Home  /  Privacy

Privacy

This page explains how NextBigStock handles the personal information you share with us, the security measures we apply, and the rights you have under applicable data protection laws. It also brings together our commitments around regulatory compliance and the documents that govern how we process information collected from waitlist users and from customers of our research platform.

Company & ownership

The NextBigStock service (the "Service") is owned and operated by Premier Market Research, Inc. ("PMR", "we", "us"), a company registered in the United States. PMR is the proprietor of NextBigStock® and NBS®, which are registered trademarks of Premier Market Research, Inc. All references in our documentation to "NextBigStock" or "NBS" refer to the Service operated by PMR under those trademarks.

Available documents

1. Terms & Conditions
2. Privacy Policy
3. List of Sub-processors
4. Do Not Sell or Share My Personal Information
5. Cookie Notice
6. Security Overview

Regulatory compliance

NextBigStock complies with both the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA). Where we act as a data processor on behalf of a customer, we follow the obligations set out in our Data Processing Agreement, including security, retention and instruction-following clauses. Where we act as a data controller, the relevant details are set out in our Privacy Policy.

Categories of personal data we process

• Providing the Service: identifiers such as name, email address, mobile number for anti-bot verification, and any research or portfolio preferences the user chooses to share.
• Account management: billing details, subscription state, support correspondence.
• Analytics: browsing data, page performance, aggregate usage patterns, device identifiers.
• Recruitment (only if you apply): resume, professional background and application materials.

Security measures

We apply industry-standard technical and organizational safeguards to protect personal data. These include:

• Password hashing using modern algorithms with per-user salt.
• Data transmission encrypted in transit via TLS 1.2+ (HTTPS everywhere).
• Data at rest encrypted with AES-256.
• Role-based access control and least-privilege access to production systems.
• Regular vulnerability testing and dependency review.
• Encrypted event and access logs retained for a rolling 12-month window.
• Hosting on infrastructure providers with recognized security certifications.

Data hosting

Personal data collected through the Service is hosted with reputable cloud infrastructure providers located in the United States. Where you interact with our email or SMS provider, certain metadata may transit through their own regional infrastructure.

International data transfers

When personal data is transferred outside the European Economic Area (EEA) or the United Kingdom, we rely on the Standard Contractual Clauses adopted by the European Commission (Decision EU 2021/914) together with the UK international data transfer addendum, and on other lawful transfer mechanisms where appropriate.

Data breach process

Where we act as a processor, we notify our customers without undue delay under the terms of our DPA. Where we act as a controller, we notify the affected data subjects and the relevant supervisory authorities in accordance with applicable law.

Customer audits

Business customers may audit our processing activities in accordance with the specific conditions set out in our Data Processing Agreement.

Data reuse restrictions

We do not repurpose customer-submitted data or any research outputs generated for a customer for our own commercial purposes. Data provided by a customer is used exclusively to deliver the Service to that customer.

Data retention

Waitlist email addresses are retained for as long as your subscription to launch communications is active. Verification metadata (such as phone numbers used for the one-time bot check) is retained only as long as needed to satisfy the verification and to comply with our anti-fraud obligations. Enriched research outputs remain in customer accounts for 12 months by default, after which they are automatically deleted, unless the customer downloads or extends retention within that period.

Data subject rights

Users may exercise their data protection rights (access, rectification, deletion, restriction, portability, objection, opt-out of sale/share where applicable) by contacting us at the address below. We respond within the timelines required by applicable law.

Contractual governance

Relationships between PMR and its customers are governed by the applicable Order Form (where one exists), these Terms & Conditions, and, where personal data is processed on the customer's behalf, the Data Processing Agreement.

End-of-contract data deletion

Upon termination of a customer's contract, we delete all personal data processed on that customer's behalf, except where retention is required by applicable law.

Research reports & dashboard

Description of the service

NextBigStock provides subscribers with AI-assisted equity research, including full research reports, weekly high-conviction stock picks, pre-IPO alerts and access to an interactive online dashboard. Reports are not personalized investment advice; they are research outputs that subscribers may use to inform their own investment decisions.

Role under data protection law

For content generation and analytics tied to the dashboard, PMR acts as an independent data controller. For customer-uploaded lists (for example, watchlists imported by the user), PMR acts as a data processor on the customer's behalf.

Data sources

Our research pipeline uses publicly available market data, filings sourced from securities regulators, transcripts and news feeds licensed from third-party vendors, and internal analytical models. We do not build a database of private personal data from third-party sources for research purposes.

Sub-processors

We use a small number of vetted sub-processors to operate the Service, including providers for email delivery, SMS verification, cloud hosting, error monitoring and payment processing. A current list of sub-processors is available on request. All sub-processors are bound by appropriate contractual safeguards.

Data storage duration

Research outputs generated for a subscriber are stored inside the subscriber's dashboard for 12 months by default. During that period the subscriber can download, extend or delete individual reports.

Waitlist & SMS verification

When you join the launch waitlist, we collect your email address to send you launch updates. Before your spot is confirmed, we may ask for your mobile number and send one SMS verification code to confirm you are a real person and not an automated signup. Your mobile number is used solely for this verification and for related account-security messages. It is not shared or sold to third parties for marketing purposes.

You may opt out of any SMS at any time by replying STOP. Reply HELP for assistance. Standard message and data rates from your carrier may apply.

Not investment advice

NextBigStock is a research and information service. Nothing on this website, in any research report, alert or dashboard view constitutes personalized investment advice, an offer to buy or sell any security, or a recommendation tailored to your individual financial situation. Past performance is not indicative of future results. You should consult a licensed financial advisor before making investment decisions.

Contact

For any question relating to this page, our documentation, or the exercise of your data protection rights, please contact us at hello@nextbigstock.ai.

Last updated: July 8, 2026.