About this policy
This policy describes how Next Verse handles personal data when people visit the website, contact Next Verse, use the platform, participate in a trial or interact with Next Verse as a client, supplier, employee or business contact.
Next Verse Ltd, company number 17163563, is registered in England and Wales with registered office at 10 Stadium Business Court, Millennium Way, Derby DE24 8HP. In this policy, “Next Verse”, “we”, “us” and “our” refer to Next Verse Ltd.
This policy applies to personal data processed in connection with our website, platform, services, trials and business relationships. It should be read with any applicable contract, Master Services and Licence Agreement, Data Processing Addendum or trial terms.
Who we are
Next Verse Ltd is the organisation responsible for deciding how personal data is used for the purposes described in this policy. Depending on the context, Next Verse may act as a controller or as a processor on behalf of a client.
For privacy questions, rights requests or concerns, contact our Privacy and Compliance Owner at hello@nextverse.io.
Personal data we collect
Depending on how you interact with us, we may collect:
- names, email addresses and telephone numbers;
- job titles and organisation details;
- account and authentication identifiers, login records and security records;
- business correspondence and support requests;
- client workflow content and uploaded documents;
- usage and service records;
- billing and transaction information; and
- technical, device and security-log information.
Clients should not submit special-category data or criminal-offence data unless this has been expressly agreed with appropriate safeguards.
How we use personal data
We may use personal data to provide and support the Next Verse platform, create and manage accounts, configure and operate workflows, communicate with clients and users, maintain security and prevent misuse, monitor reliability and improve the service, process billing, comply with legal obligations, and handle support, complaints and rights requests.
AI data use. Next Verse does not use Client Data to train, fine-tune or improve any model made available to another customer. Client Data is used only to provide the contracted services, support the Client’s workflows, maintain security and comply with legal obligations.
Lawful bases
We rely on the lawful basis that is appropriate to the relevant processing. This may include:
- Contract, where processing is necessary to provide requested services, manage an account or perform an agreement;
- Legitimate interests, where processing supports service security, reliability, business administration, communications or improvement and those interests are not overridden by individual rights;
- Legal obligation, where processing is required by law, regulation or a lawful request; and
- Consent, where we ask for it for a specific purpose, such as certain optional communications or technologies.
Where we rely on consent, it may be withdrawn at any time, although this does not affect processing carried out before withdrawal.
Sharing personal data
We may share personal data with approved subprocessors, hosting and infrastructure providers, authentication providers, email and communications providers, analytics, monitoring and security providers, professional advisers, and regulators, courts or law-enforcement bodies where legally required.
The live subprocessor register is the authoritative provider list. We do not reproduce an incomplete fixed provider list in this policy.
International transfers
Where personal data is processed outside the UK, Next Verse uses an applicable adequacy decision or another lawful safeguard required by UK data-protection law. The relevant safeguard depends on the provider, service and processing arrangement. We do not claim that all processing takes place in the UK.
Retention
We retain personal data only for as long as necessary for the relevant purpose, contractual obligations, legal requirements, security records and dispute handling. Retention periods vary depending on the type of information and why it is held.
Client trial data is deleted in accordance with the applicable trial terms. Client data at contract end is returned or deleted in accordance with the applicable Master Services and Licence Agreement and Data Processing Addendum.
Security
We maintain technical and organisational measures appropriate to the nature and risks of the processing. These may include role-based access and least privilege, individual accounts where practicable, encryption in transit and appropriate protection at rest, credential and secret management, monitoring and audit logging, backups and recovery controls, and incident response.
No method of transmission, storage or security control can provide an absolute guarantee. We review and improve safeguards as appropriate to the services and risks.
Data-subject rights
Subject to applicable legal conditions and exemptions, individuals may have the right to request access to, rectification or erasure of their personal data, restriction of processing, portability of data, objection to processing, and withdrawal of consent where consent is the lawful basis.
We respond to valid requests without undue delay and normally within one calendar month. This period may be extended where permitted by law, and we will explain any extension.
Individuals may complain to the Information Commissioner’s Office (ICO).
Personal-data incidents
Next Verse assesses suspected personal-data incidents promptly. Where an incident affects Client Data, we will notify affected clients in accordance with the applicable Master Services and Licence Agreement and Data Processing Addendum.
Where a personal-data breach is likely to create a risk to individuals, the ICO will be notified within 72 hours of Next Verse becoming aware, where legally required. Not every incident is automatically reportable to the ICO.
Cookies and analytics
We may use essential cookies or similar technologies needed to provide security, remember necessary preferences and operate the website. These technologies do not require consent where they are strictly necessary.
If optional analytics technologies are used, we will request consent where required or rely on another lawful basis permitted by applicable law. You can manage optional technologies through the controls made available on the relevant website or in your browser.
With your consent, this website uses Sopro/Outbase visitor tracking for website insights and marketing. The supplied tracking code reads the _obid identifier cookie and sends the current page URL, referring page and tracking identifiers to Sopro. We also record enquiry button clicks and successful submissions in our application logs, using only the enquiry type and allowlisted public landing and enquiry page paths. We do not include names, email addresses, form contents or URL query strings in those conversion events. Optional tracking is not loaded until you accept. Use Cookie settings in the footer to accept or reject optional tracking or change your choice. Choices are remembered in this browser for up to 180 days where browser storage is available. Rejecting after acceptance stops tracking on subsequent page loads; it does not undo data already sent to Sopro.
Children
Our services are intended for business users and are not directed at children. We do not knowingly seek to collect personal data from children through the website or platform.
Changes to this policy
We may update this policy to reflect changes to our services, processing practices, legal requirements or safeguards. We will publish the updated version on this page, update the version and effective date, and provide additional notice where the change is material or legally required.
Current version: 1.0. Effective date: 4 September 2026.
Contact and complaints
For privacy questions, rights requests or complaints, contact Next Verse at hello@nextverse.io or write to Next Verse Ltd, 10 Stadium Business Court, Millennium Way, Derby DE24 8HP.
You can also complain to the ICO complaint service.
Related documents: Master Services and Licence Agreement and 7-Day Trial Agreement.
Next Verse browser extension
15.1 About the extension
The Next Verse browser extension (the "Extension") is an optional tool for Google Chrome and Microsoft Edge. When you connect it to your Next Verse workspace, it allows the Next Verse agent to carry out tasks you request in Next Verse within your own browser, such as opening web pages, reading them, completing forms and gathering information. This section explains how personal data is processed through the Extension and should be read together with the rest of this policy.
15.2 Personal data processed through the Extension
When you ask the agent to carry out a task in your browser, the Extension may process:
- Web page content: the text, form labels and layout of the web pages the agent works on for your task, and screenshots the agent takes where needed to complete it;
- Activity data: the addresses of the pages visited for your task and the actions the agent performs, such as clicks, typing and navigation;
- Sign-in details you provide: where you give the agent a username or password in a Next Verse conversation, it is used only to sign in to the website you named for that task.
Web page content may include personal data about you or others, depending on the websites you ask the agent to use.
15.3 What the Extension does not do
The Extension does not access your cookies, saved passwords or browsing history. It acts only in tabs the agent opened for your task, pages opened from those tabs, and tabs you choose to share with it through the Extension. It does not act unless you have asked Next Verse to carry out a task in your browser.
15.4 How we use this data
We process this data only to carry out the tasks you request, to show you their progress and results in Next Verse, and to keep the platform secure. Where Next Verse provides the platform to an organisation, we process this data on that organisation's behalf, as described in section 1 and in the applicable Data Processing Addendum.
We do not sell this data, use it for advertising, or use it to determine creditworthiness or for lending purposes.
15.5 Storage and retention
Web page content, screenshots and activity data may be kept as part of the conversation in which you made the request, in line with your workspace's retention settings and section 7 of this policy. Passwords you provide are not stored: they are removed from conversation history and from records of the agent's actions.
15.6 Your choices
Connecting the Extension is optional. You can disconnect it at any time from Next Verse, or remove it from your browser. Actions that involve a payment always require your approval in Next Verse before they are carried out. Your rights over your personal data are described in section 9.