This Privacy Policy is published in compliance with:
(i) The Digital Personal Data Protection Act, 2023 (“DPDP Act”);
(ii) The Digital Personal Data Protection Rules, 2025 (“DPDP Rules”);
(iii) Section 43A of 'The Information Technology Act, 2000'; and
(iv) 'The Consumer Protection Act, 2019' read with 'The Consumer Protection (E- Commerce) Rules, 2020'.
a) "Data Fiduciary": Parthtech Developers LLP, determining the purpose and means of processing digital personal data;
b) "Data Principal": Any natural person to whom the digital personal data relates (i.e., you, the user);
c) "Data Processor": Any person who processes digital personal data on behalf of the Data Fiduciary;
d) "Digital Personal Data": Personal data in digital form or personal data that has been digitized;
e) "Personal Data": Any data about an individual who is identifiable by or in relation to such data, including but not limited to name, email address, phone number, age, gender, location, financial information, and other information that directly or indirectly identifies you;
f) "Processing": Any operation performed on digital personal data, including collection, recording, organization, structuring, storage, use, sharing, erasure, or destruction;
g) "Consent": Free, specific, informed, unconditional, and unambiguous indication of your wishes by a clear affirmative action signifying agreement to the processing of your personal data;
h) "Data Protection Board": The Data Protection Board of India established under Section 18 of the DPDP Act;
i) "Data Protection Officer" or "DPO": The person designated by Parthtech to handle queries and grievances related to personal data processing;
j) "User ID": An identification code assigned as a unique identifier to each user through cookies or similar technologies; and
k) "Child": An individual who has not completed the age of 18 years.
Parthtech Developers LLP ("Company" or "Parthtech" or "PARTH" or "We" or "Data Fiduciary") operates under the legal framework of the Digital Personal Data Protection Act, 2023, and is committed to protecting and respecting your privacy and personal data.
This Privacy Policy describes how we collect, use, process, store, share, and protect your digital personal data when you access or use our Website(s)/Mobile Application(s) ("Platform").
Important Notice: As a Data Principal under the DPDP Act, 2023, you have specific rights regarding your personal data. This Privacy Policy must be read in conjunction with our Terms of Use published on our Platform.
By accessing or using our Platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. IF YOU DO NOT AGREE WITH ANY PART OF THIS PRIVACY POLICY, PLEASE DO NOT ACCESS OR USE OUR PLATFORM.
We process your digital personal data based on the following lawful grounds:
A. With Your Consent
Your consent is the primary basis for processing personal data. We will obtain your free, specific, informed, unconditional, and unambiguous consent through clear affirmative action before collecting or processing your personal data.
B. Legitimate Uses (Without Consent)
In limited circumstances, we may process your personal data without consent for the following legitimate purposes:
(i) When you voluntarily provide your personal data for a specified purpose
(ii) For performing functions under any law for the time being in force
(iii) Compliance with any judgment or order of any court or tribunal
(iv) Responding to a medical emergency involving a threat to your life or health
(v) Taking measures to ensure safety during a disaster or breakdown of public order
(vi) Processing for employment-related purposes
When you register or use our Platform, we may collect the following categories of digital personal data:
A. Information You Provide Directly:
a) Identification Information: Name, date of birth, age, gender.
b) Contact Information: Email address, phone number, postal address, PIN code.
c) Account Information: Username, password, profile picture.
d) Financial Information: Credit/debit card details, bank account information, payment instrument details, transaction history.
e) Demographic Information: Occupation, interests, preferences, location.
f) Health Information (if applicable): Medical records and history, physical or mental health condition.
g) Other Information: Any other information you voluntarily provide.
B. Information Collected Automatically:
a) Device Information: Device ID, operating system, browser type and version, mobile network information.
b) Usage Information: IP address, pages visited, time spent on pages, links clicked, features used
c) Location Information: Approximate location based on IP address or precise location (with your permission).
d) Log Data: Access times, error logs, system activity.
e) Cookies and Similar Technologies: Information collected through cookies, web beacons, and similar tracking technologies.
C. Information from Third Parties:
a) Information received from social media platforms (Google, Facebook, etc.) when you choose to login through them.
b) Updated contact information from third parties to correct our records.
c) Information from our service providers, partners, and cloud storage providers.
We process your digital personal data for the following specific purposes:
a) Account Management: To create, manage, and maintain your user account.
b) Service Delivery: To provide, maintain, improve, and personalize our services.
c) Authentication: To verify your identity and authenticate access to your account.
d) Communication: To communicate with you about services, updates, offers, and promotions.
e) Customer Support: To respond to your queries, complaints, and provide grievance redressal.
f) Analytics and Improvements: To understand user behavior, preferences, and improve our Platform.
g) Advertising: To display relevant advertisements and promotional content (with your consent).
h) Security: To detect, prevent, and address technical issues, fraud, and security threats.
i) Legal Compliance: To comply with applicable laws, regulations, and legal processes.
j) Business Operations: To conduct research, analysis, and business planning.
We will not process your personal data for purposes other than those for which consent was obtained unless you provide fresh consent for such new purpose.
Under the DPDP Act, 2023, you have the following rights:
A. Right to Access:
You have the right to obtain from us:
a) Confirmation of whether your personal data is being processed
b) A summary of personal data being processed
c) Details of processing activities undertaken
d) Identities of all Data Fiduciaries and Data Processors with whom your data has been shared
e) Any other information as prescribed under the DPDP Rules
B. Right to Correction and Completion
You have the right to:
a) Correct inaccurate or misleading personal data
b) Complete incomplete personal data
c) Update your personal data
C. Right to Erasure
You have the right to request erasure of your personal data when:
a) Consent is withdrawn
b) The purpose of processing has been fulfilled
c) Personal data is no longer necessary for the specified purpose
D. Right to Grievance Redressal
You have the right to an accessible and effective grievance redressal mechanism for any concerns related to your personal data.
E. Right to Nominate
You have the right to nominate an individual who may exercise your rights under this Privacy Policy in the event of your death or incapacity.
F. Right to Withdraw Consent
You may withdraw your consent at any time, as easily as you gave it. Withdrawal of consent will not affect the lawfulness of processing based on consent before withdrawal.
G. Right to Complain
You have the right to lodge a complaint with the Data Protection Board of India if you believe your rights have been violated.
Contact our Data Protection Officer:
Email: support@crex.com; support@crex.live
Subject Line: "Data Principal Rights Request"
Required Information:
a) Your registered name and email address
b) Specific right(s) you wish to exercise
c) Details of your request
d) Any identifiers we may have provided to you
Response Timeline:
We will respond to your request within a reasonable period, not exceeding 90 days from the date of receipt of your request.
Mechanism for Rights Exercise:
a) Access your personal data through your account settings
b) Update or correct your information
c) Download your data
d) Delete your account
e) Withdraw consent for specific processing activities
f) Manage cookie preferences
A. How We Obtain Consent
Before processing your personal data, we provide you with a clear, standalone notice that includes:
a) An itemized list of personal data to be collected
b) Specific purposes of processing
c) Duration for which data will be retained
d) How to withdraw consent
e) How to exercise your rights
f) How to file a complaint with the Data Protection Board
g) Contact details of our Data Protection Officer
B. Withdrawal of Consent
You may withdraw your consent at any time through your account settings, contacting our Data Protection Officer, or using the withdrawal mechanism provided in our communications.
C. Consent for Marketing Communications
We obtain separate consent for marketing and promotional communications. You can opt out at any time by clicking "unsubscribe" in our emails or adjusting preferences in your account settings.
We are committed to protecting children's privacy and comply with stringent provisions under the DPDP Act.
A. Definition of Child
A "Child" means any individual under the age of 18 years.
B. Verifiable Parental Consent
We obtain verifiable parental consent through:
a) Government-issued digital identity tokens
b) Existing verified account details
c) Other reliable verification methods prescribed by the DPDP Rules
A. Retention Period
We retain your personal data only for as long as necessary to:
Minimum Retention: Personal data and associated logs will be retained for at least one year from the date of collection or last transaction to support breach detection, investigation, and accountability, even if you delete your account or withdraw consent during this period.
Extended Retention: Certain data may be retained for longer periods as required by:
B. Data Erasure
We will erase your personal data when:
Residual Copies: After erasure, residual copies may temporarily remain in our backup systems but will be permanently deleted within a reasonable period.
We implement comprehensive technical, organizational, operational, and physical security measures to protect your personal data from unauthorized access, use, disclosure, alteration, or destruction.
A. Technical Measures
B. Organizational Measures
C. Physical Security
D. Data Processing Agreements
We ensure that all Data Processors with whom we share your personal data:
E. Third-Party Cloud Services
We use reputable third-party cloud service providers such as:
These providers maintain internationally recognized security certifications (ISO 27001, SOC 2, etc.) and implement industry-leading security practices.
Limitation: While we implement reasonable security measures as required under the DPDP Act and Information Technology Act, 2000, no security system is completely impenetrable. We cannot guarantee absolute security against all possible cyber threats.
In the event of a personal data breach that compromises the confidentiality, integrity, or availability of your personal data, we will:
A. Notification to Data Protection Board
B. Notification to Data Principals
We will notify you without undue delay if the breach affects your personal data, providing:
C. Documentation
We maintain detailed logs of all breaches, including:
A. General Principle
We may transfer your personal data outside India to our service providers, partners, or affiliates for processing in accordance with this Privacy Policy.
B. Restrictions
We will NOT transfer your personal data to any country or territory that has been restricted or blacklisted by the Government of India under the DPDP Act.
C. Safeguards
When transferring data internationally, we ensure:
D. Your Control
You have the right to:
A. What Are Cookies
Cookies are small text files placed on your device to collect information about your browsing behavior and preferences.
B. Types of Cookies We Use:
C. Third-Party Cookies
Our Platform may use third-party code and libraries (including advertisers) that use cookies to:
We do not control these third-party cookies. Please review the privacy policies of these third parties.
D. Managing Cookies
You can control and manage cookies through your browser settings:
Note: Blocking cookies may impact your experience and limit access to certain features of our Platform.
E. Google Analytics
We use Google Analytics to analyze Platform usage. Google Analytics uses cookies to collect information including:
This information is transmitted to and stored by Google on servers in the United States. Google uses this information to evaluate your use of our Platform, compile reports, and provide related services.
Opt-Out: You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
We respect your privacy and will not sell, rent, or trade your personal data. However, we may share your personal data in the following limited circumstances:
A. With Your Consent
We will share your personal data with third parties when you have given explicit consent for such sharing.
B. With Data Processors
We may share your personal data with Data Processors who provide services on our behalf, including:
Safeguards: All Data Processors are bound by contractual obligations to:
C. With Group Companies and Affiliates
We may share your personal data with our group companies, affiliates, subsidiaries, and partners for:
These entities are bound by confidentiality obligations and this Privacy Policy.
D. Legal and Regulatory Requirements
We may disclose your personal data without consent when:
E. Business Transfers
In the event of a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred to the acquiring entity. We will notify you of such transfer and any changes to this Privacy Policy.
F. With Advertisers (Non-Personally Identifiable Information Only)
We may share aggregated, anonymized, non-personally identifiable information with advertisers and partners to:
We do NOT share personally identifiable information with advertisers without your explicit consent.
A. Third-Party Websites and Applications
Our Platform may contain links to third-party websites, applications, or services that are not owned or controlled by us. This Privacy Policy does not apply to those third-party platforms.
Disclaimer: We are not responsible for the privacy practices, content, or security of third-party websites or applications. We encourage you to read their privacy policies before providing any personal data.
B. Third-Party Advertisers
Third-party advertising companies may serve ads on our Platform. These companies may use cookies and tracking technologies to collect non-personally identifiable information about your visits to provide relevant advertisements.
We do not share personally identifiable information with third-party advertisers without your consent.
C. Social Media Integration
Our Platform may integrate with social media platforms (Facebook, Twitter, LinkedIn, etc.). When you interact with these features:
We have designated a Data Protection Officer to oversee compliance with the DPDP Act and this Privacy Policy.
Contact Information:
Name: Mr. Aditya Kaushik
Email: support@crex.com; support@crex.live
Role: Responsible for handling queries, complaints, and requests related to personal data processing
Responsibilities:
You may contact our DPO for:
We are committed to addressing your concerns promptly and effectively.
A. Filing a Grievance
To file a grievance related to your personal data or this Privacy Policy:
Step 1: Contact our Data Protection Officer
Email: support@crex.com; support@crex.live Subject: "Grievance - [Brief Description]"
Step 2: Provide Details
B. Response Timeline
C. Escalation to Data Protection Board
If you are not satisfied with our response or resolution, you have the right to file a complaint with:
Data Protection Board of India
Website: [To be updated when made available by the government authorities]
Process: As prescribed under the DPDP Rules
We may update this Privacy Policy from time to time to reflect:
A. Notification of Changes
When we make material changes to this Privacy Policy, we will:
B. Review by Data Principals
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.
C. Continued Use
Your continued use of our Platform after changes to this Privacy Policy constitutes your acceptance of the updated policy. If you do not agree with the changes, please discontinue using our Platform and contact us to exercise your erasure rights.
In all our data processing activities, we:
As a Data Fiduciary under the DPDP Act, we are committed to:
In addition to the DPDP Act, we comply with:
This Privacy Policy does NOT apply to:
Our Platform is primarily intended for users in India. If you access our Platform from outside India:
By providing your email address and phone number, you consent to receive:
You may opt out of promotional communications at any time while continuing to receive essential transactional messages.
This Privacy Policy is available in English. Upon request, we can provide translations in languages specified in the Eighth Schedule of the Constitution of India to facilitate your understanding.
For any questions, concerns, or requests related to this Privacy Policy or your personal data:
Data Fiduciary: Parthtech Developers LLP
Data Protection Officer: Mr. Aditya Kaushik
Email: support@crex.com; support@crex.live
Subject: "Privacy Inquiry - [Topic]"
Grievance Officer: Mr. Aditya Kaushik
Email: support@crex.com; support@crex.live
Mailing Address:
Parthtech Developers LLP
Vatika Atrium, 4th Floor, Block B, Sector 53,
Golf Course Road, Gurugram-122002 (Haryana), India
This Privacy Policy is governed by:
Any disputes arising from this Privacy Policy shall be subject to the exclusive jurisdiction of courts in Gurugram, Haryana, India, and the Data Protection Board of India.
If any provision of this Privacy Policy is found to be unenforceable or invalid under applicable law, such provision shall be severed, and the remaining provisions shall continue in full force and effect.
By accessing or using our Platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. You affirm that you are of legal age to provide consent or have obtained parental consent if you are a child (under 18 years of age). If you do not agree with this Privacy Policy, please do not use our Platform and contact us to exercise your rights.
Last Updated: December 18, 2025
Effective Date: December 18, 2025
Note to Users: We strongly encourage you to read both this Privacy Policy document and our Terms of Use carefully. If you have any questions or concerns, please contact our Data Protection Officer before using the Platform. Your privacy and data protection rights are important to us, and we are committed to transparency and compliance with the Digital Personal Data Protection Act, 2023.