Data and privacy

Helpful, never watched.

NextIntent exists to notice the moment a visitor needs help. That takes timing and movement. It does not take identity, keystrokes, or a recording, and the product is built so it cannot quietly start taking them later.

What the script measures

One script tag streams a small set of behavioral signals while a page is open: where attention is, how fast and how steadily the pointer moves, scroll depth and direction changes, pauses between actions, and navigation from page to page. These are timing and geometry, not content. They are folded into a live picture of the visit and the picture is what the decision is made on.

What it never captures

  • Keystrokes or form contents. Nothing typed is read, including what a visitor types into your chat.
  • Screenshots or session replays. There is no recording to watch back.
  • Page text. The script knows a page's address and title, not what is written on it.
  • Identity by default. A visit is a visit. Names, emails and companies are off unless you turn identity on.

Two switches, both yours

Signals

On by default. This is the timing layer, and it works entirely on anonymous behavior.

Identity

Off by default. If your site already identifies visitors through Squid ID, you can let that identity ride alongside the timing decision so your agent knows who it is talking to. Turning it on is a deliberate act in your settings, and turning it off stops the flow at once.

What the agent is told

When NextIntent decides the moment has come, your agent receives the opening, the page the visitor is on, and a short, plain description of the situation. It is never allowed to say what was measured. No "I noticed you have been reading this for a while." That rule is enforced in the message we hand over, not left to the agent's judgment.

Where it runs

Signals are processed in NextIntent's own cloud in the United States. The decision step uses a large language model from Anthropic, which sees the folded behavioral picture and the page context, not raw signals and not personal data. No behavioral data is sold, shared for advertising, or used to build profiles of people across sites.

Retention and deletion

Live behavior lives in memory for the length of a visit. What is kept afterward is the record of each decision and the compact behavioral snapshot behind it, so the timing policy can be calibrated per site and so we can show you what happened and why. Retention windows are set per customer, and we will publish the defaults before general availability. Deletion requests, for a visitor or for a whole site, are honored across every store.

Your visitors' rights

You stay the controller of your visitors' data and NextIntent processes it on your behalf. If your site honors a consent banner or a do-not-track preference, load the script under the same conditions and the timing layer simply stays off for that visit.

Questions

Write to hello@nextintent.ai. If something on this page is not true of the product, we will fix the product or the page.