Privacy Policy

Nepal Next is an independent civic intelligence platform for Nepal. We gather, verify, and publish civic information — government notices, leader scores, historical records, constitutional rights guidance, and citizen complaints.

The data controller for your personal data is Nepal Next. For data-related enquiries, contact us at hello@nepalnext.com.

We are subject to the Individual Privacy Act 2075 (2018) of Nepal, and Article 28 of the Constitution of Nepal 2072, which guarantees the right to privacy as a fundamental right. Users accessing this site from the European Union or United Kingdom are additionally protected by the GDPR and UK GDPR respectively.

We only collect what we need. Here is exactly what that is:

We use your data only for the purposes it was collected for:

• Processing and responding to citizen complaints and contact messages
• Managing your Nepal Next account and keeping you signed in
• Sending case reference confirmations and status updates by email
• Sending newsletters or alerts if you have opted in (you can unsubscribe at any time)
• Enforcing one vote per person on public polls
• Understanding which civic content is useful, using anonymised analytics only
• Preventing fraud and abuse of the platform

We do not use your data for advertising. We do not profile you. We do not sell your data to anyone, ever.

Our legal basis for processing:

• Consent — newsletter subscriptions, optional location sharing, poll participation
• Contract — processing your complaint or account request
• Legitimate interest — platform security, fraud prevention, anonymised analytics

We use a small number of trusted third-party services to operate Nepal Next. Your data is shared with them only to the extent necessary to provide the service.

• Supabase — our database and authentication provider. Data is stored on servers in Frankfurt, EU. Supabase is GDPR-compliant and operates under a Data Processing Agreement.
• Vercel — our hosting and analytics provider. Servers are global. Vercel processes anonymised usage data in the United States.
• Resend — our transactional email service. Used to send case reference confirmations and account emails. Processes email addresses in the United States.
• Anthropic (Claude AI) — used for summarising government notices and powering the constitutional rights adviser. Your questions are processed transiently and are not stored by Anthropic for training purposes under our API agreement.
• OpenStreetMap / Nominatim — used only if you click "Auto-detect with GPS" on the location selector. Your GPS coordinates are sent to Nominatim's reverse geocoding API to identify your province. No account is created. Nominatim does not store your coordinates.

We do not share your data with any other third parties, government agencies, political parties, or commercial interests. If compelled by a court order under Nepal law, we will notify you unless legally prohibited from doing so.

Under the Nepal Individual Privacy Act 2075, the Constitution of Nepal (Article 28), and — for EU/UK users — the GDPR and UK GDPR, you have the following rights:

• Right to access — you can ask us what personal data we hold about you
• Right to rectification — you can ask us to correct inaccurate data
• Right to erasure — you can ask us to delete your personal data, subject to our legal obligations to retain complaint records
• Right to portability — you can ask for a copy of your data in a structured, machine-readable format
• Right to withdraw consent — for newsletter subscriptions and optional processing, you can withdraw consent at any time
• Right to object (GDPR) — you can object to processing based on legitimate interest
• Right to restrict (GDPR) — you can ask us to limit how we process your data while a dispute is resolved

To exercise any of these rights, email hello@nepalnext.com with the subject line "Data Request". We will respond within 30 days.

We use a minimal set of cookies. See our full Cookie Policy for the complete list and how to control them.

• Authentication cookies (essential) — set by Supabase to keep you signed in. These are necessary for the platform to function and cannot be disabled if you use an account.
• Analytics (non-essential) — Vercel Analytics uses a cookieless, privacy-first approach. No personal data is collected. We disclose it for full transparency.

If you choose to set your province preference, it is stored in your browser's localStorage on your device only. It is never automatically sent to our servers.

If you choose to use the "Auto-detect with GPS" feature, your browser will ask for your permission first. If you grant it, your coordinates are sent to the OpenStreetMap Nominatim reverse geocoding service to identify your province. Nepal Next does not receive or store your raw GPS coordinates — only the resulting province name is stored, on your device.

You can clear your location preference at any time from the province selector.

Nepal Next is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately at hello@nepalnext.com and we will delete it promptly.

For privacy enquiries, data requests, or concerns about how we handle your information:

We will respond to all data requests within 30 days. If you believe we have not handled your data correctly, you have the right to lodge a complaint with Nepal's competent authority under the Individual Privacy Act 2075.