Legal

Privacy Policy

Last updated: September 21, 2026

Versión en español: Aviso de Privacidad.

This website is operated by Next Generation Management S de RL de CV (“NGM”, “we”), a Mexican company with registered address at Av. Marte 1040, Local 19, Fracc. Monferrat, C.P. 81248, Los Mochis, Ahome, Sinaloa, Mexico, together with its U.S. affiliate NGEM Corp (3755 Florence St, San Diego, CA 92113, USA). This policy describes what personal information we collect through this site, how we use it, and the choices you have. Section 9 covers the bank accounts that customers of our software platform choose to connect.

1. Information we collect

We only collect the information you provide directly through our contact, quote, and early-access request forms:

We do not collect sensitive personal information or payment information through this site.

2. How we use your information

Primary purposes (needed to serve you):

Secondary purposes (not required; you may opt out):

To opt out of the secondary purposes at any time, email us at admin@ngmanagements.com. Opting out will never affect the services you request.

3. Cookies and local storage

This site uses no tracking, advertising, or third-party analytics cookies. We only use your browser's local storage (localStorage) to remember your language and small interface preferences (for example, whether you have already seen a usage hint). That information stays on your device, does not identify you, and you can clear it at any time from your browser settings.

We measure traffic with Plausible Analytics, a privacy-focused service that sets no cookies, stores nothing on your device and collects no personal information. It counts page views, referring sites and countries in aggregate; it never builds a profile of you and never follows you across other websites. That is why this site still needs no cookie banner and why the statements above remain accurate.

The site's fonts are served by Google Fonts and Fontshare; when your browser requests them, it sends your IP address to those providers as a technical part of the request. Neither provider sets cookies through this site.

4. Sharing and international transfer

We never sell your personal information. We may rely on service providers (for example, cloud hosting and email services) that process data solely on our behalf, under our instructions, and as required by law. The forms on this site are processed through our platform hosted on servers located in the United States (hosting provider Render), so your information is stored and processed in that country — and in Mexico — under the same protections described in this policy. Our affiliate NGEM Corp may access your information only for the purposes described here.

5. Do Not Track

This site does not track visitors over time or across third-party websites, so it does not change its behavior in response to browser “Do Not Track” signals.

6. Third-party collection

We do not allow third parties to collect personally identifiable information about your online activities over time and across different websites through this site.

7. Your rights and choices

You may review, correct, update, or request deletion of the personal information you have given us, opt out of marketing communications, or withdraw your consent at any time by emailing admin@ngmanagements.com with your name, the information involved, the request you wish to make, and a way to verify your identity. We will respond within the timeframes required by applicable law. If you are in Mexico, your ARCO rights (access, rectification, cancellation, objection) under the LFPDPPP are described in the Spanish-language Aviso de Privacidad.

8. California privacy rights (CCPA / CPRA)

If you are a California resident, this section describes your rights under the California Consumer Privacy Act, as amended by the CPRA. We provide it for transparency; we do not currently meet the CCPA's applicability thresholds, and we will follow it regardless.

Categories we collect. In the statute's terms, over the past 12 months we have collected only: identifiers (your name, email address and, if you give it, your phone or WhatsApp number); commercial information (the plan and billing option you told us you are interested in); and professional or employment-related information (your role, industry, number of active projects and team size). We collect them directly from you when you submit a form on this site, for the purposes described in section 2.

What we do not collect. Through this site, we do not collect sensitive personal information, biometric data, precise geolocation, financial account numbers, government identifiers, health data, or information about your activity on other websites. Bank data that a customer chooses to connect to our platform is described in section 9.

We do not sell or share your personal information. We have not sold personal information, and we have not shared it for cross-context behavioural advertising, in the past 12 months — and we do not do so today. Because of that there is no “Do Not Sell or Share My Personal Information” link on this site: there is nothing to opt out of. We also do not use or disclose sensitive personal information for purposes that would trigger the right to limit.

Your rights. You may request to know what personal information we hold about you and how we use it, to delete it, to correct inaccurate information, and to receive it in a portable form. Submit a request by emailing admin@ngmanagements.com with enough detail for us to locate the information and verify that the request is yours — we verify by matching what you send against what we already hold, and we will not ask you for more information than that requires. An authorized agent may submit a request on your behalf with written permission. We respond within 45 days and may extend once by another 45 days if we tell you why.

Retention. We keep form submissions for as long as needed for the purpose you sent them for, and no longer than 24 months after our last contact with you, unless a longer period is required to comply with a legal obligation or to resolve a dispute. After that we delete them.

No discrimination. We will not deny you service, charge you a different price, or give you a lower quality of service because you exercised any of these rights.

9. Our platform and connected bank accounts (Plaid)

This section applies to the companies that use our software platform, the NGM Hub, and to the people who work in it on their behalf. It covers one feature: connecting a business bank or credit card account to the Books module so that its transactions arrive automatically instead of being uploaded by hand. Connecting an account is always optional and is started by an authorized user of that company.

How the connection works. We use Plaid Inc. (“Plaid”) to connect to your bank. You sign in to your bank through Plaid's own window (or your bank's own sign-in page); your online banking username and password go to Plaid or to your bank, never to us, and we never see or store them. By connecting an account, you acknowledge that Plaid collects and processes information from your bank as described in the Plaid End User Privacy Policy.

What we receive. For the accounts you choose to connect, and nothing else: the name of the bank, the account name, type and subtype, the last four digits of the account number, its currency, and its transactions (date, amount, description, merchant name, and whether it is still pending). We do not receive full account or routing numbers, online banking credentials, identity information, or investment or loan data.

How we use it. Only to bring those transactions into your company's books so they can be reviewed, categorized and reconciled. We do not use bank data for marketing, we do not sell it, and we do not share it with anyone except the service providers that host our platform and process data solely on our behalf (Render for hosting and Supabase for our database, both in the United States).

How we protect it. The access that Plaid gives us for each connection is encrypted before it is stored and never leaves our servers. All data travels encrypted (TLS 1.2 or higher) and is encrypted at rest. Only users of your company who have bookkeeping permission can see or manage its bank connections, and each company's data is kept separate from every other company's.

Disconnecting, retention and deletion. You can disconnect a bank at any time from Books > Bank > Connections. Disconnecting revokes our access at Plaid and deletes the access credential we stored. Transactions already imported are part of your company's accounting records: we keep them while your company uses the platform and for as long as accounting and tax record-keeping laws require (up to 7 years), and then delete them. You can ask us to delete them earlier by writing to admin@ngmanagements.com, unless a legal obligation requires us to keep them.

10. Changes to this policy

We may update this Privacy Policy to reflect changes in our practices or in applicable law. The current version will always be available on this page, with its “Last updated” date. If we make material changes to how we handle information already collected, we will note it prominently here.

Contact

If you have questions about this Privacy Policy or about how we handle your personal information, write to us at admin@ngmanagements.com.