Privacy Policy

Cricket Auction Pro is an initiative of Praesidio Care. For the purposes of the DPDP Act, 2023, we act as a Data Fiduciary for personal data we determine the purpose and means of processing for (for example, organizer accounts and platform payments).

When a tournament organizer collects player registration details (name, phone, photo, payment references) through our public registration links, that organizer is typically also a Data Fiduciary for that player data. We process such data on the organizer’s instructions to provide the platform service.

Grievance Officer: Mr. Suyash Pawaskar, Head of Operations. Phone: +91 9673318226. See also our Contact & Grievance Redressal page.

This Policy applies to:

• Organizers and organization users who register and run auctions
• Players and applicants who submit public registration forms
• Visitors to our marketing and policy pages
• Administrators who verify platform payments

Depending on how you use Cricket Auction Pro, we may process:

• Account data: name, email address, password (stored as a one-way hash), organization name, role, and login security metadata (for example failed login attempts and lockouts).
• Tournament & auction configuration: tournament/auction titles, locations, dates, rules, team names, purse amounts, and branding assets (logos, colours).
• Player & registration data: name, phone number, optional email, age, city, playing role/attributes, photograph, registration status, and related notes.
• Payment & financial references: amounts, payment method, UPI/bank details configured by organizers for player fees, 12-digit UTR / transaction references, optional payment proof images, and platform payment verification status for paid auction plans.
• Auction activity: bids, sold/unsold outcomes, roster assignments, and related operational records needed to run and export results.
• Technical data: IP address (used for rate limiting and abuse prevention), browser/session cookies required for authentication, and uploaded image files stored in our storage provider.

We process personal data to:

• Create and secure organizer accounts and organization workspaces
• Enable auction setup, live bidding, spectator display, and results export
• Operate public player registration and organizer review workflows
• Verify platform plan payments and unlock paid auction access
• Provide customer support and respond to grievances
• Protect the service against fraud, spam, and unauthorized access
• Meet legal obligations under applicable Indian law

We do not sell personal data. We do not use personal data for unrelated advertising networks. We currently do not run third-party analytics pixels on the product.

Under the DPDP Act, 2023, we process personal data for lawful purposes with consent where required, or for certain legitimate uses recognized by law (such as employment is not our primary case; for our product the main grounds are consent and performance of the service you request).

• Organizers consent when creating an account and submitting platform payment details.
• Players consent when submitting a registration form (including photo and payment reference) to a specific auction.
• You may withdraw consent for future processing where consent is the basis, subject to legal retention needs and the impact on providing the service (for example, we cannot run an auction without necessary operational data).

Cricket Auction Pro is intended for tournament organizers and adult users managing auctions. Player registrations may include minors participating in sporting events. Where a player is a child under applicable law, organizers must ensure a parent or lawful guardian provides consent before personal data is submitted. We do not knowingly market the platform directly to children.

We use trusted infrastructure providers as Data Processors to host and operate the service:

• Hosting: cloud application hosting (currently Vercel) to serve the website and APIs.
• Database & file storage: Supabase (PostgreSQL database and object storage for images such as player photos, logos, and payment proofs).
• Authentication: session management via NextAuth (secure HTTP-only cookies).

Organizers can view player registration and roster data for auctions they own. Platform Super Admins may view payment verification submissions to approve or reject plan payments. We may disclose data if required by law, regulation, or lawful government request.

Primary application preference is India-region hosting. Some subprocessors may process data in other jurisdictions as part of global cloud infrastructure. Where cross-border transfer occurs, we rely on lawful transfer mechanisms and contractual safeguards available under the DPDP Act and related rules as they come into force.

We retain personal data only as long as needed for the purposes above, including dispute handling, security, and legal compliance:

• Account data: while the account remains active and for a reasonable period thereafter
• Auction, bid, and results records: for the life of the organization workspace unless deletion is requested and legally permissible
• Payment / UTR records: as needed for financial verification and fraud prevention
• Uploaded images: while associated records exist or until removal is processed

We implement reasonable security safeguards appropriate to the nature of the data, including password hashing, authenticated API access controls, organization scoping, HTTPS in production, secure session cookies, upload type/size limits, and rate limiting. No method of transmission or storage is 100% secure; please use strong passwords and protect access to organizer accounts.

Subject to the DPDP Act, 2023 and applicable exceptions, you may request:

• A summary of personal data being processed and the processing activities
• Correction of inaccurate or incomplete personal data
• Erasure of personal data when it is no longer necessary or consent is withdrawn (where applicable)
• Withdrawal of consent (where processing is based on consent)
• Grievance redressal through our Grievance Officer
• Nomination of another individual in accordance with applicable rules, once notified

To exercise rights, contact the Grievance Officer using the details on the Contact page. We will acknowledge and respond within timelines required by applicable law (generally aiming to resolve grievances within a reasonable period, and not exceeding timelines prescribed under DPDP rules when notified).

Players should first contact the relevant tournament organizer for registration data specific to that auction; we can assist where the request relates to platform-held records.

We use essential cookies for authentication and session security. Details are described in our Cookie Policy.

We may update this Privacy Policy to reflect product, legal, or operational changes. The “Last updated” date at the top will change when we do. Continued use of the service after an update constitutes notice of the revised Policy where permitted by law.

For privacy questions or data principal requests:

• Mr. Suyash Pawaskar, Head of Operations (Grievance Officer): +91 9673318226
• Mr. Shantanu Shintre, Regional Manager: +91 9503994779
• Mr. Aditya Chikkerur, Support Engineer: +91 9284649609