Privacy Policy

Last updated: 17 June 2026

This Privacy Policy explains how Dealquick Labs Private Limited (“Crafty”, “we”, “us”) collects, uses, shares, and protects your personal data when you use Crafty. We act as the data fiduciary for this data under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”). We collect only what we need to run a craft-discovery platform, and we never sell your personal data.

1. Data we collect

• Account data — your email, name, and profile photo, provided via our sign-in provider when you create an account.
• Listing & content data — the crafter profile and event details, photos, products, prices, and reviews you choose to publish.
• Usage & device data — pages viewed, searches, saves, approximate location derived from your IP, and basic device/browser information, used to operate, secure, and improve the Platform.
• Cookies — a small set required for sign-in, plus optional analytics cookies that load only after you consent.

2. How we use your data

• To provide and personalise discovery, listings, saves, search, and recommendations;
• To enable accounts, crafter profiles, and reviews;
• To send service emails (e.g. sign-up confirmation, listing-live, event reminders) and, with consent, product updates;
• To keep the Platform safe — moderation, fraud and abuse prevention, and debugging;
• To meet legal, tax, and accounting obligations.

3. Consent and legal basis

We rely on your consent for analytics and marketing, and on the necessity of processing to provide the services you request and to meet our legal obligations. You can withdraw consent for optional cookies and marketing at any time (see your cookie choices and email preferences).

4. Service providers we share data with

We share data only with processors who help us run Crafty, under appropriate safeguards, including:

• Cloud hosting and database providers (application hosting, image storage, and our managed Postgres database);
• Our authentication provider (secure sign-in);
• Email, analytics, error-monitoring, and rate-limiting providers (to deliver email, understand product usage with your consent, and keep the service reliable).

We may also disclose data where required by law or to protect our rights and users.

5. Where your data is stored (cross-border)

Some of our providers store and process data on servers located outside India (for example, in Singapore). Where data is transferred across borders, we do so in line with the DPDP Act and use providers that offer appropriate protection. By using Crafty you acknowledge this cross-border processing.

6. Cookies and analytics

Essential cookies enable sign-in and security. Optional analytics load only after you click “Accept” on our cookie banner, and help us understand which crafters and pages are being discovered. You can decline analytics and still use the Platform.

7. Data retention

We keep personal data only as long as needed for the purposes above or as required by law (for example, tax records). When you delete your account, we delete or anonymise your personal data, except where we must retain certain records.

8. Your rights

Under the DPDP Act you can:

• access and obtain a copy of your personal data (you can export your data from your account);
• correct or update inaccurate data;
• request erasure of your data;
• withdraw consent for optional processing;
• nominate another person to exercise your rights in case of death or incapacity;
• raise a grievance with us (see contact below) and, if unresolved, with the Data Protection Board of India.

9. Children

Crafty is not directed at children under 18, and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.

10. Security

We use reasonable technical and organisational measures — including encrypted connections, access controls, and trusted infrastructure providers — to protect your data. No method of transmission or storage is completely secure, but we work to protect your information and respond to incidents.

11. Changes to this policy

We may update this policy from time to time. We will post the new version here with a revised “Last updated” date and, for material changes, notify you on the Platform or by email.

12. Contact & Grievance Officer

For privacy questions or to exercise your rights, email privacy@crafty.app. Our Grievance Officer (as required under the DPDP Act and IT Rules) can be reached at the same address; we aim to acknowledge grievances within the timelines required by law. General queries: hello@crafty.app.