How we handle your data

Portal access requires an account created or invited by a NextWave Solutions administrator. Sign-in is handled through our managed authentication provider with email/password and supported social providers.

Role-based permissions separate administrators from virtual assistants. Authorization is enforced server-side on every request — the client cannot grant itself elevated access.

The portal runs on managed cloud infrastructure provided through the NextWave Team platform, which provides database, authentication, storage, and serverless function hosting. Traffic to the portal is served over HTTPS.

Capabilities described here reflect platform features we have enabled; they are not a certification issued by NextWave Team or any third party.

We collect the information needed to operate the portal: account profile details (name, email, avatar, contact and address fields you provide), task activity, uploaded files, KYC recordings submitted by the user, and portal mail sent or received through your assigned company mailbox.

We do not sell personal information. Data is used to operate the portal, communicate with users, and support assigned work.

Tables holding portal data have row-level security enabled. Policies restrict reads and writes so users can only access their own records, plus data their role explicitly allows (for example, administrators managing the workspace).

We rely on a small set of vendors to run the service, including our hosting and database provider (NextWave Team), our outbound email provider, and Mailgun for portal mail delivery. Each vendor only receives the data needed to perform its function.

Account and portal data are retained while the account is active. If you would like your account or specific data removed, contact us using the details below and we will action the request.

To report a security concern, request data deletion, or ask a privacy question, please reach us through the contact page. We aim to acknowledge security reports promptly.