Privacy policy

• Account: your email address, sign-in times and the version of our terms you accepted.
• Purchases: what you bought, when, the amount and the payment reference, and, if you buy for a company, the company name, GSTIN, billing address, PO number and invoice email you give us for the GST invoice. Card, UPI and bank details go directly to Razorpay or Stripe; we never see or store them.
• Use of paid content: reports you open, PDF editions issued to you and questions you ask a Brain, with the answers.
• Technical data: IP address, browser and device type, recorded with sign-ins, PDF issues and questions asked, and in server logs.
• Messages you send us by email.

We do not collect sensitive data such as health or financial account information, and we do not use advertising trackers or sell your data.

• To create your account, sign you in and give you the access you paid for.
• To take payments, keep accounting and tax records and handle refunds.
• To answer your questions and keep your conversation history.
• To enforce the one-person licence: detecting shared accounts and tracing redistributed PDFs, which carry the licensee's email address (see terms, section 4).
• To keep the service secure, fix problems and understand which content is used.
• To send service emails, such as sign-in codes and access confirmations.

We process your data with your consent, given when you sign in and accept our terms, and for purposes the law allows without separate consent, such as meeting legal obligations.

We share data only with service providers who process it on our instructions:

• Supabase: accounts, sign-in and database.
• Cloudflare: hosting and network delivery.
• Razorpay and Stripe: payments. Stripe payments are charged by our affiliate Zakti, Inc. (USA).
• OpenAI or Anthropic: generating chat answers. Your question and relevant research evidence are sent; your email is not.
• Our email provider, for sign-in and service emails.
• Google Analytics: aggregate visit and usage statistics.

Some providers store data outside India. We transfer data only as Indian law permits. We may also disclose data when required by law or a lawful order, or to enforce our terms, including in legal proceedings over misuse of our content.

• Account data: while your account is open, and up to 12 months after you close it.
• Purchase and invoice records: 8 years, as tax law requires.
• Sign-in, PDF issue and question records: 3 years, to enforce licences and resolve disputes.
• Chat conversations: until you close your account or ask us to delete them.

You can ask us to:

• tell you what personal data we hold about you and how we use it;
• correct or complete it;
• erase it, unless we must keep it by law or to enforce our terms (for example, purchase and licence records);
• withdraw consent, which closes your account from then on;
• nominate someone to exercise these rights if you die or cannot act yourself.

Email research@nextbigwhat.com from the address on your account. We respond within 30 days. If you are not satisfied, you can complain to the Data Protection Board of India.

We use essential cookies and browser storage to keep you signed in, protect sign-in and remember reports you opened recently. We also use Google Analytics cookies to measure visits and which pages and features are used, in aggregate. We do not use advertising or cross-site tracking cookies. You can block analytics cookies in your browser settings or with Google's opt-out add-on; the site works without them.

Data is encrypted in transit, access to it is restricted to people who need it, and paid content is only sent to signed-in readers with access. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.

NBW Brain is for professionals aged 18 and over. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.

We will post changes to this policy here with a new date and tell signed-in users of material changes. For privacy questions or grievances, write to research@nextbigwhat.com, marked "Privacy". We acknowledge grievances within 24 hours and aim to resolve them within 15 days.

Grievance Officer: Ashish Kumar, Zakti Techmedia Private Limited, 677, 1st Floor, 13th Cross, 27th Main, HSR Layout, Bengaluru 560102, Karnataka, India. Email: research@nextbigwhat.com.