Privacy policy

Last updated: 30 September 2026

Who we are

NextShift is responsible for the personal data described here.
Legal entity: AGENTIC NEXTSHIFT SRL.
Contact for anything on this page: gdpr@nextshift.solutions.

We keep this short and plain. If something is unclear, write to us.

1. The AI Readiness Snapshot

When you use the Snapshot, you give us a company website address and six answers about how your company works. This is information about a company, not about you, and we use it to produce the report you see on screen.

To describe your company, our reader (NextShiftSnapshot, see About our reader) reads up to four public pages of that website, respecting robots.txt. We send that public text, and only that text, to Anthropic, whose Claude model writes the description. No information about you as a visitor is sent to Anthropic. We keep the reading of a website for 7 days, so a repeat request does not read the site again.

We log every run without personal data: the website domain, the answers, the amount of model processing used, the cost and the duration. We use these logs to see what the tool really costs and how well it works.

We also keep each Snapshot result: the website domain, your answers and the report. It holds nothing about you as a person (no name, no email, no IP address, and not the free-text description you may have typed). We use it to improve the Snapshot and to understand which companies it serves.

2. Bot protection and fair use

Before reading a site we use Cloudflare Turnstile to tell people from bots. To do that, Cloudflare processes technical signals such as your IP address and browser information.

To limit how many sites one connection can read per hour, we keep a short hash of your IP address for one hour, then it is deleted.

3. Getting the report by email

If you ask for the report by email, we ask for your work email (required) and your name (optional), and we use them only if you tick the consent box, which is never ticked for you.

We use them to send you the report and to follow up about it. With your contact details we keep the report we sent (the website address, your answers and the result), so that any follow-up conversation starts from it.

You can withdraw your consent at any time by writing to gdpr@nextshift.solutions, and we stop.

4. Analytics

We measure visits with Cloudflare Web Analytics, Microsoft Clarity and Google Analytics.

5. Who processes data for us

• Cloudflare: hosting the site and bot protection.
• Anthropic: processing the public text of the company website you entered. Nothing about you.
• Google and Attio: Google sends the report emails, and the contact register lives with Google and Attio.

We do not sell your data and do not share it for advertising.

6. How long we keep it

• Text we read from a company website: 7 days, so a repeat request does not read the site again.
• IP hash for fair use: 1 hour.
• Technical run logs (processing, cost, duration), no personal data: at most 7 days, at our hosting provider.
• Snapshot results (website domain, your answers and the report), no personal data: 12 months.
• Contacts who asked for the report: 5 years, or until you withdraw consent, whichever comes first.

7. Legal bases

Consent for the report email and the follow-up about it. Legitimate interest for bot protection, fair-use limits and run logs.

8. Transfers outside the EU

Some of the providers above may process data outside the European Economic Area. We transfer data only to countries the European Commission recognises as offering adequate protection, or, where there is no such decision, under the European Commission's standard contractual clauses or another safeguard the GDPR allows.

9. Your rights

Under the GDPR you can ask to access your data, correct it, have it erased, object to how we use it, and withdraw your consent at any time. Write to gdpr@nextshift.solutions and we will answer within one month.

You can also complain to the Romanian data protection authority, ANSPDCP (Autoritatea Nationala de Supraveghere a Prelucrarii Datelor cu Caracter Personal), at www.dataprotection.ro.

10. Changes

When something here changes, we update this page and the date at the top.