Privacy Policy

Effective 19 March 2026

Please read this document carefully. It governs your use of the CricCheer platform.

Who We Are (Data Fiduciary)

CricCheer ("we", "us", or "our") is the Data Fiduciary as defined under the Digital Personal Data Protection Act, 2023 ("DPDP Act") for personal data processed through this Platform. CricCheer is operated by Buzz Near Me, a sole proprietorship registered under the laws of India.

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights as a Data Principal under the DPDP Act.

Minimum age: This Platform is for persons aged 18 and above. We do not knowingly collect personal data from persons under 18. If you believe we have done so, contact us immediately at privacy@criccheer.com.

Personal Data We Collect & Why

We collect personal data only for the specific purposes listed below:

2.1 Account creation & authentication

Name, email address, profile picture. Required to create and secure your account.

2.2 Location-based party discovery

City and region preferences (chosen by you), approximate location derived from IP address. Used to show you nearby cricket watch parties and venues.

2.3 RSVP management & host communication

Your name and contact information shared with the host when you RSVP to an event. Hosts are required to use this data only for managing that specific event.

2.4 Platform analytics & improvement

Usage data including pages visited, features used, search queries, RSVP actions, and device/browser type. Used to understand how the Platform is used and to improve it. Stored for up to 36 months, then anonymised or deleted.

2.5 Venue lead & partner onboarding

For venue owners who submit interest forms: name, WhatsApp number, email, venue name, city, venue type, capacity, GST number (optional), and intended usage. Used to evaluate and onboard venue partners. GST number is used only to verify one promotional pass per venue and is not shared with third parties.

2.6 Real-time party features (chat, reactions)

Chat messages posted in party discussions, crowd reaction data (anonymised after the event). Chat messages are retained for 12 months after the party date, then deleted.

2.7 Aggregate insights (Phase 3 — disclosed in advance)

In a future phase, CricCheer may derive anonymised, aggregate insights from platform usage (e.g., peak attendance times, popular venues by city) and share these with cricket broadcasters, fantasy gaming companies, or FMCG brands. This data will be fully anonymised — no individual user will be identifiable. We will notify you with at least 14 days' notice before activating this use. You will have the option to request deletion of your usage data at that time.

2.8 Community submissions, venue claims & content flags

If you submit a community party listing: your identity as the submitter, the listing content, and submission timestamps. If you claim a venue: your claim reason, ownership details, and review outcome. If you flag content: your identity, the flagged item, and the reason. Used for content moderation and venue ownership verification.

2.9 Reviews & ratings

If you leave a review on a venue: your name, rating, review text, and timestamp. Reviews are publicly visible and attributed to your profile.

2.10 Legal compliance

We retain certain data as required by applicable Indian law (e.g., financial records for GST compliance: 7 years).

Data Retention Schedule

Data typeRetention period
Active account dataDuration of account + 30 days after deletion request
Chat messages12 months after the party date
Usage / analytics events36 months, then anonymised
RSVP records12 months after the event date
Venue lead form submissions24 months or until deletion request
Community submissions & venue claimsDuration of listing/claim + 12 months
Content flags & reports24 months after resolution
Reviews & ratingsDuration of account or until withdrawn
Audit logs36 months
Financial/invoice records7 years (GST compliance)
Anonymised aggregate dataIndefinitely (no individuals identifiable)

How We Share Your Data

  • Hosts & venues: Your name and RSVP status are shared with the host of an event you RSVP to. Hosts are contractually required to use this data only for event management.
  • Vercel (hosting): Our application is hosted on Vercel. Vercel processes all HTTP requests and may log access data including IP addresses and request metadata. Servers are in Mumbai (bom1) where available; other regions may be used as fallback.
  • Supabase (database): Our data is stored on Supabase, which uses Amazon Web Services (AWS) infrastructure in the ap-south-1 (Mumbai) region. Some supporting services may process data in other AWS regions. We rely on standard contractual clauses for any cross-border transfers.
  • PostHog (analytics): Used for product analytics including page views, feature usage, and session tracking. PostHog receives usage events, device/browser type, and anonymised user identifiers. PostHog servers are located in the EU.
  • Sentry (error monitoring): Used to detect and diagnose application errors. Sentry may receive error context including request data, user identifiers, and browser/device information when errors occur. Sentry servers are located in the US.
  • Resend (email): Used to send transactional emails. Resend may process your email address on servers outside India.
  • Mapbox: Used for location search features. Your search queries may be sent to Mapbox servers outside India.
  • Legal requirement: We may disclose data if required by a court order, government authority, or to protect the safety of our users or the public.

We do not sell your personal data to any third party.

Your Rights as a Data Principal (DPDP Act)

Under the DPDP Act 2023, you have the following rights:

  • Right to access: Request a copy of the personal data we hold about you
  • Right to correction: Request correction of inaccurate or incomplete data
  • Right to erasure: Request deletion of your personal data (subject to legal retention obligations)
  • Right to grievance redressal: Raise a complaint with our Grievance Officer (see Section 7)
  • Right to withdraw consent: You may withdraw consent at any time, which will result in us ceasing to process your data for the relevant purpose (and may affect your ability to use certain features)
  • Right to nominate: You may nominate another individual to exercise your rights in case of death or incapacity

To exercise any of these rights, email us at privacy@criccheer.com. We will respond within 30 days.

Data Security

We implement appropriate technical measures including row-level security (RLS) on our database, server-side JWT validation for all authenticated requests, and encrypted connections (HTTPS/TLS) for all data transmission. However, no method of transmission over the internet is 100% secure. In the event of a personal data breach that is likely to result in harm to you, we will notify the Data Protection Board of India as required by applicable law.

Grievance Officer

If you have a complaint about how we handle your personal data, you may contact our Grievance Officer:

Grievance Officer

Name: [Founder Name — to be updated]

Email: grievance@criccheer.com

We acknowledge complaints within 24 hours. Content-related grievances (IT Act) are resolved within 15 days. Data rights requests (DPDP Act) are resolved within 30 days. If you are not satisfied with our response, you may escalate to the Data Protection Board of India once it is constituted.

Cookies & Tracking

We use cookies and similar technologies for the following purposes. We do not use third-party advertising cookies.

  • Authentication (Supabase): Session cookies to keep you logged in. Essential — the Platform cannot function without these.
  • Analytics (PostHog): Local storage and cookies used to track anonymous session activity, page views, and feature usage. Used to improve the Platform.
  • Error tracking (Sentry): Session breadcrumbs stored to help diagnose errors when they occur.
  • Theme preference: A local storage entry to remember your dark/light mode selection.

You may disable cookies in your browser settings, but this may affect the functionality of the Platform, particularly authentication.

Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will notify you via email or an in-app notice at least 14 days before the change takes effect. The "Last updated" date at the bottom of this page reflects the most recent revision.

Contact Us

For privacy-related enquiries or to exercise your rights under the DPDP Act, contact us at privacy@criccheer.com. For general support, see our Contact page. For Terms of Service, see Terms of Service.

Last updated: 19 March 2026

Questions about this policy?

Email us at legal@criccheer.com and we will respond within 2 business days.

Privacy Policy | CricCheer