Legal
Privacy Policy
Last updated: 8 November 2026
1. Introduction
Nextstep4u (“Nextstep4u”, “we”, “us” or “our”) respects your privacy. This policy explains what personal information we collect when you use nextstep4u.in, the Nextstep4u Android app and any related services (together, the “Services”), how we use it, and the choices you have.
By using the Services, you agree to the practices described here. If you do not agree, please do not use the Services.
Business details: Nextstep4u is operated by , , India.
2. Information we collect
We collect information you give us, information collected automatically, and information from third parties.
Information you provide
- Contact details such as your name, email address and phone number when you fill out a form, sign up or contact us.
- Account details: your name, and the Google account or mobile number you sign in with. Sign-in is handled by Google Firebase Authentication; we never see or store a password.
- Your test activity: the tests you take, your answers, timing and how sure you were, and the results and reports made from them.
- Profile and career information you choose to share, such as education, work history, goals or uploaded documents (for example, a resume).
- Payment details when you make a purchase. Payments are processed by Razorpay; we do not store full card numbers.
- Messages, feedback and survey responses you send us.
Information collected automatically
- Device and browser information, such as IP address, browser type, operating system and device identifiers.
- Usage information, such as pages viewed, links clicked, time spent and referring website.
- Approximate location derived from your IP address.
Information from third parties
- If you sign in with a third-party service (such as Google), we receive basic profile information that service shares with us.
3. How we use your information
We use personal information to run, improve and protect the Services. Specifically, we use it to:
- Provide the Services, create and manage your account, and deliver what you request.
- Respond to your questions and send service-related messages.
- Process payments and prevent fraud.
- Personalise content and recommendations.
- Understand how the Services are used so we can improve them.
- Send newsletters or marketing, where you have agreed or where the law allows. You can unsubscribe at any time.
- Comply with legal obligations and enforce our terms.
Where laws such as the GDPR apply, we rely on these legal bases: performing a contract with you, your consent, our legitimate interests (such as improving the Services and keeping them secure), and compliance with legal obligations.
4. Cookies and tracking technologies
We use cookies and similar technologies to keep the Services working, remember your preferences and measure usage.
You can block or delete cookies in your browser settings, and where required we ask for your consent before setting non-essential cookies. Blocking some cookies may affect how the Services work.
Microsoft Clarity. Only if you say yes on the cookie bar, we use Microsoft Clarity to see how visitors move through our home, guide, sign-in, plan and checkout pages: where they click and how far they scroll. Microsoft processes this outside India. All text on those pages is hidden from the recording, so it does not include your name, phone number, email or answers, and Clarity never runs on a test, a solution, a result, a report or your account page. We do not let Clarity link your visit to Microsoft advertising. Say no, and it never loads.
We do not show ads and use no advertising trackers, on the website or in the app.
The Android app. The app uses the same account as the website. It asks for internet access only. It sets no analytics or advertising trackers and does not load Microsoft Clarity. When you sign in with a mobile number, Google Firebase Authentication sends the code by SMS and uses Google Play services to check that the request comes from our genuine app. The app does not take payments.
5. How we share information
We do not sell your personal information. We share it only in these cases:
- Service providers who help us operate the Services, such as hosting, email delivery, payment processing and analytics. They may use your information only to provide services to us.
- Legal reasons, when required by law, court order or government request, or to protect the rights, property or safety of Nextstep4u, our users or others.
- Business transfers, if we are involved in a merger, acquisition or sale of assets, in which case your information may transfer to the new owner under this policy.
- With your consent, in any other case where you have agreed.
6. Data retention and security
We keep personal information only as long as needed for the purposes in this policy, or longer if the law requires it. When you delete your account, we delete or anonymise your information within 30 days, except where we must keep it for legal, tax or dispute-resolution reasons. Payment records, receipts and the record of actions on your account are kept for eight years, because Indian tax and accounting law requires it. Backup copies are kept for a limited time and are never used to bring deleted data back. How to ask, and exactly what is deleted and kept, is on Deleting your account.
We use reasonable technical and organisational safeguards, such as encryption in transit (HTTPS), access controls and secure hosting. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
7. Your rights and choices
Depending on where you live, you may have the right to:
- Access the personal information we hold about you.
- Correct information that is inaccurate or incomplete.
- Delete your information.
- Object to or restrict certain processing.
- Receive a copy of your information in a portable format.
- Withdraw consent at any time, without affecting earlier processing.
- Opt out of marketing emails using the unsubscribe link in any email.
To use these rights, email us at . We will respond within the time the law requires, and we may need to verify your identity first. You also have the right to complain to your local data protection authority.
California residents: you have the right to know, delete and correct personal information, and to opt out of its sale or sharing. We do not sell personal information, and we will not discriminate against you for using your rights.
India residents: under the Digital Personal Data Protection Act, 2023, you may contact our grievance officer at for any concern about your data.
8. Children’s privacy
The Services are not directed to children under 18. We do not knowingly collect personal information from children under that age without verifiable parental consent. If you believe a child has given us information, contact us and we will delete it.
9. International data transfers
Your information may be stored and processed in countries other than your own, including India, where our servers are, and the USA, because our sign-in provider is Google Firebase Authentication (Google LLC), which may store sign-in details in the USA. Where required, we use appropriate safeguards, such as standard contractual clauses, to protect it.
10. Third-party links
The Services may link to other websites. We are not responsible for their privacy practices, so please read their policies.
11. Changes to this policy
We may update this policy from time to time. We will change the “Last updated” date above and, for significant changes, notify you by email or a notice on the site.
12. Contact us
If you have questions about this policy or your information, contact us:
- Email:
- Address: , , India
- Phone: