LEGAL

Privacy Policy

Version 2026-11-14 · Last updated: 14 November 2026

NextGenTM, Inc., a Delaware corporation, which operates SuperEthos at superethos.ai.

Mailing address: 831 N Tatnall Street, Suite M #275, Wilmington, DE 19801, United States.

NextGenTM, Inc. ("we", "us") operates SuperEthos at superethos.ai and decides how personal information on this site is used. This policy covers this site only. Linked Super sites, Dr. Sujith's external channels and other services have their own policies. Privacy questions and requests: privacy@nextgentm.com. Legal, copyright and content concerns: legal@nextgentm.com. This policy is a notice, not a contract; using the site does not mean you consent to anything beyond what is described for a specific feature.

When we deliver a tailored deployment for a business customer under a signed agreement, the customer usually decides how its own staff and end-user information is used and, where we act as its processor, the processing terms are set out in that customer's own agreement with us. That customer's privacy notice then applies to its users. This policy covers information we handle for our own purposes.

AI reflection text. On CAI reflection, the description and optional context you type are sent to our server only after you tick the separate AI-processing consent box and the 18+ confirmation box and choose Generate. We forward that text, with public editorial source summaries, to our AI provider to produce a reflection, which is streamed back to your browser. This site does not save your text or the reflection; they stay on your screen until you reset, reload or leave. Please use fictional or redacted descriptions and do not include personal, confidential or sensitive information.

Email you send us. The contact page and our request pages prepare an email draft in your own email app; the site itself does not send or store it. If you send it, we receive your name, address, message and email metadata.

Visitor measurement. Our hosting platform records basic visit statistics for every visitor: pages viewed, referring site, country, browser, operating system, device type, time on page, page speed and errors. If you accept optional analytics, it also records which links and buttons you click and their visible labels, including clicks earlier in the same visit that were held in your browser until you chose. If you reject or never choose, held clicks are discarded; a Global Privacy Control signal keeps click analytics off. It does not set cookies for this or store files on your device. Like any web request, it receives technical information your browser sends (such as IP address and browser details) to derive these statistics; the platform states it does not retain IP addresses. We use the results only in aggregate and do not try to identify visitors.

Technical data. Hosting and delivery services process IP address, request headers, paths, timestamps and errors to deliver and protect the site. Error reports may include the error message and page path.

Your device. Your decorative-motion choice and a small public offline page are stored in your browser, as explained in the Cookie & Storage Policy.

Not collected. This site has no accounts, purchases, enrollment, social sign-in or uploads. It does not capture your voice, face or other biometric identifiers. Dr. Sujith's videos and audio are licensed, pre-produced media of him; playing them does not collect biometric data about you.

Generating a reflection you request — reflection text — consent given through the dedicated AI-processing checkbox (separate from the 18+ confirmation; reading this policy is not consent). You can withdraw by not generating, pressing Stop or Reset; withdrawal does not affect processing already completed.

Replying to your emails and business enquiries — contact details and message — steps you ask us to take before a contract, or our legitimate interest in answering correspondence.

Running and improving the site — basic visit statistics — legitimate interest in knowing which pages are useful and fixing errors, using reports. You can object at any time.

Understanding how pages are used — click analytics — consent through the analytics choice panel; withdraw any time with Cookie settings in the footer.

Running and securing the site — technical data, motion preference, offline page — legitimate interest in a working, secure service.

Handling rights requests, concerns and legal duties — request records — legal obligation, or legitimate interest in establishing and defending legal claims.

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Reflections are advisory text for your own review.

Reflections are produced by an AI model reached through the Lovable AI gateway; the model currently configured is supplied by OpenAI. These providers process your text to return the response and may keep technical logs under their own terms. We ask the provider not to store responses, but we cannot promise any particular provider retention or that text will not be processed outside your country. We do not use your reflection text to train models, and we do not keep it. Reflections are generated automatically, can be wrong, and never authorise or carry out any action.

We share information only with service providers who help us run the site: hosting, delivery and visitor measurement (Lovable and its infrastructure providers, including Cloudflare); our backend service (Lovable Cloud), which stores only service-availability status, never visitor content; AI processing (Lovable AI gateway and OpenAI) for reflections you request; and our email provider for messages you send. We may also disclose information where the law requires, to protect rights and safety, or in a corporate transaction with appropriate protections.

We do not sell personal information, share it for cross-context behavioural advertising, or use it for targeted advertising.

Reflection text and results: not kept by this site. Detailed visit statistics and any consented clicks: 90 days; visit summaries and daily totals: one year. Your analytics choice: 12 months after accepting, 6 months after rejecting. Motion preference and offline page: until you clear site data. Hosting and provider logs: according to those providers' schedules. Emails and request records: as long as needed to respond, follow up on a business discussion, document how we handled a rights request, and meet legal or dispute-resolution needs, then deleted or anonymised. Backups are overwritten on their normal cycle.

We use reasonable technical and organisational safeguards proportionate to this site, including input limits, no storage of reflection content and restricted backend access. No system is perfectly secure.

We are based in the United States and our providers may process information in the United States and other countries. For information from the UK, EEA or South Africa, the law requires a transfer to be covered by an adequacy decision or by appropriate safeguards (for example EU Standard Contractual Clauses or the UK International Data Transfer Agreement or Addendum) or another lawful condition. Which mechanism applies depends on the provider and its terms; this policy is not itself evidence of any specific contract. You can ask privacy@nextgentm.com for information about the safeguards relied on for a particular transfer.

Everyone. You can ask what we hold about you, ask us to correct or delete it, or tell us to stop using it for a purpose. Make a request through Your Privacy Choices or Data Deletion Requests, or email privacy@nextgentm.com. We will verify requests in proportion to the information involved, usually by replying to the email address concerned; we never need an account or login. An authorised agent may act for you with your signed permission, and we may confirm directly with you. We will not treat you differently for exercising your rights. If we decline a request, we will explain why and how to appeal by replying to our decision.

UK and EEA. You have rights of access, rectification, erasure, restriction, data portability, objection to processing based on legitimate interests, unconditional objection to direct marketing, and withdrawal of consent. We respond within one calendar month, extendable by up to two further months for complex or numerous requests, in which case we will tell you within the first month. You may complain to your data protection authority: in the UK the ICO; in the EEA, see the EDPB directory of authorities. Nothing in our terms limits these rights.

Switzerland. Under the Federal Act on Data Protection (FADP) you may request information about your personal data, a copy in a common electronic format where applicable, correction, deletion, and object to processing, and you may withdraw consent. Requests go to privacy@nextgentm.com; we generally respond within 30 days. Our providers may process information outside Switzerland; where the FADP requires safeguards for a transfer, you can ask us which apply. You may contact the Federal Data Protection and Information Commissioner (FDPIC).

United States. Depending on your state (for example California, Colorado, Connecticut, Virginia and others with consumer privacy laws), where those laws apply to us you may have rights to know, access, correct, delete and obtain a copy of personal information, and to opt out of sale, sharing or targeted advertising. In the past 12 months we have collected identifiers and internet activity (technical and visit data), approximate geolocation (country), and the contents of messages and reflection text you choose to provide, from you and your browser, for the purposes in section 3, disclosed to the service providers in section 5. We do not sell or share personal information or use it for targeted advertising, and we honour Global Privacy Control signals as an opt-out. We respond within 45 days, extendable where the law allows with notice. If we deny your request you may appeal by replying to our decision; if the appeal is denied you may contact your state attorney general.

India. The Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025 are coming into force in phases, with core obligations and rights scheduled to apply from May 2027. As those provisions apply and are in force, you may request a summary of your personal data and its processing, correction, completion, updating and erasure, withdraw consent, nominate another person to act for you, and raise a grievance. Until then, applicable rules under the Information Technology Act continue to apply. Send privacy grievances to privacy@nextgentm.com; this inbox is our contact point for privacy requests and is not a statutory officer appointment. Where consumer protection rules apply, we acknowledge consumer grievances within 48 hours and aim to resolve them within one month; this is separate from privacy request timelines. You may write in a regional language and we will arrange a reply you can understand where practicable.

South Africa. Under POPIA you may ask whether we hold information about you and request access, correction or deletion, and object to processing, including for direct marketing. We will only send electronic direct marketing with your consent or, for our existing customers, about similar services with a free opt-out in every message. You may complain to the Information Regulator. To request records under PAIA, email privacy@nextgentm.com with the subject "PAIA access request"; this is separate from a deletion request.

This site is for adults aged 18 or older. We do not knowingly collect children's information, and the reflection feature requires confirmation that you are 18 or older. If you believe a child has given us information, contact privacy@nextgentm.com and we will delete it.

We will post changes here with a new version and date, and give more prominent notice of material changes where the law requires. Earlier versions are available on request from privacy@nextgentm.com.

Next step

Human judgment for your business.

Build around your knowledge. Choose your audiences, uses and review process.

Discuss your business use case Learn with Dr. Sujith