Data Policy

We collect only what's needed to run the site and, for registered users, to power login and personalization.

We don't process payment data — there's no paid subscription live yet. We'll update this before that changes.

We never access your location, contacts, camera, or microphone without explicit permission.

We keep data only as long as each purpose needs:

After a deletion request, all personal data is erased within 90 days.

Your data lives on Supabase (PostgreSQL, AWS-hosted) and Vercel, with security practices suited to our current scale:

• Encryption in transit — all traffic is HTTPS/TLS.
• Passwords — hashed via Supabase auth, never stored in plain text.
• Access control — only the founder has database access, as NextAIToday is solo-run today.

As the team grows, this section will reflect whatever new safeguards are actually in place — nothing more.

We use a small set of third-party services, each handling only what it needs to:

None of these third parties use your data for their own marketing, beyond Google's standard ad-serving.

Your reading behavior powers a personalized feed and recommendations:

• Feed algorithm — past reads shape future rankings by topic.
• AI Tools Search — queries are used only for that session, not retained after.
• AI-assisted features — queries sent to Gemini or Claude aren't used to train their models, per their API terms.
• No custom ad profiling — we don't build our own ad profiles or sell your data.

Reset your feed preferences anytime from Account Settings.

Here's what we use, and what you can control via the banner below or your browser settings:

Analytics cookies load only after you accept them. Opting out doesn't affect core functionality.

Under the DPDP Act 2023, you can:

• Access — request a copy of your data.
• Correct — update account info via Profile Settings.
• Delete — permanently remove your account within 90 days.
• Opt-out — unsubscribe or disable personalization anytime.
• Grievance — raise a complaint within 30 days of an issue.

These requests are handled manually right now — just email us:

If a security incident happens:

• Affected users are notified by email within 72 hours of discovery.
• We'll state the scope, affected data, and remediation steps clearly.
• We report to CERT-In and relevant authorities within the required timeline.

Think your account is compromised? Contact hello@nextaitoday.in immediately.

NextAIToday isn't directed at anyone under 18, and we don't knowingly collect data from minors.

• Creating an account confirms you're 18+, or have verifiable parental consent.
• The DPDP Act 2023 requires verifiable parental consent before processing data of under-18 users.
• If we learn a minor's data was collected without consent, we delete it within 30 days.
• Parents/guardians can reach us at contact@nextaitoday.in

As required by the DPDP Act 2023, NextAIToday has a designated Grievance Officer who acknowledges and resolves complaints within 30 days.

Quick answers for you — and for AI search engines and voice assistants.

Questions about this policy or your data:

Also see: Privacy Policy · Terms of Use · Contact Us