Skip to content
Autonoma

Legal

Privacy policy

Last updated 3 October 2026.

This policy says what personal data Autonoma handles, why, where and for how long, and what you can ask of us. It covers app.nxtlevel-tech.com and the websites and email addresses Autonoma runs for companies. Read it with our terms of service.

1. Who is responsible

NXTLEVEL Tech, company number 1042.606.082, Belgium, is responsible for your account and for how Autonoma itself works. Our full company details are on nxtlevel-tech.com. For the websites and email addresses Autonoma runs for your company, your company decides what they are for, and we handle that data on its behalf. Questions about your data: info@nxtlevel-tech.com.

2. What we hold, and why

  • Your account: your name, email address, password (kept only as a one-way code), language, country if you give it, your settings, the teams you are in, and when you agreed to the terms. We need these to give you the service.
  • How you found us: when you sign up, we keep where your visit came from, as far as the visit itself said so: the campaign words in the link you followed (such as “utm_source”), the name of the website that linked to us, or which ad network sent you. Never the full address you came from, and no identifier of your click. We use it to know which of our posts and ads bring people, which is our legitimate interest. It is kept with your account.
  • Your companies' work: the business profile, tasks, documents, chat messages and the files you send in the chat, daily reports, the activity log and the credit history. This is the service itself.
  • Websites we host for your company: their code, their database and the domains connected to them. To count visitors, the address and browser of a visitor are turned into a short one-way code that is held in memory for that day only; what is stored is a number of visitors per site per day.
  • Email for your company: the messages of its addresses are kept by our email provider; Autonoma reads them when you open Mail and sends what you write.
  • Services you connect (for example X, Meta, Google, TikTok or Stripe): the access they give Autonoma, stored encrypted.
  • Payments: handled by Stripe. We keep Stripe's references to you and your subscription, and your credit history. Card details go to Stripe and never reach us.
  • Emails we send you (confirming your address, password resets, notices, daily reports): we keep a record of each one, with the address, the subject and whether it went out.
  • Welcome credits are given once per inbox. To know that, we keep a one-way fingerprint of the address, not the address itself.
  • Security and keeping the service running: our web server notes each request (address, page, time, browser), and errors are logged. Both are kept for 14 days.

We use this data to provide the service you signed up for, to keep it secure and stop abuse, which is our legitimate interest, and to meet legal duties such as keeping invoices.

3. The AI that does the work

Autonoma's agents work with AI models from Anthropic. What a task or a chat reply needs, such as your business profile and the documents and messages it works from, is sent to Anthropic to produce the answer. Anthropic's commercial terms do not allow it to train its models on this data. AI output can be wrong: the terms say more about that.

A video ad you ask for is made by HeyGen from the script Autonoma writes: HeyGen receives that script, your company's name, and the address of its website, from which it takes the website's colours, fonts and logo for the video. The finished video is kept with your documents. It shows an AI presenter, not a real person.

4. Who handles data for us

  • Hetzner Online runs our servers in Helsinki, Finland, where our encrypted backups are also kept, with a second copy in Germany.
  • Anthropic, in the United States, runs the AI models. Data sent there is protected by the safeguards in its data processing terms for transfers outside the European Union.
  • HeyGen, in the United States, makes the video ads you ask for, from their script (see section 3).
  • Stripe handles payments.
  • Migadu, in Switzerland, hosts the email addresses of companies.
  • ZXCS, in the Netherlands, sends the emails Autonoma sends you.
  • Services you connect yourself (Meta, Google, YouTube, TikTok, X) receive what you ask Autonoma to send them: a post goes to your Page or profile, a video ad you post goes to your channel or your TikTok inbox, an ad you run on Meta goes to your own Meta ad account.

We do not sell data, and we use no advertising or analytics trackers.

5. Cookies

The ones Autonoma needs: one that keeps you signed in (before you sign up, the visit it belongs to also notes where it came from, see section 2), one that protects forms from being sent by another site, and one that remembers whether you chose the light or the dark look. No analytics or advertising cookies.

6. How long we keep it

  • Your account and your companies' data: for as long as your account exists.
  • When you delete a company, its website goes offline at once and the access it held to other services is destroyed. Its records are kept so that it can be restored if the deletion was a mistake. Ask us, and we erase them completely within 30 days.
  • When you delete your data (Settings › Profile), your companies are deleted as above, the files you sent in the chat are deleted at once, and your name and email address are removed from your account.
  • Backups are encrypted copies of everything above. They are replaced as they age: none is older than ten weeks.
  • Server and error logs: 14 days. A signed-in session ends after two hours without activity.
  • Invoices and payment records: as long as Belgian accounting law requires.

7. Your rights

You can ask to see the data we hold about you, to have it corrected or erased, to receive it in a form you can take elsewhere (a company's website database can be downloaded at any time), and you can object to what we do on the basis of our legitimate interest. Write to info@nxtlevel-tech.com; we answer within one month. You can also complain to the Belgian Data Protection Authority, dataprotectionauthority.be.

8. How we protect it

Connections are encrypted, passwords are kept only as one-way codes, stored access to other services and email accounts is encrypted, and backups are encrypted. One company's data is never available to another, and the websites we host run separated from each other and from Autonoma itself.

9. Changes to this policy

If we change this policy in a way that matters to you, we tell you by email or in Autonoma before the change applies.