1. Introduction

Users may be subject to different data protection standards depending on their location. Some users may have additional protections under local laws. For more information about applicable standards, please contact us.

This document can be printed for reference using your browser's print function.

2. Data Controller

Owner and Data Controller:
Awfis Oyster Complex, Somajiguda, Begumpet
Contact Email: jobs@thenextfly.com

3. Types of Data Collected

We collect the following types of Personal Data:

• Directly Provided Data:
  • Contact Information: Email address, first name, last name, phone number, address
  • Professional Details: Company name, profession, workplace, academic background, number of employees
  • Demographic Information: Gender, date of birth, country, city, state/province, language
  • Account Credentials: Password, User ID
  • Content: Profile picture, user-generated content, messages
• Automatically Collected Data:
  • Usage Data: IP address, device information, browser type, operating system
  • Behavioral Data: Clicks, scroll position, mouse movements, page views
  • Technical Data: Cookies, device identifiers (Google Advertiser ID, IDFA, UUID)
  • Location Data: Geographic position, latitude/longitude, metro area

Complete details about each data type are provided in the relevant sections below or in notices displayed during data collection.

4. Data Collection Methods

• Voluntary Provision: Users freely provide most Personal Data
• Automatic Collection: Usage Data is collected automatically through website use
• Mandatory vs Optional: Required fields are marked; optional fields may be skipped without affecting core services

5. Data Processing

Methods:

• We implement appropriate security measures to prevent unauthorized access, disclosure, or destruction of Data.
• Processing occurs through:
  • Computer systems and IT-enabled tools
  • Organizational procedures tied to specific purposes
  • Selected third-party processors under contract

Locations:

• Data is processed at our operating offices and wherever our service providers are located.
• May involve international transfers when necessary.

Retention Period:

• We retain Personal Data only as long as necessary for:
  • Delivering requested services
  • Complying with legal obligations
  • Protecting our legitimate interests
  • Other purposes described herein

6. Purposes of Processing

We process Data to:

• Provide and maintain our services
• Comply with legal requirements
• Prevent fraud and abuse
• Improve user experience
• Enable specific features including:

Service Categories:

• Account registration and authentication
• Advertising and remarketing
• Analytics and performance measurement
• Content commenting and social features
• Payment processing
• Customer support
• Traffic optimization
• Spam/bot protection

The Next Fly - Data Collection and Usage Policy

1. Facebook Permissions and Data Access

When connecting your Facebook account to The Next Fly, we may request the following permissions:

Basic Profile Information

• Facebook ID, name, profile picture, gender, language/location
• Friend connections (if allowed by your privacy settings)

Additional Profile Data

• About Me
• Birthday
• Education History
• Email Address
• Hometown
• Work History

Social Interactions

• Friend List
• Wall Posts (with your permission)

Note: We only access information you’ve made publicly available or explicitly share with us.

2. How We Use Your Data

Third-Party Account Integration

Facebook Connect Service:

• Enables linking your Facebook account to The Next Fly
• Permissions: About Me, Birthday, Education History, Email, Hometown, Friend List, Wall Posts, Work History
• Provider: Meta Platforms, Inc.
• Data Locations: United States | Ireland
• See: Privacy Policy | Opt-Out Options

Advertising Services

• Google Ad Manager: Uses DoubleClick cookies for ad targeting
• Meta Ads Conversion Tracking: Uses Meta Pixel to track ad performance
• Google AdSense: Displays contextually relevant ads using cookies

Data Locations: United States | Ireland

Manage settings via Google Ad Settings and Facebook Ad Preferences

3. Types of Data Collected

We collect the following types of Personal Data:

• Directly Provided Data:
  • Contact Information: Email address, first name, last name, phone number, address
  • Professional Details: Company name, profession, workplace, academic background, number of employees
  • Demographic Information: Gender, date of birth, country, city, state/province, language
  • Account Credentials: Password, User ID
  • Content: Profile picture, user-generated content, messages
• Automatically Collected Data:
  • Usage Data: IP address, device information, browser type, operating system
  • Behavioral Data: Clicks, scroll position, mouse movements, page views
  • Technical Data: Cookies, device identifiers (Google Advertiser ID, IDFA, UUID)
  • Location Data: Geographic position, latitude/longitude, metro area

Complete details about each data type are provided in the relevant sections below or in notices displayed during data collection.

4. Your Control Options

• Advertising Preferences: Adjust personalized ad settings via each platform's preference center or NAI Opt-Out
• Facebook Permissions: Manage connected apps in Facebook Settings or revoke access to The Next Fly
• General Data Collection: Control cookie settings through your browser
• Data Access or Deletion: Contact us at jobs@thenextfly.com

For detailed information about each processing activity, see Section 9 below.

4. Marketing and Analytics Services

1. Direct Email Marketing (DEM)

Service Description: The Next Fly may use your email address to promote third-party services or unrelated products.

Data Processed: Email address

Opt-Out: Unsubscribe via the link in any marketing email or contact jobs@thenextfly.com

2. Advertising Services

Google Ads Conversion Tracking

• Provider: Google LLC / Google Ireland Limited
• Function: Tracks ad performance by linking Google Ads data to website actions
• Data Processed: Trackers, Usage Data
• Locations: United States | Ireland (Privacy Policy)

Google Ads Similar Audiences

• Provider: Google Ireland Limited
• Function: Shows ads to users with similar behaviors to existing customers
• Data Processed: Cookies, Usage Data
• Opt-Out: Google Ad Settings
• Location: Ireland (Privacy Policy | Opt-Out)

LinkedIn Insight Tag

• Provider: LinkedIn Corporation
• Function: Tracks conversions from LinkedIn ads and enables targeted advertising
• Data Processed: Device info, Trackers, Usage Data
• Opt-Out Options: Device settings, LinkedIn account settings, AdChoices
• Location: United States (Privacy Policy | Opt-Out)

RTB House

• Provider: RTB House S.A.
• Function: Programmatic advertising service
• Data Processed: Tracker, Usage Data
• Location: Poland (Privacy Policy | Opt-Out)

Meta Lookalike Audience

• Provider: Meta Platforms, Inc. / Meta Platforms Ireland Limited
• Function: Targets users similar to your existing customers
• Data Processed: Trackers, Usage Data
• Opt-Out: Meta Opt-Out
• Locations: United States | Ireland (Privacy Policy)

Microsoft Advertising Universal Event Tracking

• Provider: Microsoft Corporation
• Function: Links Microsoft Advertising data to website actions
• Data Processed: Trackers, Device identifiers (Google Advertiser ID, IDFA), UUID, Usage Data
• Location: United States (Privacy Policy | Opt-Out)

WhatsApp Business Marketing

• Provider: Meta Platforms Ireland Limited
• Function: Sends direct marketing via WhatsApp
• Data Processed: Message content, contact details (name, phone number), message metadata (time/date), profile picture
• Opt-Out: Tap “Opt-Out” in any marketing message
• Location: Ireland (Privacy Policy)

5. Analytics Services

1. Google Analytics User ID Extension

Function: Enables cross-device tracking by associating a unique User ID with activity across multiple sessions and devices, without revealing personal identity.

• Key Features:
  • Maintains user continuity without personal identification
  • Allows correlation with other data collected by The Next Fly
  • Device-specific opt-out available
• Data Processed: Cookies
• Opt-Out Options: Google Analytics Opt-Out (device-specific) or contact jobs@thenextfly.com
• Processing Locations: United States | Ireland (Privacy Policy | Opt-Out)

2. Google Analytics Advertising Features

Function: Enhances analytics with:

• DoubleClick cookie data (web activity)
• Device advertising IDs (app activity)
• Demographic data (age/gender) when available

• Data Processed: Trackers, Device identifiers (Google Advertiser ID, IDFA), Various usage data
• Control Options: Google Ads Settings | Google's Data Usage Policy
• Processing Locations: United States | Ireland (Privacy Policy)

3. Internal Analytics System

Function: The Next Fly's proprietary analytics platform that operates without third-party involvement.

• Data Processed: Cookies, Usage Data
• Data Retention: Controlled exclusively by The Next Fly

4. Google Analytics Demographics Reports

Function: Provides aggregated age and gender data within Google Analytics.

• Data Processed: Cookies, Device advertising IDs
• Opt-Out: Google Ads Settings
• Processing Location: Ireland (Privacy Policy)

5. Amplitude Analytics

• Provider: Amplitude Inc.
• Function: Advanced behavioral analytics service
• Data Processed: Trackers, Usage Data
• Processing Locations: United States (Privacy Policy), France (Privacy Policy)

6. Google Analytics for Firebase

Function: Mobile app analytics with integration to other Firebase services (Crash Reporting, Authentication, etc.).

• Key Features:
  • Uses device identifiers instead of cookies
  • Shares data with other Firebase tools
• Data Processed: Trackers, Usage Data
• Opt-Out Options: Device advertising settings, Firebase-specific controls in app settings
• Processing Locations: United States | Ireland (Privacy Policy)

7. Google Analytics 4 (GA4)

Function: Next-generation web analytics with enhanced privacy controls.

• Key Features:
  • IP address anonymization
  • Integrated with Google's advertising services
  • Provides user metrics without individual identification
• Data Processed: User counts, Session statistics, Trackers, Usage Data
• Opt-Out: Google Analytics Opt-Out
• Processing Location: United States (Privacy Policy)

User Controls & Contact

• Email: jobs@thenextfly.com
• Website: www.thenextfly.com

Analytics & User Engagement Services

1. Cloudflare Web Analytics

• Provider: Cloudflare, Inc.
• Type: Privacy-focused analytics
• Key Features:
  • Provides website usage insights without identifying individual users
  • Complies with strict data minimization principles
• Data Processed: Device information, language preferences, anonymized usage data
• Processing Location: United States (Privacy Policy)

User Communication Methods

1. Phone Contact

• Purpose: Commercial/promotional communications, customer support
• Data Processed: Phone number
• Control:
  • Request removal via jobs@thenextfly.com
  • Use unsubscribe option in messages

2. Contact Form

• Purpose: Responding to user inquiries (quotes, information requests)
• Data Processed: First name, last name, email, phone, company, country, profession
• Authorization: Submission constitutes consent for response-related processing

3. Mailing List/Newsletter

• Purpose: Commercial/promotional communications
• Opt-In Methods: Direct registration, website sign-up, post-purchase
• Data Processed: Email address, first name, last name
• Opt-Out: Unsubscribe link in all communications

Content Interaction Services

1. Comment Systems

A. Facebook Comments

• Provider: Meta Platforms, Inc./Ireland Ltd.
• Features:
  • Social media-integrated commenting
  • Anonymous posting option
  • Email notifications if email provided
• Data Processed: Cookies, usage data
• Processing Locations:
  • United States (Privacy Policy | Opt-Out)
  • Ireland (Privacy Policy)

B. Native Comment System

• Features: Managed by The Next Fly, email notifications for replies
• Data Processed: Email address, first name, last name

Embedded Content Services

1. Google Fonts

• Provider: Google LLC/Ireland Ltd.
• Function: Web font delivery
• Data Processed: Trackers, usage data
• Processing Locations:
  • United States (Privacy Policy)
  • Ireland (Privacy Policy)

2. YouTube Widgets

• Provider: Google LLC/Ireland Ltd.
• Function: Embedded video content
• Data Processed: Cookies, usage data
• Processing Locations:
  • United States (Privacy Policy)
  • Ireland (Privacy Policy)

Payment Processing

General Information

• Security Protocol: Only necessary transaction data shared with processors
• May Include: Automated payment notifications
• Features:
  • Credit card processing
  • Bank transfer capabilities
  • Invoice and notification emails

Payment Processing Services

1. PayPal

• Provider: PayPal Inc.
• Function: Secure online payment processing
• Key Features:
  • Credit card and bank transfer processing
  • Buyer/seller protection services
• Data Processed: Varies per transaction (PayPal Privacy Policy)
• Security: PCI-DSS compliant processing
• Contact: PayPal Support

2. Amazon Payments

• Provider: Amazon.com, Inc.
• Function: Payment processing using Amazon credentials
• Key Features:
  • One-click checkout for Amazon customers
  • Secure payment gateway
• Data Processed: Varies per transaction (Amazon Privacy Policy)
• Processing Location: Global (see Amazon's privacy policy for details)

User Behavior Analytics

Microsoft Clarity

• Provider: Microsoft Corporation
• Type: Heat mapping & session recording
• Features:
  • Visualizes user interaction hotspots
  • Records user sessions (optional)
  • Integrates with Microsoft Advertising
• Data Processed: Trackers (for behavior analysis)
• Privacy Controls: Microsoft Privacy Statement
• Processing Location: United States

Hosting & Infrastructure Services

1. Amazon Web Services (AWS)

• Provider: Amazon Web Services, Inc.
• Function: Cloud hosting and backend services
• Features:
  • Global server infrastructure
  • Secure data storage
  • Scalable computing resources
• Data Processed: All website data (AWS Privacy Policy)
• Security Certifications: SOC 1/2/3, ISO 27001, PCI DSS Level 1
• Processing Location: United States (with global edge locations)

2. OpenAI API

• Provider: OpenAI, L.L.C.
• Function: AI-powered task automation
• Features:
  • Natural language processing
  • Content generation tools
  • Data analysis capabilities
• Data Processed: Input/output data during API usage
• Privacy Policy: OpenAI Privacy Policy
• Processing Location: United States

3. Google BigQuery

• Provider: Google Ireland Limited
• Function: Data warehousing and analytics
• Features:
  • Large-scale data processing
  • Business intelligence tools
  • Machine learning integration
• Data Processed: Various types as needed (Google Cloud Privacy)
• Processing Location: Ireland

Social Media Integration

General Information

• Interaction Types: Social sharing buttons, embedded content, authentication via social accounts
• Privacy Recommendations:
  • Review your privacy settings on each platform
  • Log out of social networks when not in use
  • Manage connected apps regularly
• Data Collection Note: Social widgets may collect traffic data even when not actively used

Social Media Widgets

Facebook Like Button and Social Widgets

• Provider: Meta Platforms, Inc. (U.S.) / Meta Platforms Ireland Limited
• Function: Interaction with the Facebook platform
• Personal Data Collected: Cookies; Usage Data
• Data Processing Locations:
  • United States – Privacy Policy – Opt Out
  • Ireland – Privacy Policy – Opt Out

LinkedIn Button and Social Widgets

• Provider: LinkedIn Corporation
• Function: Interaction with the LinkedIn social network
• Personal Data Collected: Cookies; Usage Data
• Data Processing Location: United States – Privacy Policy – Opt Out

X Post Button and Social Widgets

• Provider: X Corp. (formerly Twitter)
• Function: Interaction with the X platform
• Personal Data Collected: Cookies; Usage Data
• Data Processing Location: United States – Privacy Policy

Managing Contacts and Sending Messages

SendGrid

• Provider: SendGrid Inc.
• Function: Manage email contacts and send messages
• Personal Data Collected: Email address; First name; Last name
• Data Processing Location: United States – Privacy Policy

Mailchimp

• Provider: Intuit Inc.
• Function: Manage contact databases and email communications
• Personal Data Collected: Company name; Country; Email address; First name; Last name; Phone number; Tracker; Usage Data
• Data Processing Location: United States – Privacy Policy

Customer Support and Communication

Intercom

• Provider: Intercom Inc. / Intercom R&D Unlimited Company
• Function: AI-powered customer support and communication
• Personal Data Processed: Email address, Trackers, UUID, Usage Data, and other data (see Intercom Privacy Policy)
• Processing Locations:
  • United States – Privacy Policy
  • Ireland – Privacy Policy

Registration and Authentication

Facebook Authentication

• Provider: Meta Platforms, Inc. / Meta Platforms Ireland Limited
• Function: Login using Facebook credentials
• Personal Data Processed: Trackers and other data (see Facebook Privacy Policy)
• Processing Locations:
  • United States – Privacy Policy – Opt Out
  • Ireland – Privacy Policy – Opt Out

Google OAuth

• Provider: Google LLC / Google Ireland Limited
• Function: Authentication via Google account
• Personal Data Processed: Various types (see Google Privacy Policy)
• Processing Locations:
  • United States – Privacy Policy
  • Ireland – Privacy Policy

Sign in with Apple

• Provider: Apple Inc.
• Function: Login via Apple ID (with private relay email)
• Personal Data Processed: Email address, First name, Last name, Password, User ID
• Processing Location: United States – Privacy Policy

Facebook OAuth

• Provider: Meta Platforms, Inc. / Meta Platforms Ireland Limited
• Function: Authentication using Facebook credentials
• Personal Data Processed: Trackers and various data types
• Processing Locations:
  • United States – Privacy Policy – Opt Out
  • Ireland – Privacy Policy – Opt Out

Direct Registration and Profiling

• Function: User identification and personalized services via website
• Personal Data Processed: Country, Email address, First name, Last name, Password, Phone number, Trackers, Usage Data

Registration via this Website

• Function: Account creation through sign-up form
• Personal Data Processed: Academic background, Address, City, Company name, Country, Date of birth, Email address, First name, Gender, Language, Last name, Number of employees, Password, Phone number, Profession, Workplace

Remarketing and Behavioral Targeting

Meta Custom Audience

• Provider: Meta Platforms, Inc. / Meta Platforms Ireland Limited
• Function: Remarketing via Meta’s advertising network
• Personal Data Processed: Cookies, Email address
• Processing Locations:
  • United States – Privacy Policy – Opt Out
  • Ireland – Privacy Policy – Opt Out

Facebook Remarketing

• Provider: Meta Platforms, Inc. / Meta Platforms Ireland Limited
• Function: Deliver targeted ads based on user interactions
• Personal Data Processed: Cookies, Usage Data
• Processing Locations:
  • United States – Privacy Policy – Opt Out
  • Ireland – Privacy Policy – Opt Out

Google Ads Remarketing

Google Ads Remarketing is a behavioral targeting service offered by Google LLC or Google Ireland Limited. It links the activity of this Website with the Google Ads advertising network and uses the DoubleClick Cookie to deliver personalized ads based on past user behavior.

Personal Data Processed: Cookies, Usage Data

Processing Locations:

• United States – Privacy Policy – Opt Out
• Ireland – Privacy Policy – Opt Out

Remarketing with Google Analytics

This service enables remarketing through the integration of Google Analytics tracking with Google Ads. It uses the DoubleClick Cookie to deliver targeted ads based on user interactions with the Website.

Personal Data Processed: Cookies, Usage Data

Processing Locations:

• United States – Privacy Policy – Opt Out
• Ireland – Privacy Policy – Opt Out

Social Features

Public Profile

Users may have public profiles visible to others, including personal details and interaction records with the Website.

Personal Data Processed: City, Company name, Country, Date of birth, Email address, First name, Gender, Geographic position, Last name, Phone number, Picture, Profession, Province, State.

Inviting and Suggesting Friends

The Website may use Users' data to allow invitations to friends and suggest new connections based on the User’s address book (if access is granted).

Spam and Bot Protection

Google reCAPTCHA

reCAPTCHA helps identify bots and prevent spam. It collects various user interactions such as mouse movements and touch events.

Personal Data Processed: Answers to prompts, Clicks, Keypress events, Motion sensor events, Mouse movements, Scroll position, Touch events, Trackers, Usage Data

Processing Locations:

• United States – Privacy Policy
• Ireland – Privacy Policy

Cloudflare Bot Management

Cloudflare detects and mitigates bot traffic across the Website, collecting data like IP address, browser info, and session data.

Personal Data Processed: App info, Application launches, Browser info, City, Clicks, Country, County, Custom events, Device info, Device logs, IP address, Keypress events, Session data, etc.

Processing Location: United States – Privacy Policy

Tag Management

Google Tag Manager

Google Tag Manager simplifies the management of tracking codes on the Website.

Personal Data Processed: Usage Data

Processing Locations:

• United States – Privacy Policy
• Ireland – Privacy Policy

Traffic Optimization and Distribution

Cloudflare

Cloudflare optimizes traffic distribution and enhances security, filtering traffic between the User’s browser and the Website.

Personal Data Processed: Various data types specified in the provider's privacy policy.

Processing Location: United States – Privacy Policy