NextStepApi
NextStepApi Logo
  • Home
  • About Us
  • Our Products
  • Docs
  • Contact
Login Get Started
Home About Us Our Products Docs Contact Login Get Started Free
Data Privacy & Trust

Privacy Policy

Your privacy and data protection are fundamental to our architecture. This policy details how NextStepApi collects, encrypts, and handles verification traffic.

Last Updated: October 2026 256-Bit TLS End-to-End Encryption
Contents
  • 1. Information We Collect
  • 2. How We Use Data
  • 3. API Payload Handling
  • 4. Storage & Encryption
  • 5. Data Retention
  • 6. Third-Party Sharing
  • 7. Cookies & Analytics
  • 8. Grievance & Contact
Key Commitment: NextStepApi acts strictly as a secure pass-through verification proxy to authorized government and banking registries. We never monetize or sell customer identity records to advertisers or third parties.
1

Information We Collect

We collect information strictly necessary to provide authentic verification endpoints, maintain audit logs, and process billing:

  • Account Details: Contact name, business email, mobile phone number, company name, and encrypted login credentials.
  • Telemetry & Audit Logs: IP address, timestamp, HTTP request headers, and status codes for latency and security monitoring.
  • Billing Records: Transaction IDs, wallet recharge history, and tax invoice metadata.
2

How We Use Your Information

The data collected is utilized solely for:

  • Executing identity, corporate, and vehicle verifications requested via authorized API calls
  • Preventing fraudulent queries, unauthorized key usage, and system abuse
  • Providing real-time dashboard analytics, error tracing, and monthly account invoices
  • Complying with Indian regulatory requirements under statutory authorities
3

API Payload Handling & Non-Storage

Sensitive citizen payload parameters (such as raw biometric tokens or Aadhaar OTPs) are routed ephemerally to authorized upstream authentication gateways and are never permanently archived on public disk storage.

4

Storage & Encryption Standards

All gateway traffic is encrypted in transit using industry-standard TLS 1.3 cryptographic protocols with 256-bit keys. Static tokens and API credentials stored in our database utilize salted BCrypt algorithms to prevent credential leakage.

5

Data Retention Norms

Transaction metadata (request reference IDs, timestamps, response status) is retained for audit trails in compliance with statutory financial regulations for up to 180 days. Accounts may request full data purging upon account closure subject to statutory audit minimums.

6

Third-Party Sharing

We only share verification payloads with authorized upstream providers (such as UIDAI ecosystem intermediaries, GSTN, NSDL, or licensed NBFC banking rails) to execute the verification requested by your authorized application.

7

Cookies & Console Sessions

We employ secure HTTP-only cookies strictly for session authentication when you log into our management console. We do not run third-party advertising tracking cookies.

8

Grievance Officer & Inquiries

In accordance with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, you may contact our designated Grievance Officer:

Grievance Officer • NextStepApi

NextStepApi Technologies Pvt Ltd • Support & Compliance Cell

Email: support@nextstepapi.com • WhatsApp / Call: +91 89492 21206
NextStepApi

India's leading API platform — empowering businesses and modern platforms with powerful, reliable, and authentic verification APIs.

Products
  • PAN Verification
  • GST with Promoters
  • Aadhaar OTP
  • GST Verification
  • View All APIs →
Company
  • About Us
  • Careers
  • Blog
  • Press Kit
  • Contact
Legal
  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Refund Policy
  • SLA
Stay Updated

Get the latest API updates and news.

SSL Secured
99.9% Uptime

© 2026 NextStepApi. All rights reserved. Made with in India