Privacy Policy

Welcome to Crawzy (“we,” “our,” or “us”). Your privacy is important to us. This Privacy Policy explains, in plain language, what we collect, why we collect it, and how we use it. We have written it to be transparent and to align with India's Digital Personal Data Protection (DPDP) Act, 2023.

1. Information We Collect

• Name
• Email address
• Phone number
• Shipping and billing address (including PIN code, city, state)
• Order information (items, prices, history)
• Account information (if you sign in with Google or create an account)
• Wishlist data (stored on your device via localStorage)
• Cart data (stored on your device via localStorage)
• Device and browsing information (browser, OS, IP address, basic analytics)
• Payment-related information — handled and stored by our payment partner Razorpay. Crawzy does not store your card or UPI details.

2. Why We Collect It

• To process and fulfil your orders
• To provide customer support and respond to your queries
• To send order updates, shipping confirmations and important transactional emails
• To improve our website, recommendations and the brands we feature
• To prevent fraud, abuse and unauthorised activity
• To comply with applicable Indian law (taxation, consumer protection, DPDP)

3. Retention

We retain your information only for as long as needed to provide the service or to comply with legal obligations. Order records are typically retained for 7 years (statutory requirement). You may request deletion of your account data at any time — see Section 8.

4. Sharing of Information

As a marketplace, we share necessary order information (your name, address, phone, and the items you ordered) with the respective brand or seller fulfilling your order. We also share information with the service providers listed in Section 6.

We do not sell your personal information to third parties.

5. Data Security

Crawzy uses HTTPS (256-bit SSL) for all data in transit. Passwords are hashed using bcrypt. Payment data is handled by Razorpay (PCI-DSS Level 1 compliant). Access to production data is restricted to authorised personnel.

6. Third-Party Services We Use

• Razorpay — Payment processing. Razorpay collects card/UPI details directly and is subject to its own privacy policy.
• Hosting / Infrastructure — Our servers and database (MongoDB) are hosted on cloud infrastructure with industry-standard security controls.
• Google Sign-In (optional) — Used only to authenticate you. We only receive your name, email and avatar URL.
• Basic Analytics — We may use lightweight, privacy-friendly analytics to understand site usage. We do not run cross-site advertising trackers.

7. Cookies

We use cookies and localStorage strictly to: (a) keep you signed in, (b) remember your cart and wishlist, and (c) measure aggregate site usage. You can decline non-essential cookies using the banner that appears on your first visit. Essential cookies cannot be disabled because they are required for the site to work.

8. Your Rights (DPDP)

You have the right to:

• Access the personal information we hold about you
• Correct or update inaccurate information
• Request deletion of your account and associated personal data
• Withdraw consent for non-essential processing
• Lodge a complaint with the Data Protection Board of India

To exercise any of these rights, email support@crawzy.com with the subject line “Privacy Request”. We will respond within 7 business days.

9. Children

Crawzy is not intended for children under 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us data, contact us and we will delete it.

10. Updates

We may update this Privacy Policy from time to time. We will post the “Last Updated” date at the top of this page.

Contact

For privacy-related inquiries: support@crawzy.com