Assistant settings
The assistant's dedicated WhatsApp line is connected here: scan the QR with the phone holding this line's SIM (WhatsApp → Linked devices). Status and the connected number are always shown here, and "Disconnect" lets you pair another phone. Only the senior admin sees this page. The assistant is included in the Pro plan and the lifetime license.
Per-user access to the assistant (web and WhatsApp) is set in the user form's permission matrix, not here. The "User access to the assistant" (web/WhatsApp) section also lives here and edits the same matrix permissions. This page is open to anyone with "System settings". The "Channels & limits" card: turn the assistant WhatsApp channel on/off (web is independent), per-user hourly caps for WhatsApp, and an optional web cap (0 = unlimited).
"Enable AI Assistant" switch
This switch sits above the "Channels & limits" card and is on by default.
- When off: the assistant does not work for anyone on the web or WhatsApp, it is removed from the menu, and no data is sent to the AI service for it. This page and "Assistant conversations" stay open so you can turn it back on whenever you like.
- Turning it on: a confirmation window opens and explains what data leaves.
- Turning it on and off is recorded in the activity log.
Personal AI connection (MCP)
This feature is included in the Pro plan and the lifetime license; on other plans its row is locked and has an upgrade link. The "Channels & limits" card also has the "Enable personal AI connection (MCP)" checkbox, off by default. When it is on, users ticked in the MCP column of the access table connect their own ChatGPT, Claude, Gemini or Cursor to the assistant's read-only tools from the "AI connection" card in their profile. A confirmation window opens when you turn it on. Turning it on and off, creating and revoking connections, and every call are recorded in the activity log. In the free demo this box is on by default so the person trying it can see the connection; untick it to turn it off.
AI connection security
Turn this feature on knowingly. Its security has three parts:
1. The AI service itself.
- With this connection on, the AI has access to almost the same information the user has in Nexto, as if it had signed in with their password.
- Answers are processed and stored on that service's servers (OpenAI, Anthropic, Google…). What that service does with the data is out of our hands.
- If you don't want your conversations used to train models, check that service's privacy settings.
- If you don't trust a service, don't turn this feature on. While it is off, no data leaves this way.
2. The connection path. All connections are encrypted with HTTPS. The user's password never reaches the AI service. The service only receives a short-lived token that you can revoke at any time.
3. Access in Nexto.
- The connection only reads; it cannot record, edit or delete documents or send messages.
- Each user sees only what they have permission for. Hidden accounts, profit without the P&L permission and private notes never leave.
- Tick the MCP column only for users who need it.
- Turning off the switch or revoking a connection cuts it off immediately.
Difference from the in-app assistant: with MCP, the data goes into the user's personal account on that service and is kept according to that account's settings.
Where your data goes
Three Nexto features use an external AI. Turn any of them off and its data does not leave.
| Feature | What is sent | Where to |
|---|---|---|
| Receipt reading (inbox and Bank Receipt OCR) | Only the receipt image | OpenAI, from Nexto's account |
| In-app assistant | The data needed for that answer, within the user's access | OpenAI, from Nexto's account |
| AI connection (MCP) | The data needed for that answer, within the user's access | The service the user chose, in their own personal account |
Key difference: in the first two rows, data goes through Nexto's API. Under OpenAI's stated policy, API data is not used to train models by default. With MCP, data goes into the user's personal account in ChatGPT, Claude or Gemini and is kept according to that account's settings.
Where to turn each one off:
- Receipt reading: "Off" mode in "Receipt extraction with AI" on the inbox settings page.
- Assistant: the "Enable AI Assistant" switch on this page.
- MCP: the "Personal AI connection" checkbox on this page.
All connections are encrypted (HTTPS).