Privacy Policy

1. Introduction

This Privacy Policy describes how CricWa ("we", "us", "our") collects, uses, discloses, and safeguards your information when you sign up at cricwa.com or use the CricWa cricket alerts service on WhatsApp. CricWa is operated under designbyteena.com.

We collect the minimum information needed to deliver the cricket alerts you ask for, we do not sell your data, and you can opt out at any time by replying STOP on WhatsApp or by emailing [email protected].

2. Information we collect

We collect the following categories of information:

• Phone number: Your WhatsApp-enabled mobile number, which you submit when signing up or starting the service. This is required to deliver alerts.
• WhatsApp profile metadata: The display name and profile information that Meta makes available to a WhatsApp Business sender. We do not access your WhatsApp contacts, chats, or media.
• Subscription preferences: The matches you select, the event types you enable, the preset you choose, your language, and any team or quiet-hours filters.
• Interaction data: Whether you opened an alert, replied, used a quick-reply button, or sent commands such as STOP, PAUSE, or CHANGE.
• Payment-related information: When you subscribe to a paid plan, our payment processor (Razorpay) collects and processes your payment instrument data (card number, UPI ID, net-banking credentials, or wallet identifiers) directly. CricWa does not store your full card details, CVV, or banking credentials. We receive only a payment token, transaction ID, the payment status, the amount, and a masked identifier (e.g. last four digits of the card or the UPI handle prefix) so we can show you the transaction in your account and reconcile billing.
• Billing details: Your name as provided at checkout, billing email, and (if you request a tax invoice) your GSTIN. These are used to issue invoices.
• Website analytics: Aggregated, anonymised page views, referrer, and device class for cricwa.com. We use privacy-respecting analytics that do not set cross-site identifiers without consent.
• Operational logs: Server logs that record the IP address making sign-up and payment submissions, kept short-term to prevent abuse and meet legal record-keeping obligations.

3. How we use your information

• To deliver the cricket alerts and confirmations you have subscribed to.
• To process payments, issue invoices, manage subscription renewals and cancellations, and resolve billing disputes.
• To improve and personalise the service, including selecting better defaults.
• To send operational updates about your subscription (for example, a notice that the service is paused for maintenance, a payment failure notice, or an upcoming renewal reminder).
• To detect and prevent abuse, fraud, spam, payment fraud, and policy violations.
• To comply with legal obligations, including tax laws and lawful requests.

We do not use your information for advertising, profiling for advertising, or any cross-platform tracking.

4. Legal basis for processing

We process your personal data on the basis of your consent, which you give when you submit the sign-up form, reply START on WhatsApp, or authorise a Razorpay subscription mandate. We also rely on the performance of a contract for billing and service delivery, and on legitimate interest for security, abuse prevention, and basic service operation. Where the EU General Data Protection Regulation (GDPR) applies, the relevant bases are Article 6(1)(a), 6(1)(b), and 6(1)(f).

5. WhatsApp and Meta

CricWa delivers messages through the WhatsApp Business Platform, accessed via a Meta-approved Business Solution Provider ("BSP"). When you communicate with the CricWa Bot on WhatsApp, Meta processes message delivery and metadata according to its own policies, including the WhatsApp Privacy Policy. Meta and our BSP are independent controllers or processors for that activity. CricWa is not affiliated with Meta or WhatsApp beyond using the Business Platform.

6. Payments and Razorpay

All payments to CricWa are processed by Razorpay Software Private Limited ("Razorpay"), a payment aggregator licensed by the Reserve Bank of India. Razorpay handles the collection, encryption, and authorisation of your payment instrument data on its own PCI DSS-compliant infrastructure. CricWa never sees your full card number, CVV, or banking credentials.

By making a payment or authorising a subscription mandate, you agree to Razorpay's Privacy Policy and Terms of Use, which apply to that payment activity in addition to this policy. Razorpay acts as an independent data fiduciary in respect of payment data it collects directly.

For monthly subscriptions, Razorpay creates a recurring payment mandate (e.g. UPI AutoPay, e-mandate on cards, or net-banking mandate) that authorises CricWa, via Razorpay, to debit the agreed amount on each billing date. You can cancel this mandate at any time by replying STOP on WhatsApp, or directly through your bank/UPI app. Cancellation stops future debits; refund eligibility for already-charged periods is governed by our Refund & Cancellation Policy.

We retain payment records (transaction ID, amount, masked instrument identifier, GST invoice, refund status) for at least 8 financial years, as required by Indian tax and accounting law (including the GST Act and Income Tax Act). After this period, we delete or anonymise these records.

7. Sharing and disclosure

We do not sell your personal data. We share data only with the following categories of recipients:

• Our WhatsApp Business Solution Provider for sending and receiving WhatsApp messages on our behalf.
• Razorpay, our payment processor, for payment authorisation, settlement, mandate management, refunds, and fraud prevention.
• Cricket data providers (we send no personally identifying information to them).
• Hosting, analytics, email, and infrastructure vendors that operate under written contracts requiring confidentiality and appropriate security.
• Tax and accounting professionals where required to issue invoices, file GST returns, or respond to audits.
• Legal authorities only when we are required to disclose information by Indian law or by valid legal process.

8. Data retention

• Phone number and subscription preferences: retained while your subscription is active. Within 90 days after STOP or extended inactivity, we delete or anonymise these, unless retention is required to resolve a dispute or by law.
• Payment and tax records: retained for at least 8 financial years as required by Indian tax law.
• Operational and rate-limit logs: retained typically up to 30 days.
• Support and dispute records: retained for up to 3 years from the closure of the matter.

9. Your rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion (the "right to be forgotten"), subject to legal retention requirements such as tax records.
• Receive a portable copy of your data.
• Withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Lodge a complaint with the relevant data protection authority.

To exercise any of these rights, email [email protected] from the same number or address associated with your subscription, or simply reply STOP on WhatsApp to opt out and cancel further charges immediately.

10. Security measures

We use industry-standard security practices: encryption in transit (HTTPS, WhatsApp's own end-to-end encryption between user and BSP, TLS to our BSP and providers), access controls on internal systems, principle of least privilege, audit logging, tokenisation of payment references via Razorpay, and regular reviews of third-party processors. No system is perfectly secure; we will notify affected users and relevant regulators of any data breach within the timelines required by law.

11. Children's privacy

CricWa is intended for users aged 18 and above, since the subscription requires the legal capacity to enter into a contract under Indian law. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided personal data to us, please contact us and we will delete it.

12. International data transfers

Our hosting providers, BSP, and certain analytics vendors may process data outside India. Razorpay processes payments primarily within India. Where applicable, transfers are protected by standard contractual clauses or equivalent safeguards.

13. Cookies and tracking on cricwa.com

By default, cricwa.com sets only essential cookies that are required for the site to function. We do not use third-party advertising cookies. We use anonymous analytics and request consent before enabling any analytics cookies that may identify a visitor across sessions. If you complete a payment on a Razorpay-hosted page, Razorpay may set its own cookies according to its policy.

14. India DPDP Act 2023

For users in India, this Privacy Policy is intended to comply with the Digital Personal Data Protection Act, 2023 ("DPDP Act"). For the purposes of the DPDP Act, CricWa is the Data Fiduciary in respect of the personal data described above. The contact for grievance redressal is:

We will acknowledge complaints within a reasonable time and aim to resolve them within the period required by applicable law (typically 30 days). If you are not satisfied with our response, you may approach the Data Protection Board of India.

15. Changes to this policy

We may update this policy from time to time. When we make material changes, we will revise the "Last updated" date and, where appropriate, notify subscribers via WhatsApp or email. Continued use of the service after the changes take effect indicates acceptance of the revised policy.

16. Contact

Questions, concerns, or requests about this Privacy Policy can be sent to [email protected]. CricWa is operated under designbyteena.com. See our Contact page for support hours and our full grievance address.