Last updated: 26 October 2026
AntNexo (antnexo.com) is run by Global Tech Distribution s.r.o., Voskovcova 1130/30, Hlubočepy, 152 00 Praha 5, Czech Republic, company ID (IČO) 04146549, VAT ID CZ04146549 (“we”). This policy explains what personal data AntNexo processes and why. Questions and requests: [email protected].
Two roles
- Our customers’ accounts. For people who sign up to AntNexo and run a workspace, we are the controller of their account and billing data.
- Feedback on our customers’ boards. A workspace’s boards, posts, comments and votes, and the people who post there, belong to the customer who runs that workspace. For that data the customer is the controller and we process it on their behalf as processor. If you posted on a board, the company running it is your first contact; we help them answer your request.
What we collect
- Account: your email address, name if you give one, your workspace memberships and roles, and passkeys you save (the public key and details such as a device label and when it was last used; never the private key).
- Content: what you and your users write in AntNexo: posts, comments, votes, initiatives, changelog entries, and translations of them.
- Widget data: if a customer embeds the AntNexo widget, the identity it sends for their signed-in user (an ID, email, name, and optionally company and revenue).
- Billing: your plan and subscription status. Card details go straight to Stripe; we never see or store them.
- Technical: IP addresses and request logs (for security, rate limits and fixing errors), kept for a short time.
- Website visits: on our website antnexo.com (not in the app or on boards) we count visits with Plausible Analytics, which we run ourselves on our own server in Frankfurt. It sets no cookies and keeps no IP addresses; it counts pages viewed, where visitors came from, their country, browser and device type, and events we set up, such as clicks on sign-up links.
We don’t use advertising trackers, and the app and boards have no analytics trackers.
Why we use it (legal basis)
- To provide the service you signed up for: accounts, boards, AI processing, emails you asked for (performance of a contract).
- To bill Pro subscriptions and keep accounting records (contract; legal obligation under Czech tax law).
- To keep AntNexo secure and prevent abuse, e.g. rate limits on sign-in emails (legitimate interest).
- To learn which pages of our website are useful, with cookieless visit counts (legitimate interest).
AI processing
AntNexo uses AI models to translate, de-duplicate, categorise and summarise feedback. Posts, comments, initiatives and changelog entries are sent to AI models through DigitalOcean’s inference platform. One of them, OpenAI’s GPT-4o mini, is run by OpenAI, so DigitalOcean passes the text sent to it on to OpenAI to process. The outputs are stored with the post so the team can review them. We don’t use your content to train models.
Who processes data for us
- DigitalOcean — hosting, database, file storage and AI inference; servers in Frankfurt, Germany (EU).
- OpenAI — runs GPT-4o mini, one of the AI models we reach through DigitalOcean’s inference platform; it receives the text sent to that model.
- Stripe — payments, invoices and tax for Pro subscriptions.
- ImprovMX — sending email (sign-in codes, notifications).
Some of these companies are based in the United States; transfers rely on the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.
Cookies and local storage
We use only what AntNexo needs to work: cookies that keep you signed in, and your browser’s local storage for preferences such as theme, language and unsent drafts. No consent banner is needed for these, and nothing is shared with third parties. Our website sets no cookies at all.
How long we keep it
We keep your data while your account or workspace exists. When you ask us to delete it, we delete it within 30 days, except what we must keep by law (invoices and accounting records: 10 years under Czech law). Deleted data stays in our database backups for up to 7 days, until they expire. Website visit statistics hold no IP addresses or cookies and are kept on our own server while the website runs.
Your rights
A workspace owner can export the workspace’s data themselves from its settings: a file of the posts, comments, votes, board visitors and team, kept for 7 days and then deleted. You can delete your account yourself on your Account page: your name and email are erased at once, and workspaces where you are the only member are deleted with it (their data is erased after 30 days). If you post on a board, you can delete your data on that board yourself: with “Delete my data” at the bottom of the board once you are signed in, or with the link at the bottom of any notification email it sends; your email, name and sign-in are erased at once, and your posts, comments and votes stay, shown as “Deleted user”. The board’s team can do the same for you. You can also ask us to access, correct, delete or export your personal data, to restrict or object to its processing, and to withdraw consent where it is the basis. Write to [email protected] from your account’s email address; we answer within 30 days. You can also complain to the Czech data protection authority, Úřad pro ochranu osobních údajů (uoou.gov.cz).
Changes
If we change this policy in a way that matters, we tell workspace owners by email before it takes effect. The date at the top shows the current version.