Privacy Policy

Krevo ("we", "us", "our") helps creators sell digital products in India. This policy explains what personal data we collect, why we collect it, and the choices you have.

1. Data we collect

• Account data: phone number, email address, name, and your interests (chosen at signup).
• Creator KYC data: Aadhaar, PAN and bank/UPI details, plus uploaded identity documents. Document numbers are masked (only the last 4 digits are ever displayed) and sensitive fields are encrypted at rest.
• Transaction data: orders, payments, payouts, refunds and invoices. We do not store your card/UPI credentials — payments are processed by our PCI-DSS compliant payment partner.
• Usage data: pages visited, device and browser info, and coarse location (city-level) used for analytics and fraud prevention.

2. Why we use it

• To create and secure your account (OTP verification).
• To verify creator identity (KYC) as required by Indian financial regulations before payouts.
• To process payments, payouts, refunds and generate GST invoices.
• To prevent fraud, enforce our Terms, and keep the platform safe.
• To improve Krevo and, with your consent, send product updates. You can opt out of marketing messages anytime.

3. Sharing

• Payment processing: order and payout details are shared with our payment gateway partner to move money.
• Verification: KYC documents may be checked against official verification services (e.g. DigiLocker-based verification) where you choose that method.
• Legal: we disclose data when required by Indian law, court orders, or to prevent fraud and protect safety.
• We do not sell your personal data to anyone, and we do not share your contact details with other users.

4. Security

• Bank and identity details are encrypted at rest; access is restricted to authorised staff on a need-to-know basis.
• All traffic is served over HTTPS. OTPs expire within minutes and are never shown to anyone but you.
• No system is perfect — if we discover a breach affecting your data, we will notify you as required by law.

5. Data retention

• Account and transaction records are kept while your account is active and for as long as tax and financial laws require afterwards (typically 8 years for financial records in India).
• KYC documents are retained per regulatory requirements even after account closure.
• You may request deletion of non-essential data via Support; legal-retention data cannot be deleted early.

6. Your rights (India — DPDP Act, 2023)

• Access, correct or update your personal data from your account settings.
• Withdraw consent for optional processing (this does not affect KYC/payment processing required by law).
• Request a copy of your data or raise a grievance via the Support page. We respond within the timelines required by law.

7. Cookies

We use essential cookies/local storage to keep you logged in and remember preferences, and analytics cookies to understand usage. You can clear site data from your browser; the login session will simply end.

8. Children

Krevo is not directed at children under 13. If you believe a child has provided us data, contact Support and we will delete it.

9. Changes

We may update this policy; material changes will be notified on the platform. Continued use means you accept the updated policy.

10. Contact

Privacy questions or grievances: reach us via the Support page.

← Back to home