Privacy policy

Effective September 8, 2026. This policy explains how Next Hand Exchange handles information for Next Hand Closeout.

Plain-language summary

Company workspace information is used to provide the service. We do not sell it or use it for advertising. Each organization has an isolated workspace, and customers can request an export or deletion.

Information we collect

How we use information

We use information to authenticate users, provide isolated company workspaces, synchronize records, store private attachments, deliver enabled reminders, generate reports, support users, secure the service, and improve reliability.

What not to enter

Next Hand Closeout is for operational disposition and project-closeout information. Do not enter medical records, protected health information, Social Security numbers, payment-card data, bank credentials, passwords, legal advice, or other regulated or highly sensitive records.

Service providers

We use service providers for cloud database, authentication, private file storage, hosting, application delivery, and optional notifications. These providers process information only as needed to deliver their services and under their own security and privacy commitments.

Security

The service uses authenticated access, organization-level authorization rules, private attachment storage, encrypted network connections, and server-enforced controls intended to prevent one organization from accessing another organization's records. No online service can guarantee absolute security.

Retention, export, and deletion

Workspace information is retained while an account is active and as reasonably needed to operate the service, resolve disputes, or meet legal obligations. An authorized company owner may request an export or deletion. Some backup copies may remain for a limited period before routine expiration.

Sharing

We do not sell company workspace information. We may share information with service providers that operate the product, when an authorized user directs us to do so, to protect users or the service, or when legally required.

Account and organization controls

Organization owners control team invitations and roles. Users should use unique credentials, protect access to their devices, and promptly remove people who no longer need access.

Changes

We may update this policy as the product and legal requirements develop. Material changes will be posted here with a new effective date.

Contact

For privacy questions, exports, or deletion requests, email patrick.mortenson3@gmail.com.

This policy is a transparent operating statement for the founding pilot and should be reviewed with qualified legal counsel before broader commercial launch.