Effective date: 1 October 2026 Last updated: 10 October 2026
1. Who we are and what this policy covers
NXTUTORS EDTECH PRIVATE LIMITED ("NXTutors", "we", "us") runs www.nxtutors.com, the NXT AI assistant, our WhatsApp service and user dashboards (the "Platform"). For the personal data described here, we are the Data Fiduciary under the Digital Personal Data Protection Act, 2023 ("DPDP Act"). This policy also meets the requirements of the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
It covers parents, students, tutors and visitors. Office: COS/R/1L/BLK-2/49, M3M Cosmopolitan, Sector 66, off Golf Course Extension Road, Badshahpur, Gurugram, Haryana 122101, India. Contact for data questions: Ajay Tiwary, [email protected].
2. Personal data we collect
From parents and students
- Contact and account details: name, phone number, email address, password (stored only in hashed form) and the one-time codes used to confirm them.
- Tutor request details: the student's class, board, subjects, the student's first name if you give it, city, locality or pincode, home or online mode, preferred timings, start date, budget and any note you write.
- Location: the area, city or pincode you type or pick on the map, or your device location if you choose "Use current location".
- Learning records: where a family uses the dashboard, attendance, topics covered, progress and class schedules, kept only with a parent's consent for a child.
- Messages: what you send us on WhatsApp, through forms or in NXT AI chats, and replies between you and tutors on the Platform.
- Reviews you write: your name, email address, role, ratings and comments.
- Payments: the plan bought, amount, order and transaction references and payment status. Card, UPI and bank details are handled by our payment gateway, not by us.
From tutors
- Name, phone number, email address, password (hashed), photo, gender if given, qualifications, experience, subjects, classes, boards, areas served, fees, availability and profile text.
- ID check: the type and number of a government photo ID and images of its front and back. This is used only to confirm identity and to stop one ID being used for more than one account.
- Plan purchases, lead unlocks, replies, quotes and the reviews other users write about you.
Collected automatically
- IP address, device and browser type, pages viewed, the page you came from, campaign tags in the link, and the date and time of visits.
- Cookies and browser storage, described in the Cookie Policy, including Google Analytics and Google Ads tags.
- Searches typed into the site search and which suggestion was picked, linked to a random browser identifier rather than to your name.
- When you tap a WhatsApp button, a short reference code that records the page, the tutor or comparison you were looking at and any chat with NXT AI, so that we do not have to ask you again.
3. Why we use it, and on what basis
| Purpose | Basis under the DPDP Act |
|---|---|
| Finding and suggesting tutors for your request, sharing it with matched tutors, arranging the free demo and switching tutor | Consent you give when you send the request; data you provide voluntarily for this purpose (section 7(a)) |
| Creating and securing accounts, confirming phone and email, logging in | Consent; voluntarily provided data |
| Tutor ID check, Verified badge, preventing duplicate or fake profiles | Consent given when the tutor uploads the ID |
| Selling and running plans, processing payments, invoices and refunds | Consent; voluntarily provided data; compliance with tax and accounting law (section 7(c) and (d)) |
| Answering questions in NXT AI and WhatsApp | Consent given when you start the chat |
| Remembering your tuition requirement across WhatsApp conversations, and passing it to the NXTutors service you are moved to (for example TutorTwin or your family's counsellor), so you are not asked the same questions again | Consent given when you message us; we tell you in our first reply and you can withdraw it by replying DELETE MY DATA |
| Learning records for a child on the dashboard | Verifiable consent of a parent or guardian (section 9) |
| Publishing tutor profiles and moderated reviews | Consent of the tutor or reviewer |
| Keeping the Platform safe: preventing fraud, abuse and harm to children, enforcing our terms | Consent; compliance with law; legitimate uses permitted by section 7 |
| Measuring and improving the Platform; advertising to adults | Consent, which you can withdraw (see the Cookie Policy) |
| Service messages about your request, account or plan | Consent given with the request or account |
| Promotional messages | Only with your separate consent; you can opt out at any time |
| Meeting legal duties, answering lawful requests, handling disputes | Compliance with law and court orders (section 7) |
We do not use your personal data for a purpose that is not compatible with these purposes without telling you and, where needed, asking for your consent.
4. Who we share it with
- Matched tutors. When we match a tutor to your request, the tutor sees the class, board, subject, mode, city, locality, preferred timings and budget. If the tutor opens the request, they also see the student's first name, your note and the start date. A tutor you choose to continue with will receive the contact details needed to arrange classes.
- Parents. Tutor profiles show the tutor's name, photo, subjects, areas, experience, fee and reviews. A tutor's ID document, ID number, phone number and email address are not shown on the profile.
- Everyone who visits the site. Tutor profiles and published reviews are public. Our area pages may show short summaries of recent requests, described in section 5.
- Service providers who process data for us under contract and only on our instructions, including web hosting and content delivery, email delivery, WhatsApp messaging (Meta), our payment gateway (Cashfree Payments), Google (Analytics, Ads and fonts), OpenAI (which generates NXT AI's replies) and OpenStreetMap's location search.
- Authorities, when Indian law, a court or a government agency lawfully requires it, or when needed to protect the safety of a child or any person.
- A buyer or successor, if our business is merged, sold or restructured, under the same protections as this policy.
We do not sell personal data and we do not rent it to anyone.
5. Anonymised request summaries
To help families see what others nearby look for, our area pages may show short summaries of recent tutor requests: the month, the class, the board and the subject only (for example, "Oct 2026 · Class 10 · CBSE · Maths"). We never show a name, phone number, email address, school, housing society or exact date, and we show these summaries only where there are enough requests that no family can be identified. To ask us to leave your request out, write to [email protected].
6. Children
- Accounts, requests and plans are meant for adults: parents, guardians, adult students and tutors.
- When a student under 18 is involved, we process their data for tuition and learning records only with the verifiable consent of a parent or legal guardian. For example, before we keep a child's attendance, topics and progress, we send the parent a confirmation link where they confirm that they are the parent or guardian and that they are 18 or older.
- A parent or guardian can withdraw that consent at any time from the account or by messaging us, and can exercise the child's rights on the child's behalf.
- We do not use a child's personal data for behavioural monitoring or targeted advertising, and we do not process it in a way likely to harm the child's well-being.
- If you think we hold a child's data without proper consent, write to us and we will act on it.
7. How long we keep it
- Accounts and profiles: while the account is open. After you close your account, we erase or anonymise the data within 90 days, except as listed below.
- Tutor ID documents: while the tutor account is open, and erased within 90 days after it closes, unless needed for a pending complaint, an investigation or a legal requirement.
- Tutor requests and messages: for as long as needed to serve the request and handle any complaint about it, normally not more than 3 years after your last activity.
- NXT AI chats by visitors who are not signed in: removed after 14 days.
- WhatsApp reference codes: expire after 30 days.
- WhatsApp requirement memory (who is enquiring, the child's class, board and subjects, area, mode, timings, budget, the stage of your request and a short summary; never the text of your messages): up to 365 days after your last message, or until you reply DELETE MY DATA.
- Payment and invoice records: for the period required by tax and company law, which is currently up to 8 years.
- Security and access logs: at least one year, as required by law.
Where the law requires us to keep data longer, or where it is needed for a legal claim, we keep it only for that purpose.
8. How we protect it
We use reasonable security practices, including encrypted connections (HTTPS), hashed passwords, access limited to staff who need it, review of uploaded ID documents by our team only, pseudonymised phone numbers in our automated assistants, and limits on what is written to logs. No system is completely secure. If a personal data breach happens, we will inform affected users and the Data Protection Board of India as the law requires, and the Indian Computer Emergency Response Team where applicable.
9. Processing outside India
Some service providers, such as Google, Meta (WhatsApp), OpenAI and our content-delivery provider, may process data outside India. We transfer personal data abroad only as permitted by section 16 of the DPDP Act, and never to a country that the Government of India has restricted.
10. Your rights
Under the DPDP Act you have the right to:
- get a summary of the personal data we process about you and the processing activities, and the identities of those we have shared it with;
- have inaccurate or incomplete data corrected, completed or updated;
- have your data erased when it is no longer needed for the purpose for which it was collected, unless the law requires us to keep it;
- withdraw your consent at any time, as easily as you gave it. Withdrawal does not affect processing already done, and we may then be unable to provide the service that depended on it;
- nominate another person to exercise your rights if you die or become unable to do so;
- have your grievance addressed by us, and, after that, complain to the Data Protection Board of India.
On WhatsApp you can erase what we hold for your number yourself: reply DELETE MY DATA, then YES to confirm. We delete your requirement, chat history and memory, and confirm in the same chat.
To use a right, write to [email protected] from the email or phone number on your account. We may need to confirm your identity. We aim to respond within 30 days and, in any case, within the time allowed by law. You must not file a false or frivolous complaint or impersonate anyone when making a request.
If you prefer, you can manage your consent through a Consent Manager registered with the Data Protection Board, once that service is available.
11. Messages and calls
We contact you about your request, demo, account or plan by phone, WhatsApp, SMS or email. We send promotional messages only with your consent. You can stop them at any time by replying STOP on WhatsApp, using the unsubscribe link in an email or writing to us.
12. Language
This policy is in English. If you would like it in Hindi or another language listed in the Eighth Schedule to the Constitution, write to us and we will provide it.
13. Changes to this policy
We may update this policy. The date at the top shows when it last changed. If a change is significant, we will tell you on the Platform or by email before it applies and, where the law requires, ask for your consent again.
14. Contact and grievances
Questions or complaints about personal data: Ajay Tiwary, NXTUTORS EDTECH PRIVATE LIMITED, COS/R/1L/BLK-2/49, M3M Cosmopolitan, Sector 66, off Golf Course Extension Road, Badshahpur, Gurugram, Haryana 122101, India, [email protected]. See Grievance Redressal for how complaints are handled and the timelines.