Privacy Policy

1. Who We Are

CricBook ("we", "us", "our") is an online platform that helps cricket players discover, book, and play at cricket grounds across India. We are based in Lucknow, Uttar Pradesh, India, and operate at cricbooks.in.

2. Information We Collect

• Account information — your name and mobile number when you register.
• Booking data — ground, date, shift, amount, and add-on selections for every booking you make.
• Location — approximate location (with your permission) to sort grounds by distance. We do not store your location.
• Usage data — pages visited, features used, and device/browser information, collected via PostHog analytics.
• Communications — messages or support requests you send us via WhatsApp.

We do not collect or store payment card details. All payment processing is handled by Razorpay, a PCI-DSS-compliant gateway.

3. How We Use Your Information

• To create and manage your account and verify your identity via OTP.
• To process, confirm, and manage your ground bookings.
• To send booking confirmations, status updates, and reminders via WhatsApp/SMS.
• To notify ground owners of new bookings on their grounds.
• To process payments and refunds through Razorpay.
• To analyse product usage and improve the platform (PostHog, aggregated and anonymised).
• To comply with applicable laws and resolve disputes.

4. Sharing Your Information

We do not sell your personal data. We share it only as follows:

• Ground owners — your name and phone number are shared with the ground owner for each booking you make.
• Payment processing — Razorpay receives the information needed to process your payment (amount, order ID). We do not share card details — those stay within Razorpay.
• Service providers — Vercel (hosting), Neon (database), Cloudinary (image storage), MSG91 (OTP and WhatsApp), and PostHog (analytics), each under appropriate data processing agreements.
• Legal requirements — if required by law, court order, or to protect our legal rights.

5. Data Retention

We retain your account data for as long as your account is active. Booking and payment records are kept for a minimum of 5 years for accounting and legal purposes. Location data is never stored. You may request deletion of your account at any time (see Section 7).

6. Cookies & Storage

We use a single authentication cookie (auth_token) to keep you logged in. We also use sessionStorage for ephemeral UI state (such as dismissing install banners). We do not use third-party advertising or tracking cookies. PostHog analytics are privacy-preserving and do not track you across other websites.

7. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate information in your profile.
• Request deletion of your account and associated personal data.
• Opt out of non-essential WhatsApp communications.
• Withdraw location permission at any time via your browser or device settings.

To exercise any of these rights, message us on WhatsApp: +91 73760 10070. We will respond within 30 days.

8. Security

Passwords are stored as bcrypt hashes (never in plain text). All data in transit is encrypted via HTTPS/TLS. Access to production systems is restricted to authorised personnel. Payment processing is delegated entirely to Razorpay's PCI-DSS-compliant infrastructure. Despite these measures, no system is completely secure — please keep your account credentials safe and do not share your OTP with anyone.

9. Children

CricBook is open to users of all ages. We do not knowingly collect personal data from children under 13 without parental consent. If you believe a child has provided us with their data without such consent, contact us and we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. When we make material changes, we will update the date at the top of this page and notify you via the app. Continued use of CricBook after changes are posted constitutes acceptance of the revised policy.

11. Contact Us

For privacy-related questions or requests, reach us on WhatsApp: +91 73760 10070. We aim to respond within 2 business days.