Privacy Policy

Last updated: July 30, 2026

1. Introduction

Welcome to CricBids ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and web platform (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

2. Information We Collect

Personal Information

Account Information: Name, email address, phone number, and profile picture
Player Profile: Age, village, district, batting/bowling style, player type, experience, jersey size, achievements, and team history
Authentication: Password (encrypted) and Google OAuth identifiers

Usage Information

Auction participation data (bids, registrations, purchases)
Voice communication data during live auctions (transient, not stored)
Device and browser information for service optimization
IP address and access logs for security

3. How We Use Your Information

To provide and maintain the auction platform
To process auction registrations and bids
To communicate auction updates and notifications
To improve and personalize user experience
To ensure platform security and prevent fraud
To comply with legal obligations

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers: Third-party services that help us operate (cloud hosting, analytics, authentication)
Legal Requirements: If required by law or to protect our rights
Auction Visibility: Your name and team information may be visible to other auction participants

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Auction records and bid history are retained for operational and historical purposes even after account deletion.

6. Your Rights and Choices

Account Deletion: You can delete your account at any time from the Profile page in the app. This will:

Anonymize your personal information
Remove your access to the platform
Preserve auction history records for integrity (with anonymized data)

Data Access and Portability: Contact us to request a copy of your data.

Correction: You can update your profile information at any time through the app settings.

Withdraw Consent: You may withdraw consent by deleting your account.

7. Data Security

We implement appropriate technical and organizational security measures including encryption of data in transit and at rest, secure authentication protocols, and regular security audits. However, no method of transmission over the Internet is 100% secure.

8. Third-Party Services

Our Service integrates with:

Google: Authentication (OAuth) and YouTube Live Streaming API
Cloud Hosting: Application and database hosting providers

These third parties have their own privacy policies governing the use of your information.

8.1 Google User Data Disclosures (YouTube API)

Data Accessed

When you connect your YouTube account to CricBids, we access the following Google user data:

YouTube Channel Information: Channel ID, channel name, and profile snippet
Live Streaming Data: Ability to create, manage, and delete live broadcasts and streams on your behalf

How Data Is Used

Google user data is used solely to:

Create live broadcasts for cricket auctions you host or participate in
Manage stream settings (title, description, privacy status)
Monitor broadcast status and provide real-time updates
Clean up broadcasts when auctions end

Data Sharing

We do not share, sell, or transfer Google user data to third parties. Your YouTube data is:

Used exclusively within the CricBids platform
Not used for advertising, marketing, or analytics purposes
Not transferred to AI/ML model training services
Only shared with YouTube/Google as required by the API

Data Security

Google OAuth tokens are encrypted and stored securely. We implement:

Encrypted storage of access and refresh tokens
HTTPS for all API communications
Token rotation and automatic refresh
Secure deletion upon user disconnect

Data Retention & Deletion

Google user data retention:

OAuth tokens are stored until you disconnect your YouTube account or delete your CricBids account
Broadcast records are retained for auction history purposes
You can disconnect YouTube at any time from Admin Settings, which immediately deletes all stored tokens
Account deletion removes all your data including YouTube connections

Limited Use Compliance Statement

The use of raw or derived user data received from Google APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

9. Children's Privacy

Our Service is not intended for individuals under the age of 13. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via email or through the app. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

For questions about this Privacy Policy or to exercise your data rights, contact us at:

Email: support@cricbids.in

Website: cricbids.in/contact