Privacy policy

Last updated: 22 October 2026

This policy covers nextagora.online: the marketing site and the dashboard our partners sign in to. It does not cover the portals we run for our partners (for example housingcoop.eu). Each of those has its own privacy policy, because there the partner decides what happens with the data and we process it on their behalf. Data & trust explains how that works.

1. Who is responsible

The controller under the General Data Protection Regulation (GDPR) is:

NextAgora is a project led by Jonathan Imme and not yet a legal entity. We are not required to appoint a data protection officer.

2. Visiting the website

Hosting. The site runs on Vercel (Vercel Inc., USA); the servers that run our code are in Frankfurt. When you open a page, your browser sends the technical data every website receives: your IP address, the date and time, the page requested, the referring page, and your browser and operating system. Vercel processes this to deliver the page and keeps short-lived logs for security and error-finding.

Visitor statistics. We count visits with Vercel Web Analytics. It sets no cookies and stores no IP addresses: visitors are told apart by a value derived from the request that is discarded after 24 hours. It records the page, the referrer, the country, the browser, the operating system and the device type. We cannot identify you from these statistics.

Fonts and videos are served from our own hosting. Your browser does not contact Google Fonts, YouTube or any other third party to show them.

Legal basis: our legitimate interest in running a secure, working website and understanding how it is used (Art. 6 (1) (f) GDPR).

3. Cookies

The public pages set no cookies at all. The partner dashboard uses only the cookies that are strictly necessary to sign you in (§ 25 (2) TDDDG). We use no advertising or tracking cookies, so there is no cookie banner.

4. Demo requests and contact messages

When you book a demo, apply as a founding partner or write to us through the contact form, we receive your name, email address, organisation (if you give it) and your message. We store them in our database (Neon, Frankfurt) so we can reply and prepare the conversation. We don’t add you to a newsletter, and we don’t share your details with anyone else.

Legal basis: steps you asked for before a possible contract (Art. 6 (1) (b) GDPR); otherwise our legitimate interest in answering you (Art. 6 (1) (f) GDPR).

5. The partner dashboard

Partners sign in with their Google account. Google (Google Ireland Limited) then sends us your name, email address and profile picture. We store these with your role and the organisation you belong to, and keep a session record while you are signed in. In the dashboard you can see your subscription and invoices and send us support requests, which we store with your account.

Legal basis: the contract with your organisation (Art. 6 (1) (b) GDPR) and our legitimate interest in giving its team members access (Art. 6 (1) (f) GDPR).

6. Billing

We bill partners through Stripe (Stripe Payments Europe, Limited, Ireland). Stripe receives the billing contact, billing address and payment details and processes the payments; we never see full card or account numbers. We keep the subscription status and invoices in our database.

Legal basis: the contract (Art. 6 (1) (b) GDPR) and our legal duty to keep accounting records (Art. 6 (1) (c) GDPR).

7. Who receives your data

Only the service providers named above, who process it on our behalf under data processing agreements (Art. 28 GDPR): Vercel (hosting, statistics), Neon (database, Frankfurt) and, for the dashboard and billing, Google and Stripe. We don’t sell your data or use it for advertising. We may have to disclose data where the law requires it.

8. Transfers outside the EU

Vercel, Neon, Google and Stripe belong to companies based in the USA, even where our data is stored in the EU. Where a company is certified under the EU–US Data Privacy Framework, the transfer rests on the European Commission’s adequacy decision (Art. 45 GDPR); otherwise on the Commission’s standard contractual clauses (Art. 46 (2) (c) GDPR).

9. How long we keep data

10. Your rights

You have the right to:

• access the data we hold about you (Art. 15 GDPR);
• correct it (Art. 16);
• have it deleted (Art. 17);
• restrict how we use it (Art. 18);
• receive it in a common format or have it passed to someone else (Art. 20);
• withdraw consent at any time, with effect for the future (Art. 7 (3));
• object to processing based on our legitimate interests, on grounds relating to your situation (Art. 21).

To use any of these rights, email jonathan@nextagora.online.

You can also complain to a data protection authority. Ours is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin, www.datenschutz-berlin.de.

11. Do you have to give us your data?

No. You can read the whole website without giving us any personal data. To hear back from us we need at least your name and email address; to use the dashboard, a Google account.

12. Changes

We’ll update this policy when the website or the law changes. The date at the top shows the current version.