👋1. Introduction

Welcome to Crysto ("we", "our", "us"). Crysto is a premier multi-category online shopping platform in India offering products across Dress & Apparel, Mobiles & Accessories, Electronics & Gadgets, and Lifestyle Essentials. We are operated from Dumari, Dumaria, Gopalganj, Bihar – 841423, India.

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use the Crysto mobile application and web portal (https://crysto.in). By using our services, you agree to the practices outlined in this policy.

📦2. Information We Collect

2.1 Information You Provide:

• Identity Data: Full name, email address, mobile number verified via Phone OTP or Firebase Auth.
• Profile Data: Avatar choice, gender (optional), date of birth (optional).
• Address Data: Shipping addresses (house number, street, city, state, pincode, recipient phone).
• Support Data: Inquiries, feedback, and support tickets submitted through the in-app Help Center.

2.2 Device & Feature Specific Permissions:

• Voice Search & Microphone: When you tap the mic, your speech is sent to your device's own speech-recognition service to be turned into text for search. Crysto never stores your voice recordings and never uploads them to our servers.
• Camera & Photo Uploads: Camera and gallery access is used only when you take or upload photos for verified customer product reviews. Nothing else is uploaded from your camera or gallery.
• Device Identifier: Firebase Cloud Messaging (FCM) device tokens for real-time delivery status and order notifications.
• Shopping Data: Cart items, wishlist saves, and order history for smooth order tracking and synchronization.
• Location Data: One-time GPS location collected only when you tap "Detect Location Automatically" during address entry; never tracked in the background.

⚙️3. How We Use Your Information

🔗4. Third-Party Services

We share minimal necessary data strictly with trusted third-party providers required to fulfill your orders:

💳5. Payment Security & Cash on Delivery

All online transactions (UPI, Credit/Debit Cards, Net Banking) are encrypted and processed through Razorpay (PCI-DSS Level 1 certified). Crysto never stores your card numbers, CVVs, or bank credentials on its servers.

For Cash on Delivery (COD) orders, zero advance payment is collected online. A nominal ₹10 COD handling fee is added to the order invoice total, and 100% of the payment is made directly at your doorstep in cash or UPI.

⚖️6. User Rights & Account Deletion

You have full authority over your personal information:

• Profile Management: Update your address book, name, and profile in-app anytime.
• Account Deletion: You can delete your account from Profile → Delete Account inside the app or website, or without logging in through our hosted portal: https://crysto.in/delete_account.html.
• What gets deleted: Your login account, profile, saved addresses, cart, wishlist, product reviews and ratings, uploaded review photos, and support tickets are permanently erased. In-app deletion happens immediately; requests submitted through the web portal are completed within 7 working days.
• What we must keep (and how): Completed order and invoice records are retained because Indian tax and accounting law requires us to keep them. Before retention, your name, phone number, email and full delivery address are removed from those records and your account ID is replaced with an irreversible anonymous reference. Only the state is kept, because tax and accounting reporting needs it. These records can no longer be linked back to you.
  Retention period: only for the minimum period required under applicable Indian tax and accounting law, after which these records are deleted.
• Deletion is final: Once deleted, your account cannot be restored and order history will no longer be visible to you.