Privacy Policy for OA Helper

We collect personal and non-personal information from You in the following ways in order to provide, maintain, and improve the Services:

A. Information You Provide to Us

• Identity and contact data — full name, email address, registered mobile number, and password;
• Academic data — name of college, university, or educational institution, batch or expected year of graduation, and branch of study;
• Professional data — company names, roles, interview experiences, and placement details voluntarily shared by You;
• User-submitted content — OA questions, assessments, interview experiences, comments, feedback, and any other material You upload or submit;
• Payment data — billing details and payment instrument information processed through our authorized payment service providers (we do not store full card or UPI credentials on our servers);
• Communications — support tickets, correspondence, survey responses, and any other information You send to us.

B. Information Collected Automatically

• Device and technical data — IP address, device identifier, browser type and version, operating system, time zone, and language preferences;
• Usage data — pages visited, features used, session duration, referral URLs, click-stream data, and interactions with content;
• Log data — server logs, crash reports, and diagnostic information;
• Cookies and similar technologies — cookies, local storage, and tracking pixels used to remember preferences and analyze usage.

C. Information From Third Parties

We may receive information about You from third-party sources such as authentication providers (e.g., Google Sign-In), payment processors, analytics providers, and institutional partners, in accordance with the privacy settings and permissions You have configured with those services.

NxtWave processes Your personal data strictly for specified, explicit, and legitimate purposes, including:

• Creating, authenticating, managing, and securing Your account;
• Providing, personalizing, and improving the Platform and Services, including interview preparation content, assessments, and recommendations;
• Processing subscription payments, verifying transactions, issuing invoices, and administering the OA Coins rewards mechanism;
• Communicating with You regarding Your account, transactions, service updates, security alerts, and support requests;
• Sending You promotional communications about features, offers, and opportunities, subject to Your preferences and applicable law;
• Conducting research, analytics, and aggregated reporting to understand usage patterns and improve the Platform;
• Detecting, investigating, and preventing fraud, abuse, security incidents, and violations of our Terms & Conditions;
• Complying with applicable laws, regulations, legal processes, and enforceable governmental requests.

NxtWave processes Your personal data on one or more of the following legal bases:

• Your free, specific, informed, and unambiguous consent, which You provide upon registration or through in-product prompts;
• The performance of a contract between You and NxtWave, including the provision of the Services You have subscribed to;
• Compliance with legal obligations applicable to NxtWave under Indian law;
• The legitimate interests of NxtWave in operating, securing, and improving the Platform, where such interests are not overridden by Your rights and freedoms.

You may withdraw Your consent at any time by contacting the Grievance Officer; however, such withdrawal may limit or prevent Your continued use of certain Services.

We use cookies, local storage, and similar tracking technologies to operate and secure the Platform, remember Your preferences, measure engagement, and deliver relevant content. Cookies may be first-party (set by us) or third-party (set by our service providers, such as analytics and payment partners).

Most browsers allow You to manage cookie preferences through their settings. Disabling certain cookies may affect the functionality of the Platform, including the ability to sign in or retain Your session.

NxtWave does not sell Your personal data. We may disclose Your information only in the following circumstances:

• To authorized service providers — payment processors, cloud hosting providers, analytics vendors, communication tools, and fraud-detection partners who process data on our behalf under confidentiality and data-protection obligations;
• To institutional or corporate partners — where You access the Platform through a college, university, or employer arrangement, limited to the data necessary for that relationship;
• To group companies and affiliates — for internal business operations, provided the recipient observes this Policy;
• To law enforcement, regulators, or courts — where required to comply with applicable law, a legal process, or an enforceable governmental request, or to protect the rights, property, or safety of NxtWave, its users, or the public;
• In connection with a corporate transaction — such as a merger, acquisition, restructuring, or sale of assets, where data may be transferred as part of that transaction subject to equivalent protections;
• With Your consent — for any other purpose disclosed to You at the time of collection or as subsequently authorized by You.

Your personal data is primarily stored on secure servers located in India. Where we engage service providers operating outside India, Your data may be transferred to, stored in, or processed in other jurisdictions. In such cases, NxtWave shall take reasonable steps to ensure that Your data is treated securely and in accordance with this Policy and applicable Indian data-protection laws.

NxtWave retains Your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including to provide the Services, comply with legal, tax, accounting, or reporting obligations, resolve disputes, and enforce our agreements.

Where Your account is terminated or You withdraw consent, NxtWave shall either delete, anonymize, or securely archive Your personal data within a reasonable period, except where retention is required by applicable law or to protect our legitimate interests.

NxtWave implements reasonable technical, administrative, and organizational safeguards designed to protect personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include encryption in transit, access controls, authentication mechanisms, and periodic security reviews.

However, no method of transmission over the Internet or electronic storage is entirely secure. You acknowledge that You provide Your personal data at Your own risk, and NxtWave cannot guarantee absolute security. You are responsible for maintaining the confidentiality of Your login credentials and promptly notifying us of any suspected unauthorized use of Your account.

Subject to applicable law, You have the following rights in respect of Your personal data:

• Right to access — to request a copy of the personal data we hold about You;
• Right to correction — to request correction of inaccurate, incomplete, or outdated personal data;
• Right to erasure — to request deletion of Your personal data, subject to our legal and operational retention obligations;
• Right to withdraw consent — to withdraw consent previously given for the processing of Your personal data;
• Right to grievance redressal — to raise a complaint regarding the handling of Your personal data through the Grievance Officer;
• Right to nominate — to nominate another individual to exercise Your rights in the event of death or incapacity, in accordance with applicable law.

To exercise any of these rights, please write to the Grievance Officer at the contact details provided below. We may request information to verify Your identity before acting on Your request.

Content You voluntarily submit to the Platform — including OA questions, interview experiences, comments, and feedback — may be visible to other users and to the public. You are responsible for ensuring that such content does not contain sensitive personal information, confidential information, or material that You are not authorized to share (including information subject to employer non-disclosure agreements).

NxtWave reserves the right to review, moderate, edit, or remove any content that violates this Policy, the Terms & Conditions, or applicable law.

The Platform may contain links to third-party websites, applications, or services that are not operated or controlled by NxtWave. This Policy does not apply to such third-party services. We encourage You to review the privacy policies of any third-party services before providing personal data to them. NxtWave is not responsible for the privacy practices or content of third-party services.

The Platform is intended for users who are at least 18 years of age. NxtWave does not knowingly collect personal data from individuals under the age of 18. If You believe that a minor has provided us with personal data, please contact the Grievance Officer and we will take reasonable steps to delete such data.

NxtWave may send You promotional communications about features, offers, and opportunities. You may opt out of marketing communications at any time by using the unsubscribe link provided in our emails or by contacting the Grievance Officer. Please note that even if You opt out of marketing communications, NxtWave may continue to send You transactional or service-related communications necessary for the operation of Your account.

NxtWave reserves the right to modify, amend, or update this Policy at any time at its sole discretion. Any changes will be effective immediately upon posting on the Platform, unless otherwise stated. Where required by applicable law, NxtWave shall provide additional notice of material changes. Your continued use of the Platform after any such changes shall constitute Your acceptance of the revised Policy.

This Policy shall be governed by and construed in accordance with the laws of India. Any disputes arising out of or in relation to this Policy shall be subject to the exclusive jurisdiction of the courts at Telangana, India, and shall be resolved in accordance with the dispute resolution mechanism set out in the Terms & Conditions.