This policy describes how Mundo Feliz, Lda. ("NextFund", "we") collects, uses and protects your personal data when you use nextfund.ai and app.nextfund.ai. It complies with the General Data Protection Regulation (GDPR — Regulation (EU) 2016/679).
1. Controller
Mundo Feliz, Lda., based in Portugal. For any request regarding your personal data, contact: privacy@nextfund.ai.
2. Data we collect
- Account: email, name, hashed password, organisation, country.
- Application content: text you write, files you upload, EU official templates, attachments.
- AI conversations: messages, prompts, responses and internal tool calls (required for service functionality).
- Payment: handled by Stripe — we do not store card details.
- Technical: IP, user agent, authentication events (security logs).
3. Purposes and legal bases
- Service delivery (contract performance — art. 6(1)(b) GDPR).
- Security, fraud prevention (legitimate interest — art. 6(1)(f)).
- Legal obligations (invoicing, tax — art. 6(1)(c)).
- Product communications (consent — art. 6(1)(a); you can withdraw at any time).
4. Sub-processors
- Anthropic, PBC (AI models — Claude). Content sent is not used for training under commercial terms.
- Hetzner / EU cloud provider (hosting and database).
- Stripe (payments).
- Resend / SMTP (transactional email).
- European Commission — F&T Portal (public calls/projects lookup; no personal data sent).
5. Retention
- Account: while active + 90 days after deletion.
- Applications: while account exists; you can delete at any time.
- Security logs: 12 months.
- Invoicing: 10 years (legal obligation).
6. Your rights
You have rights of access, rectification, erasure, restriction, portability and objection. To exercise them: privacy@nextfund.ai. We respond within 30 days. You also have the right to lodge a complaint with the Portuguese DPA (CNPD) or your local EU supervisory authority.
7. International transfers
Some sub-processors (Anthropic, Stripe) operate outside the EEA. We rely on Standard Contractual Clauses (SCCs) approved by the European Commission.
8. Cookies
See our Cookie Policy.
9. Changes
We update this policy when needed. For material changes, we'll email you at least 30 days in advance.