sign-in provider: your password goes to Clerk, never to us.

What you put in NexTurn

Contacts, companies, properties, notes, history, events and tasks, documents, photos, financials, listings and deal rooms. Much of it is about other people, such as your contacts. You decide what goes in, and we hold it for you and your workspace: for that information we act as your service provider.

How NexTurn is used

Every change to a record is kept in that record's change log, with who made it, when, and the network (IP) address and browser it came from. Our servers also log requests (IP address, browser, the feature asked for and the time) so we can keep the service running, find problems and notice attacks.

Website requests

When you ask for a valuation or a market report, download the underwriting model or ask us to move your CRM data, we keep your name, email, phone and company if given, your answers, and the IP address and browser the request came from.

Deal rooms

If you make an account to see a listing, we keep your name, email, phone, role and company; the confidentiality agreement you accept and when you accepted it; and which listing pages and documents you view and download. The listing's broker team sees this, and you appear as a lead on that listing in their workspace.

Billing

Each workspace has a billing record with Stripe, our payment provider: the workspace's name and its owner's email. NexTurn is free today, and no card is asked for.

Public records and market data

NexTurn collects public records about properties and their owners from county and state sources (parcels, owners of record and their mailing addresses, recorded sales with their buyers and sellers, and taxes), and listings, auctions, hotel rates and local events from public websites. Workspaces that use NexTurn's market data see them.

Accounts you connect

Each of these is off until you connect it yourself in Settings → Integrations, and you can disconnect it there at any time. A mailbox or calendar you connect is yours alone: nobody else in your workspace can read it or change its settings.

Gmail and Google Calendar (Google user data)

What NexTurn asks Google for: read-only access to your Gmail (gmail.readonly), access to your Google Calendar's events (calendar.events), and your email address (openid, email). You can untick the calendar on Google's consent screen and connect Gmail alone.

Gmail. While you are connected, NexTurn checks your mailbox for new messages about every 15 minutes, going back as far as you chose when you connected (30 days, 90 days or a year). Drafts, spam, trash and chats are left out. For each message it reads only the headers (who it is from and to, the date and subject) and compares the addresses with your workspace's contacts. Only a message to or from one of your contacts is opened. From it NexTurn keeps one History line on those contacts: the subject, date, the people on it (names and addresses), up to 1,200 characters of the message's own words (without the earlier messages quoted under it, signatures, legal notices and banners), and its attachments' names and sizes. It also keeps a one-way code (a hash) of the message's ID so the same message is never logged twice. Whole messages are not kept, attachments are never downloaded, and a message that names none of your contacts is not opened or kept. NexTurn never sends, deletes, moves or labels your email, and never marks it read.

Google Calendar. NexTurn reads your calendar's events from as far back as you chose (at most a year) to 90 days ahead. If you choose "Meetings with my contacts" (the default) or "Every event", those events become events in NexTurn, with their title, times, location, the contacts and teammates invited, and up to 4,000 characters of their notes without the video-call joining details. You can also choose "Nothing". Out-of-office, focus time and meetings you declined are left out. If you turn on "Put my NexTurn events on my calendar", NexTurn adds copies of your NexTurn events to your calendar with no one invited, so no invitation is sent, and changes or removes those copies when the NexTurn event changes. It changes or removes only the copies it made.

Who sees it. The History lines and events NexTurn makes are records in your workspace: the members of your workspace who can see those contacts can read them, as they could read a note you typed. If you connect your own Claude or ChatGPT to NexTurn, it can read the History lines you can see, including logged emails, when you ask it to.

What we never do with it. We don't sell Google user data, use it for advertising, or use it to develop, improve or train AI or machine-learning models, and NexTurn sends none of it to an AI model. We don't transfer it to anyone else except as needed to run these features for you (to your workspace and to the providers that host NexTurn, listed below), to comply with the law, or as part of a merger or sale of NexTurn with notice to you. Nobody at NexTurn reads your email or calendar data unless you ask us to (for example, to help with a problem), it is needed to investigate security or abuse, or the law requires it.

NexTurn's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Stopping it. Settings → Integrations → Disconnect deletes NexTurn's access to your Google account at once and stops all reading. You can also remove NexTurn at myaccount.google.com/permissions. History lines and events already made stay in your workspace until you or your workspace delete them, or until you ask us to remove everything that came from your mailbox and calendar, which we will do.

Outlook and Microsoft 365 (Microsoft data)

What NexTurn asks Microsoft for: Mail.Read (read-only), Calendars.ReadWrite, User.Read, openid and email (your name and email address), and offline_access so it can keep reading while you are away.

NexTurn reads your Inbox and Sent Items only, and handles them exactly as Gmail above: only messages to or from your contacts are opened and kept as History lines, attachments are never downloaded, and NexTurn never sends, deletes, moves or marks your email read. Your calendar works as Google Calendar above. Disconnect in Settings → Integrations, or remove NexTurn from your Microsoft account's apps at myapps.microsoft.com (or account.live.com/consent/Manage for a personal Microsoft account). We don't sell this data, use it for advertising, or use it to train AI models.

Constant Contact

NexTurn reads your campaigns and their reports: each send, and who opened it and which links they clicked. A recipient who is one of your workspace's contacts gets a History line ("Opened the e-blast …", "Clicked the e-blast …"). Others are counted, never added as contacts. NexTurn does not read or change your Constant Contact contact lists. Your workspace's owners and co-owners see the reports of every Constant Contact account connected in it. Disconnect deletes NexTurn's access tokens.

Your email logging address

Mail you BCC or forward to your own NexTurn logging address is logged on the contacts it names, the same way, and only when it comes from one of your own email addresses.

Your own AI assistant

When you connect your own Claude or ChatGPT to NexTurn, NexTurn answers it with what you can see in NexTurn, when you ask. What it reads goes to your account at Anthropic or OpenAI, under your agreement with them. Your workspace's owner or a co-owner decides whether you may connect one.

How we use it

• To run NexTurn for you: show your records, run the features you turn on, and keep you signed in.
• To send the emails you ask for or that the service needs: invitations, reminders and your morning summary, calendar files, and answers to your requests.
• To keep NexTurn secure: spot attacks and abuse, and limit how fast anyone can use it.
• To fix problems and make NexTurn better, looking at how features are used overall.
• To follow the law.

We don't sell personal information, share it for advertising, or use it to train AI models.

Who we share it with

• Your workspace. The people in your workspace see its records, as its owner and co-owners set. A hotel owner a broker invites sees only the deals they were invited to, as the broker shares them.
• The providers that run NexTurn for us, only to provide the service: Neon (our database, hosted in Amazon Web Services' US East (Ohio) region), Render (our servers, in Ohio), Cloudflare (the website, our domain, file storage, email routing and protection from attacks), Clerk (sign-in), Resend (sending email), Stripe (billing), Mapbox (looking up an address you type), MapTiler (map images) and GitHub (running some scheduled jobs). Each works under its own contract and privacy terms.
• The services you connect, such as Google, Microsoft, Constant Contact, and Anthropic or OpenAI for your own AI assistant.
• Marcus & Millichap. A valuation or market report you ask for on our website is answered by Reed Gizinski with the Ruzicka Hotel Team at Marcus & Millichap, who may receive your request.
• When the law requires it, or to protect people, NexTurn or the service from harm.
• In a merger or sale of NexTurn, with notice to you, under this policy's promises.

How long we keep it

We keep your account and your workspace's records while your account or workspace exists. A record you delete can be put back for 90 days, and its earlier contents stay in the workspace's change log. When you ask us to delete your account or your workspace, we delete it from the service within 30 days, except what the law requires us to keep. Copies in our encrypted backups expire on their own within 12 months. Website requests are kept so we can follow up; ask and we will delete yours.

How we protect it

Everything travels over encrypted connections (HTTPS) and is stored encrypted. Each workspace is walled off from every other in the database itself. The access tokens for accounts you connect are encrypted again with a key of our own, and our nightly backups are encrypted before they are stored. Only NexTurn's founder can reach production systems, and unusual activity alerts us. No system is perfectly secure; if a breach affects your data, we will tell you as the law requires.

Your choices and rights

• See and correct your account and records in NexTurn at any time.
• Take it with you. A workspace's owners and co-owners can export the whole workspace as spreadsheets that NexTurn's import reads back.
• Disconnect any connected account in Settings → Integrations.
• Turn off reminder emails and the morning summary in Settings → Preferences.
• Ask us for a copy of your personal information, or to delete it, at [email protected]. We answer within 30 days and may ask you to confirm who you are. If you are a contact in someone else's workspace, we pass your request to that workspace, since it holds that information.

Depending on where you live (for example California, or the EU and UK), you may have further rights over your personal information. We honor them. We don't sell or share personal information for cross-context behavioral advertising.

Cookies

In the CRM, Clerk sets cookies to keep you signed in, and the app remembers some of your choices in your browser's storage. Cloudflare, which serves our pages, may set a cookie to tell people from automated traffic. The website sets no cookies of its own and uses no analytics or advertising trackers. Its fonts load from Google Fonts, so your browser asks Google for them.

Children

NexTurn is for businesses and people 18 or older. It isn't meant for children, and we don't knowingly collect children's information.

Where your data is

NexTurn's database and servers are in the United States. If you use NexTurn from elsewhere, your information is transferred to and stored in the United States.

Changes to this policy

When we change this policy we update the date at the top. If a change matters to how your information is used, we tell you by email or in NexTurn before it takes effect.

Contact

NexTurn, the operator of nexturncre.com, Minneapolis, Minnesota. Email [email protected].