Privacy Policy

NextUp is a walk-in waitlist for service businesses, such as barbershops, salons, auto service and repair shops. This policy explains what we collect when you join a business's line, how we use it, and how long we keep it.

What we collect

• Your name, as you type it, so the business can call you.
• Your mobile number, only if you choose to give it and agree to receive text messages about your spot in line.
• Your photo, only if you choose to add one: it's visible only to staff at that location, and it's deleted when your visit ends and within 24 hours. We do not retain any indication that you have visited before unless you explicitly choose the "Remember me" option at check-in.
• Your email address, only if you choose to give it — used to send you updates about your spot in line, and, if you separately opt in, occasional messages from the business. You can join without one.
• Visit details: which business's line you joined and when you joined, were called and were served.

We don't ask for an account, a password, or payment details.

Sometimes an employee at the business adds you to the line on your behalf — for example, when you give your name at the counter instead of scanning a QR code yourself. In that case the business is the one collecting your information and entering it into NextUp; the same data handling practices described here apply to what NextUp stores.

How we use it

• To hold your place in line and show your position and estimated wait.
• To send the text messages you asked for about your spot in line, such as a confirmation when you join, updates as the line moves and an alert when it's your turn. Texts you send us during your visit are shown to that business's staff so they can reply.
• To show the business's line on its screens. Public screens show only your first name and last initial.

Text messages

We only text numbers whose owners checked the consent box when joining a line. Messages are about your spot in that line; we never send marketing messages. You can reply STOP at any time to stop messages and HELP for help. See our SMS Terms for details.

We do not sell, rent or share your mobile number or text-messaging consent with third parties or affiliates for marketing or promotional purposes. Text-messaging opt-in data and consent are never shared with any third party, except the service provider that delivers the messages on our behalf.

Who we share it with

• The business whose line you joined, so they can serve you.
• Service providers that run NextUp for us: our hosting provider, and Twilio, which delivers text messages. They may only use your information to provide that service. See the full list of subprocessors.
• Authorities, if the law requires it.

How long we keep it

• Phone numbers are deleted automatically 24 hours after you join a line — unless you chose "Remember me" at check-in, in which case your number is kept to recognize you on future visits and deleted when you opt out or ask us to remove it.
• Visit details (name and times) are kept for up to 400 days (about 13 months) so businesses can see how busy they've been, then deleted automatically.

Your choices

You can join without a phone number, leave the line at any time from your spot page, and reply STOP to end texts. To ask us to delete your information, email [email protected].

Business accounts

If you run a business on NextUp, we also keep your name and email address to sign you in, and, when you subscribe, your billing details are handled by Stripe (we never see or store your card number). We send account emails, such as sign-in codes and invitations, through Resend. If you sign in with Google, we receive your name, email address and Google account ID. We keep account information while your account is open and delete it on request.

If you came to NextUp from one of our ads, your browser keeps the ad's click ID and campaign tags (such as the search keyword) for up to 90 days, in its own storage, and sends them when you create a business. We use them to learn which ads bring businesses that use NextUp, and we tell Google Ads or Microsoft Advertising, by that click ID alone, when the business signed up, started taking check-ins and subscribed. We never send them your name, email address or anything about your customers, and NextUp's pages load no advertising or tracking scripts (NextUp uses Plausible Analytics, a cookie-free, privacy-friendly tool that collects no personal data — see the subprocessors page). The tags are deleted with the business.

We log account activity (sign-ins, settings changes, invitations and deletions) for security and audit purposes. These log records include your IP address and are deleted after 365 days. Contact form submissions also record the submitter's IP address.

The app uses session cookies to keep you signed in: one for owner and manager accounts (nextup_session), one for staff screens (nextup_staff), and short-lived cookies for two-factor authentication and Google sign-in. These are strictly-necessary authentication cookies — no advertising or tracking cookies are used.

Children

NextUp is not directed at children under 13, and we don't knowingly collect their information.

Changes and contact

If we change this policy, we'll update the date above. Questions? Email [email protected].