CashALL Privacy Policy

1. Overview & Data Fiduciary Identity

CashALL (accessible at https://www.cashall.in) is a consumer electronic device buyback, recommerce, and gaming rental platform owned and operated by Aarna Enterprise (“CashALL”, “we”, “us”, or “our”), a registered enterprise headquartered in Kolkata, West Bengal, India.

This Privacy Policy articulates our obligations as a Data Fiduciary pursuant to the Digital Personal Data Protection (DPDP) Act 2023, the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

2. Personal Data We Collect

We collect only the minimum necessary personal data required to formulate device valuations, dispatch doorstep evaluation agents, verify legal device ownership, process payouts, and maintain statutory audit records:

• Identity & Contact Details: Full name, telephone/mobile number, email address.
• Doorstep Logistics Details: House/flat number, street name, landmark, area, city, pincode, and preferred pickup appointment slots.
• Statutory Seller Verification (KYC): Government-issued photo identification (such as Aadhaar card, PAN card, Voter ID, or Driving License) presented in person to our field agent solely for identity confirmation and anti-theft verification as required by Indian law.
• Payout Information: Bank account numbers, IFSC codes, or Unified Payments Interface (UPI) VPA handles, utilized solely for immediate real-time payout execution upon device purchase.
• Device Technical Telemetry: Device brand, model, storage capacity, physical/functional condition parameters, and International Mobile Station Equipment Identity (IMEI) / serial numbers to confirm authentic ownership.

3. On-Site Device Data Erasure & Privacy Protocol

Your personal digital privacy is our foremost operational priority. Prior to device handover and payout:

• Our field agent assists and supervises a complete cryptographic factory data reset of your device in your physical presence.
• All cloud accounts (such as Apple ID, iCloud, Google Account, Samsung Account, Xiaomi Mi Account) must be signed out and unlinked by the seller.
• All SIM cards, eSIM profiles, and external microSD memory cards must be removed before completing the sale.
• CashALL adheres to a strict zero-retention policy for customer media, photos, messages, and files. Once a device is factory reset, previous device data cannot be recovered.

4. Purpose of Data Processing

We process your personal data exclusively for lawful purposes:

• Providing accurate instant device valuation quotes.
• Scheduling and fulfilling doorstep pickup and physical verification appointments.
• Executing instant payments via verified UPI or IMPS/NEFT bank channels.
• Transmitting transactional confirmations, order status updates, and digital purchase receipts via SMS, WhatsApp, and email.
• Fulfilling legal anti-theft and law enforcement compliance requirements under Indian criminal and recommerce regulations.

5. Data Sharing & Third Parties

We never sell, rent, or trade customer personal data to third-party marketing companies. Data is shared strictly on a need-to-know basis with:

• Authorized Field Logistics Personnel: Assigned agents receive only customer name, pickup address, and contact number to execute your booked pickup.
• Banking & Payment Processors: RBI-licensed banking and UPI partners to disburse device sale proceeds.
• Law Enforcement Authorities: When formally requested under valid legal summons or statutory requirements to investigate stolen property or fraud.

6. Your Rights Under DPDP Act 2023

As a Data Principal under the Digital Personal Data Protection Act 2023, you have the right to:

• Request a summary of personal data processed by CashALL.
• Request correction or updating of inaccurate personal data.
• Request erasure of personal data that is no longer required for legal compliance or transactional obligations.
• Nominate an individual to exercise rights on your behalf in the event of incapacity.