Unmanage, LLC
Effective date: 28 July 2026
Last updated: 29 August 2026
Version: 2.1
Unmanage, LLC ("Unmanage," "we," "us") operates the NextSuite applications:
This policy explains what personal information we collect, why, who we share it with, and what rights you have. It covers the applications, the account system, and the websites that support them (together, "the Services").
It also covers any additional application, product, or feature that Unmanage releases under the NextSuite name or from the same account, whether or not it is listed above — unless we publish a separate privacy policy for that product, in which case the separate policy applies to it.
Where applicable data-protection law distinguishes between controllers and processors, we are the controller of account, billing, usage, and support information. Where a business customer uploads content containing personal information about other people, we process that information on the customer's behalf. In that case the business customer is the controller of that information, and is responsible for having a lawful reason to put it into the Services and for telling those people how it is used.
We are putting this first because it is what our customers ask about.
Your decks, notes, rundowns, scripts, and timer configurations are private. They are not published, not listed anywhere, and not visible to other users. They are visible only to you and to anyone you deliberately share a link with.
We do not use your content for advertising, marketing, or to train AI or machine-learning models.
Our staff do not read your content in the ordinary course of business. A member of our team may access it only when it is necessary to resolve a support request you have raised, to investigate a suspected security incident or terms violation, or to comply with a legal obligation.
Automated systems do process your content — converting an uploaded file into slide images, storing it, and transmitting your slide position to shared links are all automatic. The providers involved are listed in section 6.
Account information. When you create an account we collect your name and email address. If you sign in with Google or Microsoft, we receive your name, email address, and profile image from that provider.
Authentication. If you create a password, it is stored by our authentication provider in hashed form. We never see or store your password.
Payment information. When you buy a plan, our payment processor collects your card details, billing address, and country. We never receive or store your full card number. We receive a customer reference, the last four digits, the card brand, your billing country, and the status of your subscription.
Content you upload. Presentation files, slide images, speaker notes, rundowns, scripts, and timer configurations. See section 2.
Demo requests. If you try a demo without an account, we collect the email address you enter and record which application the demo was for and when.
Support and contact. If you email us or use a contact form, we keep the message and your contact details so we can respond.
Marketing sign-ups. If you subscribe to our mailing list, we keep your email address and your subscription status.
Log data. Our servers record standard request information: IP address, browser type and version, operating system, the pages or endpoints requested, and timestamps.
Device and usage data. Screen size, device type, and how you move through the Services — which features you use and when.
Error and diagnostic data. When something goes wrong, we may record technical details about the failure and the state of the application at the time.
Product analytics. We use PostHog to understand how the Services are used: pages viewed, features used, and key actions such as signing up, uploading a file, starting a checkout, and running a presentation, timer, rundown, or script. On our marketing websites we also use Google Analytics for the same purpose. Google Analytics is never used inside the applications.
Session recordings. PostHog records how the application interface is used so we can find and fix problems. These recordings are masked: the body of your content (slides, speaker notes, prompter scripts, and rundown text) is blanked, images are blocked, and anything you type is hidden while you type it. Recordings show the interface, and the names, timings, and counts visible on screen, not your content bodies.
Usage records we keep ourselves. When you run a presentation, timer, rundown, or script, we record when the run started and ended, how you moved through it, and how many screens were connected through sharing links. We use these records to understand and improve the Services.
Cookies and similar technologies. See section 7.
We do not collect precise geolocation. We may infer an approximate country or region from your IP address, which is used for currency, tax, and security purposes.
Regulated data. The Services are not intended for storing health information regulated by HIPAA, or other data subject to similar sector-specific regulation, unless we have separately agreed to it with you in writing.
We use the information described above to:
Service messages are not marketing. You cannot opt out of them while you hold an account, because they are how we tell you about renewals, security, and changes to your account.
We do not sell your personal information. We have never sold it, and we do not share it for cross-context behavioural advertising.
We share information with the following service providers. The table describes the services they provide and the information involved.
| Provider | What they do | What they receive |
|---|---|---|
| Auth0 (Okta, Inc.) | Login and account authentication | Name, email, hashed password or social-login identifier, login events |
| MongoDB Atlas (MongoDB, Inc.) | Database hosting | Account records, presentation and rundown records, usage records |
| Vercel, Inc. | Application hosting and delivery | Request log data, IP address |
| DigitalOcean, LLC | File storage and the real-time synchronisation service | Uploaded files and generated images; slide-position messages |
| Stripe, Inc. | Payment processing | Name, email, card details, billing address, transaction records |
| ConvertAPI | Converting uploaded presentation files into images | The uploaded presentation file |
| IONOS | Sending transactional email | Email address and message content |
| MailerLite | Sending marketing email | Email address, name, subscription status |
| PostHog, Inc. | Product analytics and masked session recordings | Account identifier, device and usage data, masked interface recordings |
| Google LLC (Google Analytics) | Analytics on our marketing websites only | Device and usage data from the marketing websites |
We may also disclose information:
We use cookies and similar browser storage for the following purposes:
Strictly necessary. Keeping you signed in, maintaining your session, and protecting against cross-site request forgery. The Services do not work without these.
Preferences. Remembering settings you have chosen, such as text size on a notes display.
Most browsers let you refuse or delete cookies. If you block strictly necessary cookies you will not be able to sign in.
Analytics. We use cookies and similar browser storage from PostHog across the Services, and from Google Analytics on our marketing websites only, to recognise a returning browser and to connect a visit to our websites with a later sign-up. Section 4 describes what these tools collect. You can refuse or delete these cookies in your browser; the Services still work without them.
We do not use advertising cookies, and we do not allow advertising networks to place cookies through the Services.
| Information | Retention |
|---|---|
| Account record and profile | While your account is open |
| Your uploaded content | While your account is open, or until you delete it |
| Payment and transaction records | Seven years after the transaction, to meet tax and accounting obligations |
| Demo request records | As long as needed for the purposes described in this policy |
| Support correspondence | As long as needed for the purposes described in this policy |
| Marketing list membership | As long as needed for the purposes described in this policy |
| Server and security logs | As long as needed for the purposes described in this policy |
| Analytics events | As long as needed for the purposes described in this policy |
| Session recordings | As long as needed for the purposes described in this policy |
When you close your account your access ends at once, and we delete within a reasonable period from our live systems your account record, your uploaded files and generated images, your presentations, rundowns, scripts, timer configurations, and any demo records tied to your email. We also cancel any active subscription and remove you from our marketing list.
Copies held in routine encrypted backups are not edited individually. They expire on our normal backup cycles. Removal is requested from the third-party providers listed in section 6 where applicable, subject to each provider's own retention obligations and backup cycles. Until those copies expire they are not accessible to you and are not used for any purpose other than disaster recovery.
We retain payment and transaction records after account closure because we are legally required to.
We protect personal information using measures appropriate to the risk. Traffic between you and the Services travels over encrypted connections. Information held in our database and file storage is encrypted at rest by the providers named in section 6. We limit administrative access to those who need it, and we use scoped credentials for third-party services.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your own login credentials confidential and for choosing carefully who you send sharing links to.
If a breach affecting your personal information occurs, we will notify you and any relevant regulator as required by applicable law.
Unmanage is based in the United States and our infrastructure is hosted primarily in the United States. If you use the Services from outside the United States, your information will be transferred to and processed there.
Depending on where you live, you may have some or all of the following rights:
To exercise any of them, email support@nextsuiteapp.com. We respond promptly, and we may need to verify your identity first.
You can delete your account yourself at any time from your account settings, and unsubscribe from marketing email using the link in any marketing message.
We do not ask you for information about your age, gender, race, health, religion, or political views, and we do not use information of that kind as part of your account record or to profile you.
Content you upload may itself contain information of these kinds — clinical slides, a service rundown for a congregation, a political campaign script. Where it does, we treat it exactly as we treat all of Your Content under section 2: we do not read it in the ordinary course of business, we do not analyse it, and we do not use it for any purpose other than providing the Services to you.
The Services are not directed at children and we do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, email support@nextsuiteapp.com and we will delete it.
We may update this policy. When we do, we will change the "Last updated" date at the top and post the revised version at the same address.
If a change materially affects how we handle your personal information, we will notify you by email or through the Services before it takes effect.
For any question about this policy or about your personal information:
Unmanage, LLC
PO Box 51154
Durham, NC 27717
support@nextsuiteapp.com