Privacy Policy

This policy explains what NextPG Predictor collects, why, and what control you have over it. We collect the minimum needed to run the Service.

What we collect

Account data. Your email address, and your name and profile picture if you sign in with Google. Optionally a phone number if you add one.

Prediction inputs. The name, gender, state, category, sub-category, answer counts and expected score you enter. These are stored with each prediction as a snapshot so your past reports never change when you edit your profile.

Payment data. Razorpay order and payment identifiers, amounts and status. We never receive or store your card details — those go directly to Razorpay.

Technical data. IP address and user agent, recorded in audit logs for security and to enforce rate limits.

Assistant conversations. If you use the counseling assistant, your questions and its answers are stored so the conversation has continuity.

What we do with it

• Generate your predictions, validations and reports
• Maintain your credit balance and payment history
• Authenticate you and keep your account secure
• Detect abuse and enforce rate limits
• Understand aggregate usage — which branches and states are popular — to improve the product

We do not sell your data. We do not share it with colleges, coaching institutes, or advertisers.

Who we share it with

Only the processors needed to operate:

• Neon — database hosting
• Vercel — application hosting
• Razorpay — payment processing
• Google — sign-in, only if you use it
• Upstash — rate limiting (identifiers only, no personal content)
• OpenAI — only if you use the counseling assistant; see below

The counseling assistant

If you use it, your question and a factual summary of your report (rank range, category, state, and the cutoff rows relevant to you) are sent to OpenAI to generate an answer. This is the only feature that sends your data to a third-party AI provider, and it is entirely optional — the rest of the Service works without it.

How long we keep it

• Predictions and reports — kept while your account exists. You paid for permanent access, so we do not delete unlocked reports.
• Payment records — retained as long as required by Indian tax and accounting law.
• Audit logs — retained for security review.

Your rights

You can:

• Access your data — most of it is visible in your dashboard
• Correct your profile at any time from the profile page
• Delete your account and all associated data by emailing us
• Export your data — email us and we will send it in a machine-readable format

Deleting your account removes your predictions, reports and conversations. Payment records are retained where the law requires it.

Security

• All traffic is encrypted in transit (HTTPS, HSTS enforced)
• Login codes are stored hashed, never in plaintext
• Payment signatures are verified cryptographically in constant time
• Access to your reports is scoped to your account on every request
• Privileged actions are audit-logged

No system is perfectly secure. If you believe your account has been compromised, contact us immediately.

Cookies

We use cookies only for authentication — to keep you signed in — and to remember your theme preference. We do not use advertising or third-party tracking cookies.

Children

The Service is for medical graduates preparing for postgraduate admission and is not directed at children under 18.

Changes

We will notify you of material changes by email or an in-app notice before they take effect.

Contact

For any privacy request or question: support@nextpg.in