Privacy Policy

Last updated 2026-09-16

What we hold

Your email address and authentication record. The prompts you write, the media you generate, and any reference files you upload. Your credit balance and the ledger of how it was spent. API keys are stored only as a one-way hash and cannot be read back by us. For free trials only, a salted hash of your IP address and of a browser device fingerprint (see Free trial abuse prevention below).

Why

To run the service: to produce what you asked for, to show it back to you, to bill it correctly, and to notify you when it is done.

Free trial abuse prevention

A visitor can use NextLeap without an account, on a small free credit balance. To stop the same person claiming that balance repeatedly, two things are recorded when a trial is granted: a salted hash of your IP address, and a salted hash of a device fingerprint computed in your browser from characteristics it exposes (screen, timezone, fonts, graphics rendering and similar). Neither the IP address nor the raw fingerprint is stored — only the hashes, which we cannot reverse.

This is used for one purpose: counting how many free trials a device or connection has already claimed. It is not used to track you across other websites, is not shared, is not combined with your generated media, and is not applied to signed-in accounts. Our lawful basis is legitimate interest in preventing abuse of a free allowance. If you would rather not be fingerprinted, create an account: signed-in sessions do not run this check at all.

Who else sees it

Prompts and reference media are sent to the third-party model providers that perform generation. Generated files are stored in our own object storage. We do not sell your data and we do not use your generations to train models.

Notifications

If you enable email or browser notifications, we use your address and push subscription only to tell you about your own generations. Both can be switched off in Settings.

Retention and deletion

We keep your content until you delete it or close your account. Deleting your account removes your generations, uploads and settings. Records we must keep for accounting are retained as the law requires.

Contact

Questions or a request about your data: privacy@nextleapai.com

NextLeap AI · nextleapai.com