Privacy Policy

KrackDeal Private Limited ("KrackDeal", "we", "us", or "our") operates the KrackDeal mobile application, website and related services (collectively, the "Platform"). KrackDeal is a deals, offers, rewards, vouchers, gift cards, promotional codes, local merchant discovery and related commerce and affiliate platform.

This Privacy Policy explains what personal data and other information we may collect, why we collect it, how we use and share it, how we protect it, how long we retain it, and the choices and rights available to you.

This Policy is intended to apply to the Platform as it exists from time to time. Where a feature is introduced that requires additional categories of personal data or a materially different use of personal data, we will provide an appropriate notice and, where required, obtain consent before the relevant processing.

The Platform is owned and operated by KrackDeal Private Limited.

For privacy questions, data requests, deletion requests, consent withdrawal, or grievances, please contact us using the details above.

"Personal Data" means information about an individual that is capable of identifying that individual, directly or indirectly, to the extent covered by applicable law.

"User" means an individual who accesses, registers for, or uses the Platform.

"Merchant" means a business or service provider listed or participating on KrackDeal.

"Affiliate Partner" means an affiliate network, advertiser, merchant, booking provider, or other partner through which KrackDeal may receive a commission or other commercial benefit for qualifying traffic, purchases, bookings, or conversions.

"Processing" includes activities such as collection, recording, organization, storage, use, sharing, disclosure, alteration, retrieval, and deletion, as applicable under law.

This Policy applies to users of the KrackDeal website, mobile application and related digital services. A third party's own website, application, payment page, merchant page or affiliate destination is governed by that third party's own privacy notice.

We process personal data only for purposes permitted by applicable law. Depending on the processing activity, the applicable legal basis may include your consent, provision of a service requested by you, compliance with a legal obligation, protection of lawful interests, or another lawful basis recognized by applicable law.

Where consent is required, we will provide an appropriate notice and obtain consent before the relevant processing. You may withdraw consent for consent-based processing, subject to applicable law and any consequences that are reasonably necessary to provide a service you requested.

Withdrawal of consent does not make earlier lawful processing unlawful and does not prevent us from retaining or processing information where we are legally required or otherwise permitted to do so.

Our website may use cookies and similar technologies such as pixels, web beacons, local storage and other identifiers for essential functionality, security, preferences, analytics, performance measurement and affiliate attribution.

Affiliate links and branded redirect/deep links may contain or generate tracking information such as click IDs, campaign IDs, sub-IDs, referral identifiers or similar technical information. These mechanisms help participating affiliate networks and advertisers determine whether a qualifying click, purchase, booking or other conversion originated from KrackDeal and calculate applicable commissions.

KrackDeal may work with multiple affiliate networks and advertisers, including CJ Affiliate, Admitad and other partners used from time to time. The exact partner may vary by offer.

When you leave KrackDeal and visit an affiliate or merchant destination, the destination may use its own cookies, tracking technologies and privacy practices. Those practices are governed by the third party's own policies.

You can control cookies through browser settings where available. Disabling certain cookies may affect website functionality or affiliate attribution.

KrackDeal uses Cashfree Payments as a third-party payment service provider for applicable payment processing.

When you initiate a payment, Cashfree and relevant financial/payment institutions may process information required to complete, authenticate, secure and reconcile the transaction. Depending on the payment method and service, this may include transaction identifiers, payment method, amount, currency, transaction date/time, status and other information required by the payment provider.

Cashfree has its own privacy policy governing its processing. You should review Cashfree's current privacy notice for details of information it processes directly.

KrackDeal does not intentionally store full card credentials, CVV, UPI PIN or internet-banking passwords on its own servers. We may retain transaction references, payment status, amount, order IDs and other non-secret records needed for reconciliation, customer support, accounting, fraud prevention and legal compliance.

KrackDeal may use mapping and location-related technologies to display merchants, calculate distance, support nearby discovery, provide location-relevant offers and improve local search.

If you grant location permission, the Platform may process approximate or precise device location depending on the permission and feature. Location access is not described as a background-location feature unless the relevant functionality is actually implemented and separately disclosed.

Third-party mapping or geolocation providers may independently process technical or location-related information as necessary to provide their services. Their own privacy policies may apply to that processing.

You can disable location permission through your device settings. Some nearby or location-based features may then be unavailable.

The KrackDeal app may use the camera when you choose a feature such as QR/barcode or voucher scanning and have granted the required permission.

If a QR code is scanned, the app may process the code or information encoded in it for redemption, verification or another relevant purpose.

If you voluntarily upload an image or document, we use it for the purpose for which you submit it. We do not claim ownership of your uploaded content merely because you upload it to the Platform, subject to the rights necessary to operate the relevant feature and applicable terms.

We do not sell your personal data as a standalone data product. We do not authorize service providers to use personal data received from KrackDeal for unrelated independent purposes where prohibited by applicable law.

Third parties that independently receive information may have their own privacy notices and may retain information according to their own lawful obligations.

Where KrackDeal provides merchant or business-partner functionality, we may collect business information such as business name, authorized representative details, phone/email, business address, offer/deal information, redemption records, settlement or transaction information, and documents or tax/business details that are necessary for onboarding, verification, payments, compliance or platform operations.

Merchant and business-partner information may be used to create listings, process transactions, manage deals and vouchers, provide analytics, settle eligible amounts, prevent fraud and meet legal requirements.

KrackDeal may provide coins, rewards, referral incentives, cashback-like benefits, vouchers, promo codes, gift cards, spins, promotional campaigns or similar benefits.

Eligibility may depend on the applicable offer terms, transaction completion, redemption, cancellation/refund status, merchant rules, affiliate attribution and fraud checks.

Reward balances and benefits may be reversed, withheld or adjusted when a transaction is cancelled, refunded, fraudulent, duplicated, incorrectly attributed, or otherwise fails the applicable terms.

Promotional benefits are subject to their individual terms and conditions.

We may send essential communications required to operate the Platform, including OTPs, account-security notices, transaction updates, redemption confirmations, service notices and important policy changes.

Where permitted by law, we may send promotional communications about deals, offers, rewards, merchants and KrackDeal services. You may opt out of promotional communications using the unsubscribe mechanism provided in the communication or available account settings.

Opting out of marketing does not prevent essential transactional or security communications.

We may disclose personal data only as reasonably necessary for the purposes described in this Policy, including to provide services, process transactions, operate the Platform, prevent fraud, comply with law, or protect rights and safety.

We may also disclose information in connection with a merger, acquisition, financing, restructuring or sale of business assets. In such circumstances, appropriate confidentiality and legal safeguards will be applied as required.

We may disclose information in response to valid legal process, court orders, governmental or regulatory requests, or where otherwise required or permitted by law.

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including to provide services, maintain transaction and accounting records, resolve disputes, prevent fraud, enforce agreements, comply with tax and legal requirements, and protect our rights.

After the relevant purpose ends, we will delete, anonymize or securely dispose of information where appropriate, unless retention is required or permitted by law.

Some transaction, financial, tax, security, fraud-prevention or dispute records may need to be retained after account deletion. Where information is retained, we will restrict its use to the purpose for which retention is required or permitted.

If you create a KrackDeal account, you may request account deletion through the deletion option made available within the app and through our external account-deletion webpage.

After a valid request, we will take reasonable steps to delete or anonymize personal data associated with the account, except information that we are required or permitted to retain for legitimate purposes such as legal compliance, tax/accounting records, fraud prevention, security, dispute resolution or enforcement of rights.

Subject to applicable law, you may have rights to:

• Obtain information about personal data processed about you.
• Request correction or updating of inaccurate or incomplete information.
• Request deletion or erasure where permitted.
• Withdraw consent where processing is based on consent.
• Raise a grievance about the processing of your personal data.
• Exercise any additional rights available under applicable law.

To make a request, contact support@krackdeal.com. We may take reasonable steps to verify your identity before acting on a request.

To the extent the Digital Personal Data Protection Act, 2023 ("DPDP Act") and its applicable rules and provisions apply to KrackDeal and the relevant processing activity, KrackDeal will act in accordance with its applicable obligations as a Data Fiduciary and users will have the rights and protections available to Data Principals under the applicable framework.

The DPDP Act and the Digital Personal Data Protection Rules, 2025 have commencement and applicability provisions that may operate in phases. KrackDeal will comply with the provisions applicable to it as and when they become enforceable.

Where applicable, users may exercise rights including access to information, correction and erasure, grievance redressal, consent withdrawal and nomination, subject to the conditions and exceptions provided by law.

Nothing in this Policy limits any mandatory right available to you under applicable law.

We maintain reasonable security measures designed to reduce the risk of unauthorized access, loss, misuse or disclosure.

If a personal data breach occurs, we will assess and respond to it and provide notices to affected users, regulators or other authorities where required by applicable law, within the applicable timelines and through the required channels.

No online service can guarantee absolute security, and you should protect your account credentials, OTPs and device.

KrackDeal is intended for users who are legally permitted to use the relevant services. We do not knowingly collect personal data from children in circumstances where such collection is prohibited by applicable law.

If we learn that personal data has been collected from a child without the authorization or consent required by law, we will take reasonable steps to address and delete the information as required.

Parents or legal guardians who believe that a child has provided personal data to KrackDeal may contact support@krackdeal.com.

Where KrackDeal permits users to post ratings, reviews, comments, photographs or other content publicly, information included in that content may be visible to other users or members of the public.

Please avoid posting personal or confidential information that you do not want to make public. We may process user-generated content for publication, moderation, fraud prevention, customer support and Platform improvement, subject to applicable terms and law.

The Platform may contain links, buttons, WebViews or redirects to merchant websites, affiliate destinations, payment pages, gift-card providers, booking platforms, social networks and other third-party services.

When you interact directly with a third party, that third party's own privacy policy and terms apply. KrackDeal does not control third-party privacy practices and is not responsible for their independent processing.

Affiliate links may generate commission for KrackDeal when a qualifying action occurs. Your price is not increased solely because a link is an affiliate link, unless the applicable merchant's pricing or terms state otherwise.

KrackDeal uses reasonable technical and organizational safeguards appropriate to the nature of the information and the risks involved. These may include access controls, authentication, secure communications, restricted access, monitoring, logging, backups and other measures appropriate to the Platform.

We do not guarantee that any electronic transmission or storage system is completely secure. If you suspect unauthorized access to your account, please contact us promptly.

We may update this Privacy Policy to reflect changes in our Platform, services, technology, business practices or applicable law.

When changes are material, we may provide an appropriate notice through the Platform, website, email or another channel where required by law.

The Effective Date and Last Updated date at the top of this Policy indicate the current version. Continued use of the Platform after an update means you acknowledge the updated Policy, subject to any consent requirements imposed by applicable law.

This Privacy Policy is governed by the laws of India, subject to any mandatory rights or protections that apply to you under applicable law.

Any dispute relating to this Policy shall be subject to the jurisdiction of competent courts in India, subject to applicable law.

For privacy questions, account/data deletion requests, correction requests, consent withdrawal, or grievances, contact:

We will acknowledge and address grievances within the time period prescribed by applicable law.