01What this covers
This policy explains how SanctumCloud System Private Limited handles personal data in DriftBuddy, under India's Digital Personal Data Protection Act, 2023. It covers two groups: venue owners and staff who use the console, and players who use a venue's booking site, shop or app.
For player data, the venue decides why it is collected and we process it for them. For venue owners and staff, we decide.
02What we collect
- Account details: name, mobile number, email, and for venues the business name, GST number and billing details.
- Activity: sessions played, bookings, wallet top-ups and spending, store orders, tournament entries, lobby messages and badges.
- Payments: payment status and references from the payment provider. We never see or store full card numbers or UPI PINs.
- Device data: app version, push notification token and basic logs used to keep the service secure.
03How we use it
- To run the service: sessions, bookings, wallets, orders, receipts and invoices.
- To send messages you expect: login codes, booking reminders, session alerts and receipts by SMS, push or email.
- To send offers, only where the venue's player has not opted out.
- To keep accounts and money safe: fraud checks, audit logs and hourly balance checks.
- To improve DriftBuddy, using totals that do not identify anyone.
04Who we share it with
We do not sell personal data. We share it only with providers that help run the service, under contract: hosting (Amazon Web Services, Mumbai region), payments (Razorpay), SMS, email and push delivery, and message moderation. A venue's player data is shared with that venue's staff only.
05How long we keep it
We keep data while the account is active. When a venue closes its account we delete its data after 30 days. When a player asks to delete their account we remove or anonymise their personal details; transaction records needed for tax and accounts are kept as the law requires.
06Your rights
You can ask to see, correct or delete your personal data, or withdraw consent for messages. Players can do most of this in the app; otherwise write to hello@sanctumcloud.com. We reply within 30 days. If you are not satisfied you can complain to the Data Protection Board of India.
07Security
Data is encrypted in transit and at rest. Each venue's data is kept separate from every other venue's. Staff access is by role, and every money action is logged.
08Contact and grievance officer
Data fiduciary: SanctumCloud System Private Limited, 1309 Solaris Business Hub, near Bhuyangdev Char Rasta, Naranpura, Ahmedabad, Gujarat 380063, India, GSTIN 24ABNCS0265J1Z5. Phone +91 92658 07249.
Grievance officer: Sanket Patel, hello@sanctumcloud.com, +91 92658 07249, 1309 Solaris Business Hub, near Bhuyangdev Char Rasta, Naranpura, Ahmedabad, Gujarat 380063, India. Write with "Grievance" in the subject; we acknowledge within 48 hours.