Privacy Policy

1. Introduction

Agent Croww ("Platform", "we", "us", "our") is operated by Rookus and is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

We comply with the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian data protection laws. By using our Platform, you consent to the practices described in this policy.

2. Information We Collect

2.1 Personal Information

We collect information that you provide directly to us:

• Account Information: Name, email address, phone number, password (encrypted)
• Business Information: For vendors - business name, GST registration number; For sellers - PAN number
• Payment Information: Bank account details for payouts (UPI, account number, IFSC)
• Transaction Data: Purchase history, sales records, commission earnings
• Communication: Messages, support tickets, feedback you send us

2.2 Automatically Collected Information

When you use our Platform, we automatically collect:

• Device information (type, browser, operating system)
• IP address and approximate location
• Pages visited, time spent, click patterns
• Referring website addresses
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your information only for lawful purposes as permitted under the DPDP Act:

• Provide, maintain, and improve our services
• Process transactions and send related confirmations
• Calculate and distribute commissions to vendors and sellers
• Verify your identity and prevent fraud
• Communicate with you about products, orders, and updates
• Provide customer support and respond to inquiries
• Send promotional communications (with your consent)
• Comply with legal obligations under Indian law
• Analyze usage patterns to improve user experience

4. Legal Basis for Processing

Under the DPDP Act, we process your personal data based on:

• Consent: For marketing communications and non-essential services
• Contract Performance: To fulfill our obligations under user agreements
• Legal Obligation: To comply with GST laws, tax regulations, and court orders
• Legitimate Interest: For fraud prevention and platform security

5. Information Sharing

We may share your information with:

• Transaction Parties: Sellers with vendors (for order fulfillment), customers with sellers
• Payment Processors: Banks, payment gateways for processing transactions
• Service Providers: Cloud hosting, email services, analytics (under data protection agreements)
• Government Authorities: As required by Indian law, court orders, or tax authorities
• Legal Requirements: To protect rights, safety, or investigate fraud

We do not sell your personal information to third parties for marketing purposes.

6. Data Security

We implement robust security measures to protect your data:

• Encryption of passwords using bcrypt hashing algorithm
• SSL/TLS encryption for data transmission
• Secure cloud infrastructure with access controls
• Regular security audits and vulnerability assessments
• Limited employee access on a need-to-know basis

However, no method of transmission over the Internet is 100% secure. We strive for reasonable security appropriate to the sensitivity of the data.

7. Data Retention

We retain your information only as long as necessary:

• Account Data: While your account is active + 7 years for tax compliance
• Transaction Records: 7 years as per Indian tax laws
• GST Records: 6 years from end of financial year
• Support Communications: 2 years after resolution
• Marketing Data: Until you withdraw consent

8. Your Rights Under DPDP Act

As a Data Principal, you have the right to:

• Access: Request a copy of your personal data we hold
• Correction: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your data when no longer necessary
• Data Portability: Receive your data in a machine-readable format
• Withdraw Consent: Withdraw previously given consent for processing
• Grievance Redressal: File complaints about data processing

To exercise these rights, contact us at team@agentcroww.com. We will respond within 10 business days.

9. Cookies and Tracking

We use cookies and similar technologies to:

• Keep you signed in and remember preferences
• Understand how you use our Platform
• Personalize your experience
• Prevent fraud and enhance security

You can manage cookie preferences through your browser settings. Disabling cookies may affect some Platform features.

10. Children's Privacy

Our Platform is not intended for users under 18 years of age. We do not knowingly collect information from children. If we become aware that a child has provided us with personal information, we will take steps to delete it immediately.

11. Cross-Border Transfer

Your data is primarily stored on servers located in India. If we need to transfer data outside India for legitimate business purposes, we will:

• Notify you of the transfer and destination country
• Ensure adequate protection through standard contractual clauses
• Comply with DPDP Act requirements for cross-border transfer

12. Third-Party Links

Our Platform may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies.

13. Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be notified via email or Platform announcement. Continued use after changes constitutes acceptance. The effective date will be updated at the top of this policy.