Fancrew Privacy Policy

Fancrew Private Limited, a company incorporated under the Companies Act, 2013, having its registered office at A-18, BLK-III PH-III, KV-II SEC 82, Noida, Gautam Buddha Nagar, Noida, Uttar Pradesh, India, 201301 and carrying on business under the name and style of "Fancrew" (hereinafter referred to as "Fancrew", "We", "Us" or "Our"), respects the privacy of persons who visit, register on or use the Fancrew website available at https://Fancrew.in (the "Website").

This Privacy Policy explains how We collect, receive, use, store, disclose, retain and otherwise process information relating to an identified or identifiable individual ("Personal Data") when You visit or use the Website as a visitor, Content Creator or Crew Member. It should be read together with the Fancrew Website Terms and Conditions and any specific notice shown to You at the time particular Personal Data is collected. For the purposes of the Digital Personal Data Protection Act, 2023, where applicable, Fancrew acts as the "Data Fiduciary" in respect of Personal Data for which it determines the purpose and means of processing, and You are the "Data Principal". A service provider that processes Personal Data on Our behalf may act as a "Data Processor".

Capitalised terms not defined in this Privacy Policy have the meanings assigned to them in the Fancrew Website Terms and Conditions.

This Privacy Policy is intended to comply with the Information Technology Act, 2000 and the rules made thereunder, including the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, for so long as and to the extent they apply. It also reflects the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, as and when the relevant provisions are brought into force and apply to Fancrew (collectively, "Applicable Data Protection Law").

Please read this Privacy Policy carefully before using the Website or providing Personal Data to Us. By continuing to access or use the Website, You ("You" or "Your") acknowledge that You have read and understood this Privacy Policy, and such continued use shall be deemed acceptance of this Privacy Policy as it applies to Your use of the Website. Where Applicable Data Protection Law requires consent for a particular processing activity, Fancrew will seek Your consent separately through a clear affirmative mechanism. Acceptance of this Privacy Policy will not replace such specific consent.

The Personal Data collected depends on how You use the Website. We endeavour to collect only such Personal Data as is reasonably necessary for the purpose stated at the point of collection or described below.

Certain information may constitute sensitive personal data or information under Applicable Data Protection Law. We collect and process such information only where it is required for a stated purpose and in accordance with Applicable Data Protection Law.

We may collect Personal Data:

• directly from You when You register, complete a profile, post or apply for a Project, communicate through the Website, upload files, make or receive a payment, seek support or exercise a privacy right;
• automatically when You access or use the Website, through logs, cookies and similar technologies;
• from another User where that information is reasonably necessary for a Project, payment, complaint or Dispute; and
• from payment partners, identity-verification providers, connected-account providers and other service providers, or from public sources, where permitted by law.

Where a field is optional, You may choose not to provide it. If Personal Data is required to create an Account, verify identity, facilitate a payment or provide a requested feature, refusal to provide it may prevent Us from providing that feature.

This Privacy Policy, together with any notice displayed at the point of collection, describes the Personal Data proposed to be processed and the purpose for which it is required. Where consent is required, We will request consent that is free, specific, informed, unconditional and unambiguous through a clear affirmative action. The request will be in clear and plain language and limited to Personal Data necessary for the specified purpose. Where required by Applicable Data Protection Law, the notice and consent request will be made accessible in English or another language specified in the Eighth Schedule to the Constitution of India.

You may withdraw consent at any time through the mechanism made available when consent was obtained, Your Account settings, a registered Consent Manager where available, or by contacting Us. Withdrawing consent will be as easy as giving it. Withdrawal will not affect processing lawfully undertaken before withdrawal. Within a reasonable period after a valid withdrawal, We will cease, and where applicable cause Our Data Processors to cease, the relevant processing, unless continued processing is required or authorised by Applicable Law. Withdrawal may affect a feature that cannot reasonably be provided without the relevant Personal Data.

We will process Personal Data without consent only where such processing is expressly authorised under Applicable Data Protection Law, including a legitimate use or an applicable exemption. This may include processing voluntarily provided Personal Data for the specified purpose, complying with a binding judgment or order, enforcing a legal right or claim, or supporting the prevention, detection, investigation or prosecution of an offence or cyber incident, where and to the extent permitted by Applicable Law.

Where a registered Consent Manager is available, You may use it to give, manage, review or withdraw consent in accordance with Applicable Data Protection Law.

A Creator or Crew profile may contain information intended to be visible to other Users or the public, including the display name, photograph, biography, professional category, skills, location, portfolio, social links, ratings and reviews. The Website will identify the fields intended for public display where reasonably practicable. You should not publish information that You do not wish to make public. Public information may be indexed, copied or cached by third parties beyond Fancrew's control.

If You provide Personal Data relating to another person, including a team member, authorised representative or person appearing in Creator Materials or Deliverables, You must have lawful authority to provide that information and, where required, have given the person an appropriate notice and obtained consent. You should not upload government identifiers, financial information, health information or other sensitive information to a public profile, Project posting or portfolio.

Where Personal Data is likely to be used to make a decision that affects You or is disclosed to another Data Fiduciary, We will make reasonable efforts to ensure that it is complete, accurate and consistent. You should keep Your Account and profile information current and promptly request correction of any inaccurate or incomplete information.

We do not sell or rent Personal Data as a product. We may disclose only such Personal Data as is reasonably necessary to:

• the relevant Creator or Crew Member, to facilitate a Project, communication, payment, review, complaint or Dispute;
• payment partners, banks, KYC and verification providers, cloud hosting and storage providers, communication providers, analytics, security, monitoring and customer-support providers engaged to support the Website;
• Our professional advisers, auditors and insurers, subject to duties of confidentiality;
• competent government authority, court, law-enforcement agency or regulator where disclosure is required by law or a lawful order, or is reasonably necessary to prevent fraud, investigate misuse or protect rights, property or safety; and
• proposed or completed purchaser, investor, successor or reorganised entity in connection with a merger, acquisition, financing, restructuring or transfer of business, subject to appropriate safeguards and Applicable Law.

Service providers are permitted to process Personal Data only for the services for which they are engaged, subject to contractual and legal obligations appropriate to the nature of the processing. Personal Data voluntarily disclosed by You to another User will also be subject to that User's own handling practices, for which Fancrew is not responsible.

Subject to Your consent, where required under Applicable Law, We may use Your name, contact details, role, profile preference and information relating to Your use of the Website to send newsletters, offers, updates and other promotional communications, personalise marketing content and assess the relevance and effectiveness of such communications. You may withdraw Your consent or opt out of promotional communications at any time through the unsubscribe facility, Your Account settings or by contacting Us. Opting out of marketing will not prevent essential Account, Project, payment, security or legal communications.

Fancrew may use artificial intelligence, machine-learning and similar technologies ("AI") to support, operate and improve the Website and its services, including customer support, communications, analytics, recommendations and personalisation. Where Personal Data is processed using AI, it will be used only for the purposes stated in this Privacy Policy and in accordance with Applicable Law. Fancrew will not rely solely on AI or automated processing to make a decision that produces legal or similarly significant effects on You, unless such processing is expressly disclosed to You and any notice, consent, human review or other safeguard required under Applicable Law is provided.

Payments, payouts, refunds, chargebacks and KYC or bank verification may be processed by a Payment Partner or another authorised service provider. The relevant provider may collect Personal Data directly from You under its own terms and privacy notice. Fancrew ordinarily receives transaction references, payment status, limited masked payment information and verification results; We do not ordinarily store complete payment-card credentials or internet-banking passwords.

We may retain payment, tax, KYC and transaction records for the period required under Applicable Law or reasonably necessary for reconciliation, fraud prevention, audits, refunds, chargebacks and Disputes.

The Website may use cookies, local storage, pixels, tags and similar technologies. Some are strictly necessary to authenticate Users, maintain secure sessions, prevent fraud and provide requested features. Others may be used, where enabled, to remember preferences, measure performance and usage, improve the Website or support communications and marketing.

Where consent is required for a non-essential cookie, We will request it through the cookie banner or preference tool before placing that cookie. You may change Your choices through the Cookie Settings link on the Website or through Your browser settings. Blocking strictly necessary cookies may impair login, payment or other core functionality. Third parties providing analytics or embedded features may place their own cookies and process information under their privacy notices.

We take reasonable security practices and procedures appropriate to the nature of the information and the risks involved. These may include access controls, encryption or masking where appropriate, secure transmission, credential protection, monitoring and audit logs, backups, incident-response measures, and contractual safeguards for service providers. Access is restricted to persons who require the information for an authorised purpose.

No website, transmission or storage system is completely secure. You are responsible for keeping Your password and one-time password confidential and for promptly notifying Our Grievance Officer if You suspect unauthorised access to Your Account. If a Personal Data breach occurs, We will investigate, contain and address it and provide notices to affected persons or competent authorities where required by Applicable Law.

We retain Personal Data only for as long as it is required for the specified purpose or a lawful related purpose. Subject to Applicable Law, We will erase Personal Data when consent is withdrawn or when it is reasonable to assume that the specified purpose is no longer being served, whichever is earlier, unless retention is necessary for that purpose, compliance with law, enforcement or defence of a legal claim, or another purpose permitted under Applicable Law. In determining the retention period, We consider the status of Your Account and Projects, the nature and sensitivity of the information, payment and tax requirements, security and fraud risks, limitation periods, complaints or Disputes, and requirements imposed by law or a lawful authority.

Account registration information may be retained after cancellation or withdrawal of registration for the period prescribed for intermediaries under Applicable Law. Where required under the Digital Personal Data Protection Rules, 2025, Personal Data, associated traffic data and other processing logs will be retained for at least one year from the date of processing, unless another law requires a longer period. Financial, tax, KYC, transaction, Project, communication, security and Dispute records may be retained for the applicable statutory or otherwise lawfully permitted period. Residual copies may remain in protected backups until overwritten in the ordinary course, subject to restricted access and use.

When Personal Data is no longer required and no legal basis for retention remains, We will delete it, anonymise it or take reasonable steps to put it beyond use. Deletion of an Account does not require deletion of information that We must retain by law, information necessary to establish or defend legal claims, or content that forms part of another User's transaction record; such information will be restricted to the relevant purpose where appropriate.

Notwithstanding the withdrawal of consent or a request for deletion of Personal Data, We may retain limited copies of such Personal Data for lawful archival, record-keeping, disaster-recovery and backup purposes, subject to Applicable Law. Any Personal Data retained for such purposes will remain protected, access-restricted and will not be used for active business or marketing purposes. Such Personal Data will be deleted or overwritten in accordance with Our applicable retention and backup cycles, unless a longer retention period is required or permitted under Applicable Law.

Subject to Applicable Data Protection Law and verification of Your identity, You may request:

• a summary of Personal Data being processed and information about the processing;
• correction, completion or updating of inaccurate or incomplete Personal Data;
• erasure of Personal Data that is no longer required to be retained;
• withdrawal of consent for processing based on consent;
• redressal of a privacy grievance; and
• nomination of another individual to exercise rights in the circumstances and manner provided by Applicable Data Protection Law.

You may update certain information through Your Account or submit a request using the contact details below. We may ask for information reasonably necessary to verify Your identity and locate the relevant records. We may refuse or limit a request where permitted by Applicable Law and will explain the reason where required.

You may unsubscribe from promotional emails through the unsubscribe link or change available communication preferences. We may continue to send essential messages concerning Account security, Projects, payments, legal notices or requested support.

When providing Personal Data or exercising Your rights, You must comply with Applicable Law, not impersonate another person, not suppress material information, not submit a false or frivolous grievance, and provide only information that is verifiably authentic for correction or erasure.

The Website is intended for persons who are at least 18 years of age. We do not knowingly permit a person under 18 years of age to create an Account. If We become aware that Personal Data has been collected directly from a child without the consent or authority required by Applicable Law, We may restrict the Account and take reasonable steps to delete the information.

A Creator who provides Personal Data concerning a child in connection with a lawful Project must have the verifiable consent of the child's parent or lawful guardian and any other permission required by law. Fancrew may request evidence of such authority and may restrict the relevant content or Project until satisfied.

Where Personal Data is processed or transferred outside India through a service provider or other recipient, We will comply with restrictions and requirements notified by the Central Government and with any other Applicable Law providing a higher degree of protection or localisation requirement. We will require appropriate contractual, technical and organisational safeguards for such processing.

The Website may contain links to or integrations with third-party websites and services. Fancrew does not control their privacy or security practices. You should review the applicable third-party privacy notice before providing information or connecting an account.

Fancrew will not ask You to disclose Your password, complete payment-card details or internet-banking password by unsolicited email, message or telephone call. If You receive a communication that appears suspicious, do not respond or use the link provided; report it to Our Grievance Officer.

We may update this Privacy Policy to reflect changes in the Website, Our processing practices or Applicable Law. The revised Privacy Policy will be published on the Website with an updated date. Where a change is material, We may also provide notice through the Website, Your Account or email. Your continued use of the Website after the effective date of the revised Privacy Policy shall be deemed acceptance of the revised Privacy Policy; however, We will obtain separate consent where Applicable Data Protection Law requires consent for a materially different processing purpose.

For questions, requests or complaints concerning this Privacy Policy or Our processing of Personal Data, please contact:

• Entity: FANCREW PRIVATE LIMITED
• Grievance Officer / Data Protection Contact: Grievance Officer, Fancrew
• Email: support@fancrew.in

Please provide sufficient information to identify Your Account and explain Your request. We will acknowledge and address the grievance within the period prescribed by Applicable Law. Where available and applicable, You may pursue further remedies before the competent data-protection authority after first using Fancrew's grievance-redressal mechanism.