Keeping your
personal data safe

Encrypted in transit and at rest

Data moving between the app, the web and our servers is encrypted, and so is data stored on our servers.

• Encrypted in transit

  The NextGen app and website only call our servers over HTTPS (TLS 1.2 and 1.3). The website tells browsers to always connect over HTTPS (HSTS).

• Encrypted at rest

  The database and cache servers that hold account and order data are encrypted on disk.

• Passwords are hashed

  Passwords are stored as bcrypt hashes. The original password is never kept.

• We never receive card numbers

  Card payments are processed by payment providers such as Toss Payments and Stripe. NextGen keeps only the billing key needed for subscriptions and a partially masked card number.

• Connected account tokens are encrypted

  Access tokens for services you connect, such as Instagram, YouTube and Google Calendar, are stored encrypted with AES-256-GCM.

Open only where it is needed

Public and private data are kept apart, and each account only works with its own data.

• Private storage, expiring links

  Purchased ebook originals and call recordings are kept in storage with no public address. Viewing creates a signed link that expires shortly after (15 minutes for call recordings).

• Watermarked purchases

  When you read a purchased ebook, the server stamps purchase details onto each page image. Downloaded PDFs carry the order number.

• NextGen AI works only on your account

  NextGen AI tools run only on the account of the person who asked. There is no input for pointing them at someone else's account.

• Separate admin console

  Our operator console lives on its own address (admin.nextgen.kr) and opens only after an admin permission check.

• Server secrets stay out of code

  Secret keys used by our servers are not in the source code; they are loaded from AWS Parameter Store (SSM).

You decide how far it goes

Choose what NextGen AI may say, what it may run, and which services it is connected to.

• Information sharing settings

  Decide how much NextGen AI may say when it writes things other people will read, such as auto DMs, public replies and bios. The default is “Public info only”.

• Sensitive topics stay private by default

  Health, money, private life, beliefs, precise location and account security are not shared with anyone by default. Card numbers, passwords, verification codes and national ID numbers are never sent out, whatever the setting.

• Confirm before it runs

  For things that are hard to undo — payments, payout requests, public posts, sending messages — NextGen AI shows a confirmation card first, and nothing happens until you tap “Run”.

• Disconnect any time

  Channels you connected, such as Instagram or YouTube, can be disconnected at any time under Settings › Channels.

• Deleting your account signs you out

  When you delete your account, every device is signed out immediately. The account is kept for 30 days so it can be restored through customer support.

See it for yourself

How NextGen handles data is published in our documents and visible in your app settings.

What can you check?

• Privacy Policy

  What we collect and why, how long we keep it, and who processes it on our behalf.

  Read the policy

• NextGen AI Terms (Korean)

  How conversations with NextGen AI and the files you upload are handled. Currently available in Korean only.

  Read the terms

• Typed input is masked in recordings

  When we record screen usage to improve the service, anything typed into input fields is masked.

• Check it in the app

  See and change your connected channels, information sharing settings and saved payment methods in the app settings.