Privacy Policy

Gadget Guruz Technologies Pvt Ltd ("Company", "we", "our", "us") respects your privacy and is committed to protecting the personal data of every individual who interacts with our platforms and products. This Privacy Policy describes how we collect, use, store, disclose, and safeguard your data in full compliance with the Digital Personal Data Protection (DPDP) Act, 2023 and the Information Technology Act, 2000 and its amendments.

This Policy applies to our platforms:

• gadgetguruz.com — our consumer platform for device repair, e-commerce (buy/sell), e-waste recycling, and doorstep technician services.
• pramaan.gadgetguruz.com — PRAMAAN, our hardware diagnostics and device health certification software for laptops, desktops, and electronic devices.

This Policy applies to:

• Individual consumers purchasing products or booking repair/recycle services.
• Technicians and service partners registered on our platform.
• Enterprise clients and IT administrators using PRAMAAN.
• Visitors browsing our websites or using our dashboards and APIs.

By accessing or using our services, you (the "Data Principal") acknowledge that you have read, understood, and agreed to this Policy. If you disagree, please discontinue use of our platforms immediately.

As per Section 2(i) of the DPDP Act, 2023, Gadget Guruz Technologies Pvt Ltd is the Data Fiduciary responsible for determining the purpose and means of processing personal data across both platforms.

3.1 GadgetGuruz.com — Consumer Platform

We collect the following categories of personal data when you use gadgetguruz.com or our mobile application:

3.2 PRAMAAN — Device Health Diagnostics Software

PRAMAAN is designed to collect hardware diagnostic data, not personal information:

PRAMAAN does not access, read, scan, or transmit: personal files, documents, photos, videos, messages, emails, contact lists, browser history, or financial information. All data collection is limited strictly to hardware-level system metrics. PRAMAAN does not spy on or monitor user activity in any form.

For complete transparency, the following data is never intentionally collected by either platform:

All payment transactions on gadgetguruz.com are processed by Razorpay Software Private Limited (razorpay.com), a Reserve Bank of India (RBI) authorised Payment Aggregator. Razorpay is PCI-DSS compliant and operates under RBI Payment Aggregator Guidelines.

Gadget Guruz never stores, accesses, or has access to your full card number, CVV, bank account credentials, or UPI PIN at any point.

• You are redirected to or interact with Razorpay's secure checkout environment.
• Razorpay collects and processes your payment credentials directly under its own Privacy Policy and Terms of Service.
• We receive only a transaction reference number, payment status (success/failure), and billing address for order fulfilment purposes.
• Razorpay uses tokenisation, TLS encryption, and strong authentication to protect your financial data.

Razorpay's privacy policy is available at: razorpay.com/privacy. We encourage you to review it.

We process personal data only on the basis of free, specific, informed, unconditional, and unambiguous consent, unless processing is otherwise permitted under the DPDP Act for legitimate uses. Consent is never bundled into general terms and conditions.

Personal data is collected and used only for the specific purposes stated below. Data will not be used for any purpose incompatible with the original stated purpose without fresh consent.

We collect only data that is adequate, relevant, and limited to what is strictly necessary for the stated purpose:

• Postal address is collected only at the time of service booking or product delivery — not at general account registration.
• Social login scope is limited to name and email address only; we do not request access to contacts, posts, or other profile data.
• KYC documents are collected only from users voluntarily opting into the service partner/payout program.
• PRAMAAN collects only hardware-level system metrics. No personal files, emails, browser history, or user activity are accessed or transmitted.
• PRAMAAN registration fields are clearly marked as mandatory or optional.
• Diagnostic data is collected at the granularity needed for accurate health assessment — no surplus telemetry is gathered.

To perform device diagnostics, PRAMAAN requires certain system-level permissions used strictly and exclusively for hardware health testing purposes:

None of these permissions are used to access, read, copy, or transmit your personal files, communications, location, or any data unrelated to hardware diagnostics.

Before or at the time of collecting personal data, we provide a clear and accessible Notice informing you of:

• The personal data being collected and its categories.
• The specific purpose(s) for which it is collected.
• The legal basis for processing.
• The identity and contact details of the Data Fiduciary and Grievance Officer.
• Any third parties with whom data may be shared.
• Your rights as a Data Principal and how to exercise them.
• The data retention period applicable to your data.

For PRAMAAN, this Notice is displayed as a mandatory consent screen prior to first use and is incorporated into the EULA. For gadgetguruz.com, the Notice is presented at account registration and at the point of KYC/service-partner onboarding.

We do not sell, rent, or trade your personal data. We may share data only in the following circumstances:

As a Data Principal, you have the following statutory rights:

We will acknowledge all rights requests within 48 hours and resolve them within 30 days. If a request is denied, we will provide written reasons and inform you of your right to escalate to the Data Protection Board of India.

Our platforms are not directed at children under the age of 18. We do not knowingly collect personal data from minors. Users are required to confirm they are 18 years or above at the time of account registration.

As mandated by Section 9 of the DPDP Act, processing of personal data of any user who is or may be under 18 requires verifiable consent from a parent or lawful guardian before any data is collected or processed.

If you are a parent or guardian and believe your child has provided personal data to us without your consent, please contact privacy@gadgetguruz.net immediately. We will promptly delete such data from our systems.

We implement reasonable and appropriate technical, administrative, and organisational safeguards to protect your personal data from unauthorised access, disclosure, alteration, loss, or destruction. Our security measures include:

• TLS/HTTPS encryption for all data transmitted between your device and our servers.
• Encryption of personal data and KYC documents at rest using industry-standard algorithms.
• Strict role-based access controls — only authorised personnel can access personal data, limited to what their role requires.
• Multi-factor authentication for internal system access and enterprise PRAMAAN dashboards.
• Regular internal security audits, vulnerability assessments, and penetration testing.
• Contractual data protection obligations imposed on all third-party processors and sub-processors.
• Incident response and data breach management procedures.
• Payment data is never stored on our servers — all payment credentials are processed exclusively by Razorpay under PCI-DSS standards.

In the event of a personal data breach, we will notify the Data Protection Board of India and affected Data Principals in the manner and within the timelines prescribed under the DPDP Act. We encourage you to use strong, unique passwords and to report any suspected unauthorised access to privacy@gadgetguruz.net immediately.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Upon expiry, data is securely deleted or irreversibly anonymised.

Upon account deletion, all personal data — including KYC documents — is permanently deleted from active systems. Residual copies in secure backups are purged within 90 days of the deletion request.

GadgetGuruz.com uses cookies and similar tracking technologies to improve your browsing experience, analyse site performance, deliver relevant content, and support security functions.

Our platforms may contain links to third-party websites and may integrate with third-party services. These third parties operate under their own independent privacy policies. We do not control these third-party websites or services and are not responsible for their data practices.

• Razorpay — Payment processing (PCI-DSS compliant, RBI authorised Payment Aggregator). Policy: razorpay.com/privacy
• Google Analytics / Firebase — Usage analytics and crash reporting (opt-out available via cookie settings).
• Google / Facebook — Social login (name and email only, with your consent).
• Amazon Web Services (AWS) or equivalent — Cloud hosting and infrastructure.
• Enterprise ITAM systems — Integrated as contracted with enterprise PRAMAAN clients.

We are committed to addressing your data-related concerns promptly and fairly. If you have any grievance regarding the collection, use, storage, or disclosure of your personal data, please contact our Grievance Officer:

If you are not satisfied with the outcome of your grievance, you have the right to escalate your complaint to the Data Protection Board of India, as established under Section 18 of the DPDP Act, 2023.

This Privacy Policy and our data processing practices comply with the following applicable laws and standards:

• Digital Personal Data Protection (DPDP) Act, 2023 — India's primary data protection legislation.
• Information Technology Act, 2000 (and the IT Amendment Act, 2008) — Governing electronic records, cybersecurity, and data handling.
• IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 — Security standards for sensitive personal data.
• Payment Card Industry Data Security Standard (PCI-DSS) — Applicable to payment data handling (via our processor Razorpay).
• Reserve Bank of India (RBI) Payment Aggregator Guidelines — Applicable to our payment processing partner Razorpay.
• Applicable enterprise data security standards and software governance practices relevant to PRAMAAN deployments.

We may update this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or regulatory obligations. When we make material changes, we will:

• Post the updated Policy on gadgetguruz.com and pramaan.gadgetguruz.com with a revised Effective Date and version number.
• Notify registered users via email or in-app notification for significant changes.
• Where required under the DPDP Act, seek fresh and explicit consent for any new or expanded processing activities.
• Maintain a changelog of material revisions for user reference.

Continued use of our platforms after the Effective Date of any revision constitutes your acceptance of the updated Policy. If you do not agree with the changes, you may exercise your right to erasure and close your account.

For any questions, requests, or concerns regarding this Privacy Policy or our data practices, please reach out through any of the following channels:

This Privacy Policy is effective as of April 2025 (Version 2.0) and supersedes all prior versions.
© 2025 Gadget Guruz Technologies Pvt Ltd. All rights reserved.  |  privacy@gadgetguruz.net  |  support@gadgetguruz.com