Privacy Policy

Section 1: Introduction

Welcome to CLICKIN, a brand operated by Inofixa Technologies, based in India. We are committed to safeguarding the privacy and data protection rights of our users in compliance with the applicable Indian laws, including but not limited to:

• Digital Personal Data Protection Act, 2023 (DPDP Act)
• Information Technology Act, 2000 and its amendments (IT Act)
• Indian Penal Code (IPC) provisions concerning cyber crimes and data misuse
• Other relevant rules and sectoral guidelines as applicable in India

This Privacy Policy outlines how we collect, use, disclose, store, and protect your personal information when you use our website and services. It is designed to provide full transparency and to empower you with knowledge and control over your data. This document is intended to be easy to understand for Indian users from diverse backgrounds.

By using CLICKIN, you agree to the terms laid out in this Privacy Policy. If you do not agree, you should immediately stop using our services. However, we recommend reading this document in full to understand how we handle your information.

This policy applies to all users, visitors, customers, and partners accessing CLICKIN through the website, mobile interface, or any associated services. It also covers any personal data collected through offline interactions (where applicable), email communication, and third-party platforms used by CLICKIN.

If you have any questions, please contact our Grievance Officer as mentioned in the last section of this policy.

This Privacy Policy explains how we collect, use, and protect your personal information. By using our website, you agree to the terms outlined in this policy.

Company Details

Brand: CLICKIN
Legal Entity: Inofixa Technologies
Registered Office:
3/4, Old Mumbra Panvel Road,
Thane – 421204,
Maharashtra, India

Email: help@clickin.in
Phone: +91 9619701322

Section 2: What Information We Collect

At CLICKIN, we collect different types of personal and non-personal information to provide and improve our services. We only collect data that is necessary, lawful, and relevant for our operations. This section outlines the types of information we gather from users, whether directly or indirectly.

2.1 Personally Identifiable Information (PII)

We collect the following types of personally identifiable information (PII) from users during registration, purchase, subscription, or service inquiry:

• Full Name: For identification and personalization of your account and services.
• Mobile Number: For verification (OTP-based or otherwise), customer support, and transactional communication.
• Email Address: For communication, receipts, notifications, and verification.
• Postal Address: Required for product delivery or correspondence, especially if physical goods are involved.
• Business or Company Name (if applicable): For B2B services and invoicing.
• Government ID (if legally required): Such as PAN, Aadhaar, or GSTIN for verification or compliance with Indian tax and regulatory laws.
• Payment Information: Though we do not store full card details, payment gateways used may collect cardholder name, UPI ID, or transaction reference for completing secure transactions.

2.2 Non-Personal Information

We also collect data that does not directly identify you, but helps us understand your usage patterns:

• Device Information: Type, operating system, browser, and screen resolution.
• IP Address: For security, fraud detection, and location-based services.
• Browser Cookies: Used to remember your preferences, session details, and personalize your browsing experience (detailed further in the Cookies section).
• Location Data: General geographic location (e.g., city or state) derived from your IP address.
• Usage Data: Pages visited, time spent on site, click patterns, and interactions with specific features.

2.3 Information from Third Parties

We may receive user information from third-party platforms, partners, or services when you:

• Sign in using Google, Facebook, or other OAuth services (as allowed).
• Interact with our ads or promotions on third-party platforms.
• Are referred to us by a partner website or affiliate.

Such data may include your name, profile picture, or publicly shared email address, depending on the permissions granted by you to the third party.

2.4 Children's Information

We do not knowingly collect personal data from children under the age of 18. If we become aware that a child has submitted information without proper parental consent, we will take steps to delete that data in accordance with applicable Indian laws such as the DPDP Act, 2023.

All data collected is handled with strict confidentiality and used solely for lawful purposes, as described in the following sections.

Section 3: How We Use Your Information

At CLICKIN, we use your information responsibly, lawfully, and transparently. The personal and non-personal data collected is used to provide, operate, improve, and safeguard our services in compliance with Indian laws, including the Digital Personal Data Protection (DPDP) Act, 2023 and relevant provisions of the Information Technology Act, 2000.

3.1 To Provide Services

• To register your account and verify your identity through OTP, email, or other lawful means.
• To fulfill orders, process payments, deliver services or products, and provide technical support.
• To enable core website features such as dashboards, account management, and settings customization.

3.2 To Improve User Experience

• To personalize your interaction with CLICKIN by displaying content, services, or offers tailored to your location, usage history, or preferences.
• To analyze website traffic, navigation paths, and behavior trends for usability enhancements.
• To gather feedback via forms, surveys, or reviews to improve our features and customer satisfaction.

3.3 To Communicate with You

• To send transactional communications such as order confirmations, service updates, and payment receipts.
• To notify you of important changes to our policies, terms, or service features.
• To offer support via email, WhatsApp, or call in response to your queries or feedback.

3.4 For Marketing and Promotions

• To send promotional offers, newsletters, or updates via SMS, email, or push notifications (only if you have opted in).
• To run referral or affiliate programs where your referral code or user ID may be used.
• You can opt out of marketing messages at any time using the unsubscribe link or by contacting us.

3.5 To Comply with Legal Obligations

• To respond to lawful requests by government agencies, courts, or law enforcement under Indian jurisdiction.
• To comply with obligations under tax laws, consumer laws, and other statutory mandates in India.
• To protect against fraudulent, abusive, or illegal activities involving your account or transactions.

3.6 Internal Reporting & Data Analytics

• To generate internal business reports and measure performance metrics.
• To understand demand trends, user behavior, and popular services/products.
• This aggregated data is anonymized and used strictly for operational improvements.

3.7 With Your Explicit Consent

In certain cases, such as sharing your testimonial or integrating your data with a third-party partner, we will ask for your clear and informed consent. This is done in alignment with the principles of consent as defined in the DPDP Act, 2023.

We ensure that all uses of your data are transparent, secure, and never in violation of your trust or applicable Indian privacy regulations.

Section 4: Legal Basis for Processing Data

At CLICKIN, we process your personal data only when we have a valid legal basis to do so, in full compliance with Indian data protection laws such as the Digital Personal Data Protection (DPDP) Act, 2023, the Information Technology Act, 2000, and other applicable guidelines.

4.1 Consent

We obtain your clear and informed consent before collecting or processing your personal data for purposes like marketing, optional cookies, newsletters, or third-party data sharing. You may withdraw your consent at any time by contacting us or through your account settings.

• Example: Subscribing to email promotions or allowing location tracking for personalized services.
• Withdrawal of consent will not affect the legality of data processed before the withdrawal.

4.2 Contractual Necessity

We process your data when it is necessary for fulfilling a contract with you — for example, when you place an order, create an account, or request our services. Without this data, we cannot provide essential features of our platform.

• Example: Name, address, and phone number are used to deliver physical products.
• Banking details are used for secure payment processing and refunds.

4.3 Legal Obligation

Certain data must be processed to comply with legal requirements such as:

• Responding to official notices from Indian courts, police, or government bodies.
• Maintaining transaction records for taxation under the Goods and Services Tax (GST) regime.
• Providing KYC or identity details when mandated by law.

4.4 Legitimate Interests

We process some data when it is in our legitimate business interest and does not override your rights and freedoms. This includes actions like:

• Preventing fraud or misuse of our platform.
• Ensuring platform security and maintaining system performance.
• Understanding user behavior to improve features and usability.

We always conduct a balancing test to ensure that such interests do not negatively impact your privacy.

4.5 Public Interest or Legal Claims

In rare cases, we may process your data to establish or defend against legal claims, or if required in the public interest, such as during government audits or for public safety concerns as per Indian law.

4.6 Special Note on Children's Data

We do not knowingly collect data from children below the age of 18. If we discover that data has been collected from a minor without parental consent, we will delete it immediately as per the DPDP Act guidelines.

We ensure that every instance of data processing is supported by a lawful basis and meets both ethical and legal expectations under Indian jurisdiction.

Section 5: How We Store and Protect Your Data

At CLICKIN, we take the security and storage of your personal data very seriously. We ensure that your data is stored safely and processed in accordance with the Digital Personal Data Protection (DPDP) Act, 2023, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and relevant Indian cybersecurity standards.

5.1 Data Storage Location

Your data may be stored on secure servers located within India or, where permitted, in countries that provide adequate levels of data protection. Any transfer of data outside India is done in compliance with Indian legal requirements and with appropriate safeguards in place.

• Our primary data storage is within secure cloud-based infrastructure hosted by certified providers with strong encryption protocols.
• We ensure that vendors storing or processing data on our behalf are contractually bound to maintain equivalent security and privacy measures.

5.2 Data Security Measures

We use a combination of technical, administrative, and physical safeguards to protect your data from unauthorized access, alteration, disclosure, or destruction.

• Encryption: All sensitive personal data is encrypted both during transit (using HTTPS/SSL protocols) and at rest.
• Access Controls: Access to user data is role-based and limited to authorized personnel only, using two-factor authentication where applicable.
• Regular Security Audits: We conduct periodic vulnerability assessments, penetration tests, and security reviews.
• Monitoring: Our systems are continuously monitored for unusual or suspicious activity.

5.3 Data Retention Policy

We retain your data only for as long as necessary for the purposes outlined in this policy, or as required by applicable laws such as the Income Tax Act, 1961 or GST regulations. Once data is no longer needed, it is securely deleted or anonymized.

• Transactional and billing data may be retained for up to 8 years as per Indian taxation norms.
• Inactive user accounts may be deleted after a defined period, with prior notice.

5.4 Breach Notification Protocol

In the unlikely event of a data breach, we will notify affected users and the Indian Data Protection Board (or any relevant government authority) within the timelines required under the DPDP Act, 2023.

• We will provide details of the breach, potential consequences, and steps users should take to protect themselves.
• Our internal incident response team will act immediately to contain and mitigate any threat.

5.5 User Responsibility for Security

While we implement robust security, you also have a role in keeping your data safe. Always use strong passwords, avoid sharing login credentials, and log out from shared devices. If you suspect unauthorized access, contact our support team immediately.

By using our platform, you trust us with your data. We honor that trust by applying the highest standards of data protection under Indian legal frameworks and industry best practices.

Section 6: How We Use Your Data

At CLICKIN, we are committed to using your data ethically and only for legitimate purposes that enhance your experience. This section explains the lawful bases and specific purposes for which we process your personal and non-personal information, in accordance with the DPDP Act, 2023 and the Information Technology Act, 2000.

6.1 Lawful Bases for Processing

We collect and process your data based on one or more of the following lawful grounds under Indian law:

• Consent: Where you have clearly agreed to us processing your data for a specific purpose.
• Contractual Necessity: To provide services as per our agreement with you (e.g., managing your account, delivering products).
• Legal Obligation: To comply with Indian laws such as tax regulations, IT security standards, and anti-fraud measures.
• Legitimate Interest: For operational purposes such as analytics, fraud detection, or business improvement, provided your rights are not overridden.

6.2 Specific Uses of Your Personal Data

We use your personal data for the following purposes, depending on your interactions with our website and services:

• Account Creation & Verification: To register and authenticate your user profile on CLICKIN.
• Service Fulfilment: To deliver services such as website creation, digital marketing, or product orders.
• Customer Support: To resolve your queries via phone, chat, email, or grievance channels.
• Payments & Transactions: To process online payments, issue invoices, track billing, and manage refunds.
• Personalized Offers: To suggest relevant services or promotions based on your interests and previous usage.
• Notifications: To send important updates, security alerts, order confirmations, or policy changes.

6.3 Use of Non-Personal and Aggregate Data

We may use non-personal or anonymized data for broader business purposes:

• Analytics: To understand user behavior and improve website functionality and service design.
• Marketing Insights: To analyze trends, campaign effectiveness, and user demographics.
• Research: For statistical and performance reporting in a way that does not identify individual users.

6.4 Communication Preferences

We may use your contact details to send:

• Service-related announcements (transactional emails or order updates).
• Marketing emails (only with your explicit opt-in consent).
• Important policy, legal, or security updates.

You can manage your preferences or unsubscribe from promotional communications at any time using the provided links or by contacting our support.

6.5 No Sale of Personal Data

We do not sell your personal data to third parties under any circumstances. Any data shared is only for the purposes mentioned above and is strictly governed by this Privacy Policy and relevant Indian laws.

All uses of your data are monitored, documented, and periodically reviewed to ensure compliance with legal and ethical obligations. Your privacy and trust are of the utmost importance to us.

Section 7: Cookies and Tracking Technologies

CLICKIN uses cookies and similar tracking technologies to enhance your browsing experience, understand usage patterns, deliver personalized content, and improve our services. This section explains what cookies are, why we use them, and how you can control them, in compliance with the DPDP Act, 2023 and applicable Indian IT laws.

7.1 What Are Cookies?

Cookies are small text files stored on your device (computer, mobile phone, tablet) by your browser when you visit a website. They contain anonymous identifiers and are used to remember your preferences, login sessions, and browsing behavior across sessions.

7.2 Types of Cookies We Use

• Essential Cookies: Necessary for the website to function properly. For example, maintaining login sessions or enabling navigation between pages.
• Performance Cookies: Help us understand how visitors interact with the site (via tools like Google Analytics), so we can improve usability and content.
• Functional Cookies: Remember user preferences such as language, location, or previously viewed pages, enhancing your experience.
• Advertising & Targeting Cookies: Track user activity across websites to deliver personalized ads or limit how often you see an advertisement.
• Third-Party Cookies: Set by external services such as payment gateways, social media integrations, or analytics platforms.

7.3 How We Use Cookies

We use cookies to:

• Recognize returning users and maintain secure login sessions.
• Analyze traffic sources, most visited pages, and user behavior patterns.
• Display personalized content and recommend services based on user interests.
• Enable integrations with third-party tools such as chat support or payment processors.
• Measure the performance of our campaigns, improve loading speed, and reduce server load.

7.4 Your Choices and Cookie Control

As a user, you have the right to control or reject cookies:

• Browser Settings: You can configure your browser to block or delete cookies through its settings.
• Cookie Consent Banners: On your first visit, we may display a cookie notice allowing you to accept or reject non-essential cookies.
• Opt-Out Tools: For analytics or advertisements, you may opt out using tools like Google Analytics Opt-Out.

Please note that disabling certain cookies may affect the functionality of the website and reduce your overall user experience.

7.5 Retention and Expiry

Cookies may be:

• Session Cookies: Expire automatically when you close your browser.
• Persistent Cookies: Remain on your device for a specified period or until manually deleted.

7.6 Third-Party Cookie Practices

Our website may use cookies set by trusted third-party partners, such as payment gateways and analytics providers. These cookies are governed by the respective privacy policies of those providers. We encourage you to review their privacy policies before using their services.

7.7 Updates to Cookie Usage

We may update our cookie practices based on technological advancements, legal requirements, or business needs. Any updates will be reflected in this section, and where required by law, we will obtain fresh consent.

By continuing to use CLICKIN, you agree to our use of cookies as described above. You may change your cookie preferences at any time through your browser settings or by contacting us for further assistance.

Section 8: Data Sharing and Disclosure

At CLICKIN, we value your trust and privacy. We do not sell your personal data to third parties. However, under specific circumstances, we may share your information with trusted entities to provide services, comply with applicable laws, or protect our legal interests. This section explains when and with whom your data may be shared in compliance with the Digital Personal Data Protection (DPDP) Act, 2023 and the Information Technology Act, 2000.

8.1 Sharing with Service Providers

We may share your personal data with third-party service providers or vendors that assist in operating our business. These include:

• Cloud hosting providers and website infrastructure platforms.
• Payment gateway processors (e.g., Razorpay, Paytm, etc.).
• Email and SMS communication partners.
• Marketing and advertising platforms (e.g., Google Ads, Facebook).
• Analytics providers such as Google Analytics or Hotjar.
• Customer support and live chat platforms.

All such service providers are contractually obligated to protect your data and are permitted to use it only for the specific purposes authorized by CLICKIN.

8.2 Legal and Regulatory Disclosures

We may disclose your personal data when required by Indian law, regulation, legal process, or government request. This includes situations such as:

• Responding to lawful court orders, police inquiries, or notices from enforcement agencies under applicable Indian laws.
• Complying with investigations under the Information Technology Act, 2000 or the DPDP Act, 2023.
• Preventing fraud, security breaches, or illegal activities.
• Protecting our legal rights, ensuring user safety, or defending against legal claims.

8.3 Sharing for Business Transactions

In the event of a merger, acquisition, restructuring, or sale of CLICKIN or its assets, user data may be transferred to the new entity or purchaser. If such a transfer occurs, users will be notified through email or a notice published on our website.

8.4 Sharing with Your Consent

In certain situations, we may request your explicit consent before sharing your information. Examples include:

• Referring you to a third-party service provider at your request.
• Publishing your testimonial or feedback on our website.
• Using your information for a new purpose that was not originally described in this Privacy Policy.

8.5 Cross-Border Data Transfers

Although our primary servers are located in India, some trusted partners may process or store information outside India. In such cases:

• We ensure that the destination country provides an adequate level of data protection as required under Indian law.
• We implement appropriate contractual safeguards before any international transfer of personal data.

8.6 Anonymized and Aggregated Data

We may share anonymized, aggregated, or de-identified information that cannot reasonably identify you. Such information may be used for research, analytics, reporting, or product improvement purposes without revealing your personal identity.

8.7 No Sale of Personal Data

We do not sell, rent, lease, or trade your personal information to any individual or organization for commercial gain. Any sharing of information is carried out only as described in this Privacy Policy and in accordance with applicable Indian laws.

8.8 Transparency and Policy Updates

Our data-sharing practices are reviewed periodically to ensure ongoing compliance with legal and regulatory requirements. If we make any significant changes to how we share personal data, we will update this Privacy Policy and, where required, obtain your consent before implementing those changes.

Your trust is important to us, and CLICKIN remains committed to ensuring that your personal information is handled responsibly, securely, and transparently.

Section 9: Data Retention and Storage

At CLICKIN, we retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy. Our retention practices comply with applicable Indian laws, particularly the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.

9.1 Retention Periods

We retain your data based on the type of information collected and the purpose for which it was obtained:

• User Account Data: Retained until your account is deleted or remains inactive for more than 24 months.
• Transactional Data: Retained for a minimum of 7 years to comply with income tax, GST, accounting, and other applicable Indian laws.
• Communication Records: Emails, messages, and customer support interactions may be retained for 2–5 years for audit, service improvement, and dispute resolution.
• Marketing & Analytics Data: Stored for up to 36 months unless you withdraw your consent earlier.
• Legal Records: Information associated with complaints, disputes, investigations, or legal proceedings may be retained for a longer period where required by law.

9.2 Criteria for Determining Retention Duration

The duration for which we retain personal data depends on several factors, including:

• Applicable legal and regulatory requirements.
• The purpose for which the information was originally collected.
• Contractual obligations with customers, vendors, or partners.
• User activity and continued use of our services.
• Pending grievances, disputes, investigations, or legal proceedings.

9.3 Secure Storage Practices

Your personal information is stored using industry-standard security measures, including:

• Secure servers located in India or other jurisdictions offering adequate legal safeguards.
• Encryption of sensitive information during transmission and while stored.
• Restricted access controls and comprehensive audit logging.
• Regular data backups, firewall protection, and continuous monitoring.
• Cloud infrastructure maintained by providers that comply with recognized security standards such as ISO 27001, SOC 2, or equivalent certifications.

9.4 Deletion and Anonymization

Once the applicable retention period has expired, we will either:

• Securely delete your personal information from our systems.
• Anonymize the information so that it can no longer be used to identify you.

Subject to applicable law, you may also request the deletion of your personal information by contacting our Grievance Officer as described later in this Privacy Policy.

9.5 Exceptions to Standard Retention

Certain information may be retained beyond the standard retention period where necessary:

• To comply with legal obligations or regulatory requirements.
• To resolve disputes, investigations, or pending claims.
• To process pending refunds or transactions.
• Where retention is required by any applicable Central or State Government regulation.

9.6 User-Controlled Deletion

You may request the deletion of your personal information at any time. After verifying your identity and confirming that no legal restrictions apply, we will process your request within a reasonable timeframe and notify you once the deletion has been completed.

We are committed to responsible data retention practices and ensure that personal information is never stored longer than necessary for legitimate business, legal, or regulatory purposes.

Section 10: User Rights Under Indian Law

As a user of CLICKIN, you are entitled to various rights concerning your personal data under applicable Indian laws, particularly the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and relevant rules issued by the Ministry of Electronics and Information Technology (MeitY).

10.1 Right to Access Your Data

You have the right to request and receive a copy of the personal information we hold about you. This includes:

• Details of the types of personal data collected.
• Sources from which your information was obtained.
• The purposes for which your personal data is processed.
• Information about third parties with whom your data has been shared.

To request access to your personal information, please contact us at help@clickin.in. We will respond within the timeframe required by applicable law.

10.2 Right to Correction

If you believe that any personal information we hold about you is inaccurate, incomplete, or outdated, you may request that it be corrected. Once your identity has been verified, we will update the relevant information within a reasonable period and notify you when the correction has been completed.

10.3 Right to Data Portability

Where permitted under applicable law, you may request your personal information in a structured, commonly used, and machine-readable format. This enables you to transfer your information to another service provider if you choose to do so.

10.4 Right to Withdraw Consent

Where your personal data is processed based on your consent, you may withdraw that consent at any time. Upon withdrawal:

• We will stop processing your personal information for the specific purpose for which consent was withdrawn.
• Certain services or features may no longer be available if they depend on that information.

You may withdraw your consent by contacting us directly or, where available, through your account settings.

10.5 Right to Erasure

You may request the deletion of your personal information where:

• The purpose for collecting the information has been fulfilled.
• You have withdrawn your consent and there is no other lawful basis for processing.
• Your personal information has been collected or processed unlawfully.

We will review your request and delete the information where legally permitted. Certain records may continue to be retained where required by law or for legitimate legal purposes.

10.6 Right to Be Informed

You have the right to receive clear and transparent information regarding:

• What personal information we collect.
• Why we collect and process your information.
• With whom your information may be shared.
• Your rights regarding your personal information.

This Privacy Policy has been prepared to help you understand these rights and how we process your information.

10.7 Right to Grievance Redressal

If you have any concerns regarding the processing of your personal information, you may contact our designated Grievance Officer. We will acknowledge and address your complaint within the timelines prescribed under applicable Indian law.

10.8 Right Against Automated Decision-Making

You have the right to object to decisions made solely through automated processing where such decisions significantly affect you. CLICKIN does not rely exclusively on automated decision-making for any legally significant decisions concerning users.

10.9 How to Exercise Your Rights

To exercise any of the rights described above, please email us at help@clickin.in with the subject line "Data Rights Request". We may request reasonable identity verification before processing your request in order to protect your personal information.

We are committed to ensuring transparency, accountability, and giving you meaningful control over your personal information. As privacy laws evolve, we will update this section to reflect any new legal rights available to our users.

Section 11: Cookies and Tracking Technologies

CLICKIN uses cookies and similar tracking technologies to improve your browsing experience, analyze website traffic, personalize content, and provide relevant services. These technologies help us understand user behavior and preferences while ensuring compliance with applicable Indian privacy laws.

11.1 What Are Cookies?

Cookies are small text files stored on your computer, smartphone, or other device when you visit a website. These files help the website recognize your device, remember your preferences, and provide a smoother browsing experience during future visits.

11.2 Types of Cookies We Use

• Essential Cookies: Required for core website functionality such as secure login, page navigation, and session management.
• Performance Cookies: Help us understand how visitors interact with our website by collecting anonymous statistical information.
• Functionality Cookies: Remember your preferences, including language and regional settings, to enhance your browsing experience.
• Advertising and Targeting Cookies: Used by us or trusted advertising partners to display advertisements that are more relevant to your interests.

11.3 Third-Party Tracking Technologies

We may use trusted third-party technologies such as:

• Google Analytics: To measure website traffic, visitor behavior, and overall website performance.
• Meta Pixel (Facebook Pixel): To measure advertising effectiveness and improve campaign performance.
• Google Ads: To deliver personalized advertisements based on your browsing behavior.

These third-party services operate under their own privacy policies. We encourage you to review their policies before using their services.

11.4 How We Use Cookie Data

Information collected through cookies may be used to:

• Improve website functionality and user experience.
• Maintain secure login sessions.
• Analyze visitor behavior and website performance.
• Provide personalized content and service recommendations.
• Deliver relevant advertisements.
• Protect the website against fraudulent or unauthorized activity.

11.5 Cookie Consent

By using CLICKIN, you consent to the use of cookies unless you disable them through your browser settings or other available controls. Where required by applicable law, we will request your consent before placing non-essential cookies on your device.

11.6 Managing Cookies

Most web browsers allow you to manage cookies through their settings. You can:

• View stored cookies.
• Delete individual or all cookies.
• Block cookies from specific websites.
• Disable third-party cookies.

Please note that disabling certain cookies may affect the availability or functionality of some features on CLICKIN.

11.7 Cookie Retention

Some cookies are deleted automatically when your browser is closed, while others remain on your device for a defined period to remember your preferences and improve future visits.

11.8 Compliance with Indian Laws

Our use of cookies complies with applicable Indian privacy and data protection laws, including the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and related regulations governing the collection and processing of personal information.

11.9 Changes to This Section

We may update this section from time to time to reflect changes in technology, legal requirements, or our business practices. Any updates will be published on this page and will become effective immediately upon publication.

If you have any questions regarding our use of cookies or tracking technologies, please contact us at help@clickin.in.

Section 12: Sharing and Disclosure of Information

At CLICKIN, we value your trust and are committed to maintaining the confidentiality of your personal information. We only share your data when absolutely necessary and in accordance with applicable Indian laws, including the Digital Personal Data Protection (DPDP) Act, 2023, the Information Technology Act, 2000, and relevant rules.

12.1 When We Share Your Information

We may disclose your personal data under the following circumstances:

• Service Providers and Partners: We may share data with third-party service providers or partners (e.g., payment gateways, hosting companies, analytics providers, advertising networks) who help us operate our website or deliver services. These entities are contractually bound to use your data only for specific, authorized purposes and with appropriate safeguards.
• Legal Obligations: We may disclose your information if required by law, regulation, legal process, or government request (such as a court order, police inquiry, or summons) in accordance with Indian laws like the Information Technology Act, 2000 and relevant provisions under the Indian Penal Code (IPC).
• Business Transfers: In case of a merger, acquisition, restructuring, sale of assets, or business transfer, your personal data may be shared with relevant third parties involved in the transaction. We will ensure that such entities uphold the same level of data protection standards.
• Protection of Rights: We may share your data when we believe it is necessary to protect the rights, property, or safety of CLICKIN, our users, or the public. This includes fraud detection, prevention of data breaches, or enforcing our Terms of Use.

12.2 Types of Third Parties We Work With

We work with specific categories of third parties, such as:

• Payment processors (e.g., Razorpay, Paytm, Stripe)
• Web hosting and server providers (e.g., AWS, DigitalOcean)
• Email and SMS marketing platforms (e.g., Mailchimp, Twilio)
• Data analytics services (e.g., Google Analytics)
• Advertising networks (e.g., Google Ads, Facebook Ads)
• Social media plugins (e.g., Facebook Like Button, Instagram Feed)

All third-party vendors are selected with care and must adhere to strict privacy standards and data protection obligations under Indian law.

12.3 Cross-Border Data Sharing

In certain cases, we may transfer your data to service providers located outside India. Such transfers are done in compliance with Indian data protection laws and only when:

• The destination country offers an adequate level of data protection, or
• We have entered into binding agreements that safeguard your data, or
• You have provided explicit consent for the international data transfer.

We do not engage in cross-border sharing unless absolutely necessary and legal mechanisms are in place to ensure your data is protected.

12.4 Aggregated or Anonymized Data

We may share aggregated, anonymized data (which cannot identify you) with advertisers, researchers, or analytics platforms to understand usage trends, performance insights, or marketing effectiveness. Such data does not contain personal information.

12.5 No Unauthorized Sale of Data

We do not sell, rent, or trade your personal information to third parties for commercial purposes without your consent. Your trust is our priority, and we will never misuse your data.

12.6 User Controls and Transparency

You have the right to know with whom your data is shared and why. Upon request, we will provide clarity on third parties your data may have been disclosed to, subject to reasonable verification of identity and legal limitations.

12.7 Security Measures During Sharing

Before sharing data with any third party, we ensure:

• They follow adequate data protection and security standards.
• They do not use the data beyond agreed purposes.
• They are held accountable through legal contracts, Non-Disclosure Agreements (NDAs), or Data Processing Agreements (DPAs).

12.8 Sharing Under the DPDP Act, 2023

As per the Digital Personal Data Protection Act, 2023, all sharing of personal data is based on valid legal grounds such as:

• Consent obtained from the Data Principal (user).
• Performance of a contract (e.g., service delivery).
• Legal obligation or regulatory compliance.
• Legitimate interests that do not override user rights.

We maintain records of all sharing activities in compliance with audit and reporting obligations as required under applicable Indian law.

If you have any questions about how your data is shared, or would like to exercise your rights, please contact us at help@clickin.in.

Section 13: Data Retention and Storage

At CLICKIN, we retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with applicable Indian laws, resolve disputes, enforce our agreements, and protect our legal interests. Our data retention and storage practices are in full compliance with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and other relevant Indian data protection norms.

13.1 Duration of Retention

We retain personal data for the following durations based on data type and purpose:

• User account data: Stored until the user deletes their account or requests erasure, unless retention is required by law.
• Transaction data: Retained for a minimum of 7 years for tax, audit, and legal compliance as per Indian accounting standards and the Income Tax Act.
• Communication logs: Stored for up to 2 years for customer service tracking, dispute resolution, and fraud prevention.
• Marketing consent and preferences: Retained until the user withdraws consent or requests data deletion.
• Analytics and usage logs: Retained in anonymized or pseudonymized form for research, service improvement, and security monitoring purposes.

13.2 Criteria for Retention

We determine appropriate data retention periods based on:

• The nature and sensitivity of the data.
• The legal and regulatory obligations under Indian law.
• The purpose for which the data was collected.
• Risk of harm in case of unauthorized access or disclosure.
• Our contractual obligations and rights enforcement requirements.

13.3 Secure Storage Practices

All data is stored using secure and encrypted systems on industry-standard servers located in India or countries with adequate data protection safeguards. We use:

• End-to-end encryption for storage and transmission of sensitive data.
• Access controls and authentication to prevent unauthorized access.
• Regular security audits and vulnerability assessments.
• Role-based access for employees and partners to ensure limited exposure.

Wherever possible, we prefer to store data on servers within India to align with the data localization recommendations of the Government of India and the Reserve Bank of India (RBI) guidelines.

13.4 User Rights on Retention

You have the right to request deletion of your personal data after the completion of services or when you withdraw consent. Upon such a request:

• We will securely delete or anonymize your data unless we are legally obligated to retain it.
• We may retain minimal necessary data to comply with taxation, fraud detection, or legal claims as permitted under Indian laws.
• Requests can be submitted via email to help@clickin.in with appropriate identity verification.

13.5 Data Archival and Disposal

We maintain a robust data archival and disposal policy that includes:

• Archiving old data securely with limited access.
• Automatic purging or anonymization after expiry of the retention period.
• Permanent deletion from backups after legal hold periods end.

13.6 Exceptions to Deletion

In certain scenarios, we may be required to retain data beyond user requests for deletion due to:

• Pending investigations or legal proceedings.
• Regulatory or law enforcement requirements.
• Compliance with anti-fraud obligations.
• Internal auditing and accounting requirements.

13.7 Retention Under the DPDP Act, 2023

As per Section 8 of the Digital Personal Data Protection Act, 2023, we retain data only as long as necessary and ensure that data is removed once the purpose is fulfilled. We maintain audit trails and documentation to support our compliance obligations.

If you wish to understand more about how long we keep specific categories of data, or wish to exercise your rights under the DPDP Act, please reach out to us at help@clickin.in.

Section 14: Data Security and Protection Measures

At CLICKIN, the security of your personal data is our highest priority. We are committed to ensuring that your information is safe, secure, and handled in accordance with Indian legal standards, including the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 under the Information Technology Act, 2000 and the Digital Personal Data Protection (DPDP) Act, 2023.

14.1 Our Security Approach

We implement a multi-layered security architecture to protect your personal data from unauthorized access, alteration, disclosure, or destruction. Our protection protocols cover data during transit, data at rest, and internal processing.

14.2 Technical Safeguards

• Encryption: All sensitive data is encrypted using AES-256 standards and TLS 1.3 for secure transmission over the internet.
• Firewalls & Intrusion Detection: Our servers are protected with enterprise-grade firewalls and monitored using intrusion detection/prevention systems (IDS/IPS).
• Secure Cloud Infrastructure: We use reliable, Indian law-compliant cloud providers with ISO 27001 and SOC 2 certifications.
• Multi-Factor Authentication (MFA): Employee and admin accounts use MFA to add a second layer of security for access control.
• Access Controls: Role-based access control (RBAC) ensures that only authorized personnel have access to specific data.

14.3 Organizational Safeguards

• Employee Training: All employees undergo regular training in data privacy, phishing awareness, and secure data handling practices.
• Confidentiality Agreements: All staff and partners are bound by strict confidentiality clauses aligned with Indian privacy regulations.
• Access Logging: We maintain logs of all user and admin data access to detect and respond to suspicious behavior.

14.4 Regular Testing and Audits

We conduct frequent vulnerability assessments, penetration testing, and security audits to identify and fix potential threats. We also engage third-party auditors to validate the robustness of our systems under Indian cyber security norms.

14.5 Data Breach Response Plan

In the unlikely event of a data breach, we follow a well-documented incident response protocol, which includes:

• Immediate containment and assessment of the breach.
• Notifying affected users without undue delay, where required.
• Filing necessary breach reports with CERT-In and other Indian regulatory authorities as per the IT Rules and the DPDP Act.
• Implementing corrective and preventive measures to prevent future occurrences.

14.6 User Responsibilities

While we take extensive steps to secure your data, you also play a role in protecting your information. We recommend:

• Creating strong and unique passwords.
• Not sharing login credentials with others.
• Logging out from public devices after use.
• Keeping your software and devices updated with the latest security patches.

14.7 Compliance with Indian Law

Our security measures align with the following Indian legal standards:

• Section 43A of the Information Technology Act, 2000 – Reasonable security practices.
• SPDI Rules, 2011 – Sensitive Personal Data or Information handling.
• Digital Personal Data Protection (DPDP) Act, 2023 – Security of personal data throughout its lifecycle.

We periodically update our security policies to adapt to evolving threats and to ensure that we meet or exceed regulatory expectations.

14.8 Contact for Security Concerns

If you suspect any security breach, misuse of your data, or unauthorized activity on your account, please report it immediately to our Grievance Officer at help@clickin.in.

Section 15: Cookies and Tracking Technologies

CLICKIN uses cookies and similar tracking technologies to enhance user experience, analyze website traffic, and personalize content and advertisements. This section explains how we use these tools, your choices, and how they relate to Indian privacy laws such as the Digital Personal Data Protection (DPDP) Act, 2023 and the Information Technology Act, 2000.

15.1 What Are Cookies?

Cookies are small text files placed on your device (computer, tablet, or mobile) when you visit a website. These files help websites remember your preferences, login status, and browsing behavior to provide a smoother and more personalized experience.

15.2 Types of Cookies We Use

• Essential Cookies: These are necessary for the website to function properly, such as enabling secure login, shopping cart functionality, and session management.
• Performance Cookies: These help us understand how users interact with our site, which pages are most visited, and how users navigate through content. Tools like Google Analytics fall into this category.
• Functionality Cookies: These remember user choices, such as language preferences or saved settings, to provide customized features.
• Advertising Cookies: These are used to deliver relevant ads and limit ad repetition. We may use platforms such as Google Ads or Facebook Pixel to track ad performance.
• Third-Party Cookies: These are placed by services we integrate (e.g., YouTube, Google Maps, WhatsApp buttons) and may track your interactions across websites.

15.3 How We Use Tracking Technologies

In addition to cookies, we use tracking pixels, web beacons, and JavaScript snippets to collect user behavior data. These technologies help us:

• Measure website performance and loading speed.
• Analyze browsing behavior for continuous improvements.
• Serve personalized and interest-based advertisements.
• Understand demographic and geographic usage trends.

15.4 Consent and Control

Under applicable Indian privacy laws, we respect your right to provide or withhold consent for non-essential cookies. When you visit CLICKIN, a cookie banner or popup informs you about cookie usage and allows you to accept, reject, or customize your preferences.

You can also control cookies manually by:

• Adjusting your browser settings to block or delete cookies.
• Using private or incognito browsing mode.
• Opting out of personalized advertisements through Google Ads Settings or Facebook Ad Preferences.

15.5 Data Collected via Cookies

Depending on the cookie type, cookies may collect:

• Device type, IP address, browser type, and browser version.
• Approximate geographic location.
• Pages visited, browsing duration, and click interactions.
• Login session identifiers (for authenticated users only).
• Referring URLs and exit pages.

15.6 Third-Party Integrations

We work with trusted third-party analytics and advertising providers such as:

• Google Analytics: Tracks website usage patterns. You may opt out using the Google Analytics Opt-Out Add-on.
• Meta/Facebook Pixel: Helps deliver targeted advertisements and measure advertising conversions.
• Hotjar or Similar Tools: Capture anonymized heatmaps and session recordings to improve website usability.

15.7 Compliance with Indian Laws

Our cookie and tracking practices comply with the following Indian legal requirements:

• Digital Personal Data Protection (DPDP) Act, 2023: We obtain valid user consent wherever personal data is processed through cookies.
• SPDI Rules, 2011: We maintain transparency regarding the collection and processing of information through cookies.
• Information Technology Act, 2000 (Section 72A): We protect personal information collected through tracking technologies against unauthorized disclosure.

15.8 Cookie Retention Duration

Cookies remain stored for different durations depending on their purpose:

• Session Cookies: Automatically deleted when your browser session ends.
• Persistent Cookies: Stored on your device for a specified period (typically between 30 and 365 days) unless manually deleted earlier.

15.9 Updates to Our Cookie Policy

This Cookie Policy may be updated periodically to reflect changes in technology, applicable laws, or our services. We encourage you to review this section regularly to stay informed about any updates.

15.10 Contact for Cookie Concerns

If you have any questions regarding our use of cookies or wish to learn more about managing your cookie preferences, please contact our Grievance Officer at help@clickin.in.

Section 16: User Rights and Grievance Redressal Mechanism

At CLICKIN, we are committed to upholding your rights as a digital user under Indian law, including the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000. This section outlines your key rights and the mechanism to raise grievances, ensuring you are fully informed, empowered, and protected.

16.1 Your Legal Rights

As a user of our services, you are entitled to exercise the following rights under applicable Indian privacy laws:

• Right to Access: You can request a summary or copy of the personal data we hold about you.
• Right to Correction: You can request correction of inaccurate or outdated personal data in our records.
• Right to Erasure: You may request deletion of your personal data in specific circumstances, such as account closure or withdrawal of consent.
• Right to Consent Withdrawal: You may withdraw consent to process your data for any non-essential purpose at any time.
• Right to Grievance Redressal: You can file a complaint if you believe your data is being misused or mishandled.
• Right to Nominate: As per the DPDP Act, 2023, you can nominate another person to exercise your data rights in the event of death or incapacity.

16.2 How to Exercise Your Rights

You may submit a request to exercise any of your rights by emailing us or contacting our Grievance Officer using the details below. Please include the following in your request:

• Your full name and registered email address or phone number.
• A description of the right you wish to exercise.
• Any relevant identification or authorization if required (especially for sensitive data requests).

We aim to respond to such requests within 15 business days of receipt, as per DPDP compliance timelines.

16.3 Grievance Redressal Procedure

If you have any concerns, complaints, or disputes regarding how your personal data is being handled, please follow the steps below:

• Submit your grievance via email to the Grievance Officer at help@clickin.in.
• Include your contact information, the nature of the issue, and any relevant supporting documents.
• We will acknowledge your complaint within 72 hours and aim to resolve it within 15 days.

16.4 Grievance Officer Details (As per IT Act, 2000 and DPDP Act, 2023)

Name: Mustakim Khan
Designation: Grievance Officer
Company: Inofixa Technologies, Thane, Mumbai, Maharashtra, India
Email: help@clickin.in
Mobile: +91 9619701322
Availability: Monday to Friday, 10:00 AM – 6:00 PM (IST)

16.5 Right to Approach the Data Protection Board of India

If you are dissatisfied with our response or believe that your data rights are being violated, you have the right to escalate the matter to the Data Protection Board of India (DPBI) under the DPDP Act, 2023. Details on how to approach the DPBI will be made available through its official website as notified by the Ministry of Electronics and Information Technology (MeitY).

16.6 Non-Discrimination Clause

We respect your data rights and assure you that exercising any of the above rights will not result in denial of service, discriminatory treatment, or any penalty unless such personal data is essential for delivering the requested services.

Section 17: Children's Privacy

At CLICKIN, we give utmost importance to the privacy and safety of children using digital platforms. In line with Indian laws such as the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and global best practices, we ensure that personal data related to minors is handled with enhanced care and protection.

17.1 Age Limit for Use

Our website and services are intended for individuals who are at least 18 years of age. If you are under the age of 18, you may use our services only with the involvement and consent of a parent or legal guardian.

We do not knowingly collect personal data from children below the age of 18 without verifiable parental consent. If we become aware that we have inadvertently collected such data, we will take immediate steps to delete it.

17.2 Parental Consent and Oversight

If a minor (under 18) is using our platform through parental involvement, the parent or legal guardian must:

• Provide verifiable consent for any data processing activity.
• Remain responsible for the minor's interactions and data shared on the platform.
• Have the ability to review, correct, or delete any personal data shared by the child.

We may request verification details to confirm parental authority, such as an OTP-based phone or email authentication or an identity document (only in sensitive cases).

17.3 Measures for Child Safety

To further ensure child privacy and safety, we undertake the following:

• We design our interface and communication tools to avoid soliciting or encouraging minors to submit personal data.
• We do not use any minor's personal data for advertising, marketing, or profiling purposes.
• We educate users through warnings and notices that children should be accompanied by parents or guardians while using our services.

17.4 Reporting Violations

If you believe that a child under the age of 18 has provided us with personal information without appropriate parental consent, or if you become aware of any misuse of a child's data on our platform, please contact us immediately at help@clickin.in.

We take such reports seriously and will investigate them promptly, including removing the information or suspending related accounts where necessary.

17.5 Legal Compliance

We are committed to compliance with:

• Section 43A of the Information Technology Act, 2000 and associated IT Rules defining reasonable security practices for sensitive personal data, including information relating to minors.
• Digital Personal Data Protection (DPDP) Act, 2023, which imposes special obligations for processing children's personal data.
• Any additional guidelines or obligations issued by the Ministry of Electronics and Information Technology (MeitY) relating to child safety and digital protection.

17.6 Responsibility of Parents and Guardians

We encourage all parents and guardians to take an active role in their children's online activities. Please educate your children about online safety, guide their digital behavior, and regularly review the privacy settings on the devices and platforms they use.

By using CLICKIN, you confirm that you are either:

• 18 years of age or older, or
• Using the platform under parental supervision with appropriate consent.

Section 18: Policy Updates and Communication

At CLICKIN, we reserve the right to update, modify, or revise this Privacy Policy at any time to reflect changes in our practices, technology, legal obligations, or user feedback. It is our commitment to keep you informed transparently and in a timely manner about how your personal data is handled under evolving circumstances, especially in accordance with Indian laws such as the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.

18.1 Nature of Updates

Policy updates may occur due to the following reasons:

• Changes in legal requirements or regulatory frameworks.
• Introduction of new services, features, or partnerships.
• Enhancements in data security or processing technologies.
• Internal audits or feedback from users or legal authorities.

18.2 Notification of Changes

When changes are made to this Privacy Policy, we ensure that you are notified through one or more of the following methods:

• A prominent banner or pop-up on our website.
• An email sent to your registered email address (where available).
• In-app notifications (for mobile or web applications, where applicable).
• Updates to the "Last Updated" date at the top of this Privacy Policy.

It is your responsibility to periodically review this Privacy Policy to stay informed of any changes. Continued use of CLICKIN after the effective date of any update constitutes your acceptance of the revised Privacy Policy.

18.3 Material Changes

If any update significantly affects your rights or the way we process your personal data (such as introducing new categories of personal information or sharing data with new third parties), we will obtain your explicit consent before implementing such changes wherever required under applicable law.

18.4 Version Control

Every version of this Privacy Policy is time-stamped and archived for future reference. You may request a copy of any previous version by contacting us at help@clickin.in.

18.5 Communication Channels

For any clarification, questions, or concerns regarding policy updates, users are encouraged to contact us through:

• Email: help@clickin.in
• Contact Form: Available on our Contact Us page.
• Postal Address: As mentioned in the final contact section of this Privacy Policy.

18.6 User Responsibility

We encourage all users to:

• Regularly review this Privacy Policy for the latest updates.
• Keep their contact details updated to ensure important notifications are received.
• Contact us immediately if they disagree with any updated terms or require clarification.

Your trust and data security are extremely important to us. We remain committed to keeping you informed while ensuring your personal information is protected in accordance with all applicable Indian legal and regulatory requirements.

Section 19: User Testimonials and Public Content

At CLICKIN, we encourage and value the feedback, reviews, testimonials, and public contributions shared by our users. These may include written reviews, ratings, profile submissions, success stories, or any content voluntarily submitted by users for publication on our platform. This section outlines how we handle such content under applicable Indian laws and user rights.

19.1 Voluntary Submission of Testimonials

When users submit testimonials, reviews, or feedback to CLICKIN, whether through our platform, email, social media, or any other communication channel, they do so voluntarily. By submitting such content, you grant us permission to display, publish, and promote your submission for marketing, promotional, or editorial purposes on our website, social media platforms, and other communication channels unless you expressly restrict such use in writing.

19.2 Information Displayed

Testimonials and publicly submitted content may include the following information:

• Name (full or partial, depending on your submission).
• Profile photo or initials.
• City and State (location).
• Review text and rating.
• Platform badge (e.g., Google, Facebook).
• Date of submission.

We display this information strictly in accordance with what you have submitted or authorized. No testimonial is fabricated, manipulated, or edited in a manner that misrepresents your genuine experience.

19.3 Consent and Rights

By submitting public content, you:

• Confirm that your content is accurate and genuinely reflects your personal experience.
• Grant CLICKIN a non-exclusive, royalty-free, worldwide license to use, reproduce, display, and publish the submitted content.
• Understand that your testimonial or public content may remain publicly accessible unless you request its removal.

If you later wish to withdraw, update, or modify your testimonial, you may contact us. We will process your request within a reasonable timeframe, generally within 7 working days.

19.4 Moderation and Approval

To maintain quality, accuracy, and legal compliance, all testimonials and public submissions are subject to moderation. We reserve the right to reject, edit for formatting only, or remove content that contains:

• Offensive, abusive, or defamatory language.
• Inappropriate personal or sensitive information.
• False, misleading, fraudulent, or promotional content.
• Copyrighted material submitted without proper authorization.

These moderation practices help us maintain a safe, respectful, and trustworthy platform while complying with Indian internet content regulations and ethical standards.

19.5 Legal Considerations (India Specific)

User-generated content, including testimonials, may be governed by various Indian laws, including:

• Information Technology Act, 2000 – relating to offensive or harmful digital content.
• Consumer Protection Act, 2019 – ensuring truthful representation of customer experiences.
• Indian Penal Code (IPC) Sections 499 & 500 – relating to defamation and protection against false or harmful statements.

CLICKIN is committed to complying with these legal requirements while ensuring testimonials are displayed responsibly, accurately, and lawfully.

19.6 Platform-Specific Publishing

Testimonials may also be published on third-party platforms such as Google Reviews, Facebook, or other review platforms where applicable. When you submit reviews on those platforms, your information will also be subject to their respective privacy policies, terms of service, and community guidelines.

19.7 Withdrawal or Update Requests

You may request the removal, modification, or anonymization of your testimonial at any time by contacting us at help@clickin.in. To protect against unauthorized requests, we may ask you to verify your identity before processing your request.

Your feedback and experiences help us continuously improve our services. We sincerely appreciate your trust and remain committed to presenting your voice honestly, respectfully, and responsibly across all our platforms.

Section 20: Children’s Privacy and Age Restrictions

CLICKIN is committed to protecting the privacy and safety of children online. This section outlines our policy regarding users under the age of 18, in accordance with Indian laws and global best practices. We take special care when it comes to minors and do not knowingly collect or process data from children without appropriate consent.

20.1 Minimum Age Requirement

To use our services, you must be at least 18 years old or the age of majority as per your local laws in India. By accessing or using CLICKIN, you confirm that you meet this age requirement.

Under the Indian Contract Act, 1872, a person below the age of 18 cannot legally enter into binding agreements, including our Terms of Use. Therefore, users under this age are strictly prohibited from creating accounts or using services that require data submission.

20.2 No Knowing Collection of Children’s Data

We do not knowingly collect personal information from children under 18. If we become aware that we have unintentionally collected data from a minor without verifiable parental or guardian consent, we will take prompt steps to delete such information from our systems.

20.3 Parental and Guardian Supervision

If you are a parent or legal guardian and believe your child has provided personal data to us without your consent, please contact us immediately at help@clickin.in. We will take appropriate actions, including verifying your identity and removing the data where necessary.

20.4 Educational or Family Use Cases

In cases where a child may access our services under parental supervision for educational or learning purposes, the account and interaction must be managed by the adult. The adult shall be fully responsible for the data shared and content accessed.

20.5 Compliance with Indian Laws

This policy is made in accordance with relevant Indian laws, including:

• Information Technology Act, 2000 and its rules on digital data protection.
• Indian Contract Act, 1872 for age of consent to agreements.
• Digital Personal Data Protection (DPDP) Act, 2023, which includes special provisions regarding children's data.

Under the DPDP Act, 2023, entities are restricted from tracking, profiling, or targeting children with advertisements or services without the express consent of parents or legal guardians.

20.6 Awareness and Digital Literacy

We encourage parents and guardians to educate children about safe online behavior, privacy awareness, and the importance of not sharing personal details on any digital platform. Children should be taught to never share their:

• Full name.
• Address or location.
• Mobile number or email address.
• School or family details.
• Photographs without supervision.

20.7 What to Do If You Are a Minor

If you are under 18 years of age, please do not register on CLICKIN or provide any personal information. You may only use the site under the guidance and full control of a parent or guardian, and only if they take full responsibility for your use.

20.8 Policy Updates for Children’s Privacy

We may update this section periodically to remain aligned with legal changes and best practices regarding children’s data protection. Any such updates will be published on this page and will take effect immediately upon posting.

At CLICKIN, the safety and dignity of children in the digital space are non-negotiable. We urge all users to help maintain a safe environment for all, especially vulnerable individuals.

Section 21: Policy Updates and Change Notifications

CLICKIN may revise or update this Privacy Policy from time to time to reflect changes in legal requirements, technological advancements, business practices, or user feedback. We believe in maintaining transparency and ensuring that users are always aware of how their data is handled. This section outlines how we communicate such changes and what they mean for you.

21.1 Periodic Policy Revisions

We reserve the right to make changes to this Privacy Policy at any time. Updates may be minor (clarifications, formatting changes) or significant (changes in the purpose of data use, new third-party sharing practices, or new legal obligations under Indian law such as the DPDP Act, 2023).

Examples of events that may lead to updates include:

• New features or services launched on CLICKIN.
• Changes to Indian data protection laws or legal rulings.
• Partnerships with third-party vendors or analytics providers.
• Internal audits or user feedback requiring clarification.

21.2 User Notification of Changes

Whenever a material change is made to this policy, we will notify users through one or more of the following methods:

• A prominent notice on our homepage or dashboard.
• An in-app notification or system alert on login.
• An email sent to your registered email address, if available.
• An update notification on our Privacy Policy page with the "Last Updated" date changed.

We recommend you review this policy periodically to stay informed about how your information is being protected and used.

21.3 Continued Use as Consent

By continuing to use CLICKIN after updates to the Privacy Policy are posted, you are agreeing to the revised terms. If you do not agree to the updated policy, you should stop using the services immediately and may request account closure and data deletion as per the applicable provisions of this Privacy Policy.

21.4 Version History and Archiving

To maintain transparency, we keep an internal archive of previous versions of our Privacy Policy. If you would like to view an older version or understand the nature of a past change, you may contact us at help@clickin.in.

21.5 Legal Compliance with Indian Regulations

This section has been created in accordance with Indian laws such as:

• Digital Personal Data Protection (DPDP) Act, 2023.
• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
• Indian Contract Act, 1872 (for consent validity).

Any changes to the policy that affect your rights will be fully documented and communicated. You will always have the right to withdraw your consent or request clarification before continuing use.

21.6 Contact for Change-Related Questions

If you have any questions regarding changes to this Privacy Policy or wish to understand the impact of a specific update, you can reach our Grievance Officer or write to us at help@clickin.in.

Your continued trust in CLICKIN is important to us. We are committed to updating you clearly and respectfully while ensuring your rights remain protected at all times.

Section 22: Your Responsibilities and Best Practices

At CLICKIN, we are committed to protecting your privacy and data, but safeguarding your personal information is a shared responsibility. This section outlines your responsibilities as a user and suggests best practices you should follow to ensure your data remains secure and your rights protected under Indian law.

22.1 Providing Accurate Information

When you sign up or interact with our services, you are expected to provide accurate, complete, and up-to-date information. This ensures that:

• You receive proper support and communication.
• We comply with Indian regulations such as Know Your Customer (KYC) norms where applicable.
• Your data can be managed and secured appropriately.

False or misleading information may result in account suspension or legal consequences under the Indian Penal Code (IPC) for misrepresentation or fraud.

22.2 Safeguarding Your Login Credentials

You are responsible for maintaining the confidentiality of your account credentials (username, password, OTPs, etc.). We strongly recommend:

• Using a strong password with a mix of letters, numbers, and symbols.
• Never sharing your password or OTP with anyone, including CLICKIN staff.
• Changing your password regularly.
• Logging out of your account after each session, especially on shared or public devices.

If you suspect any unauthorized access or breach, notify us immediately at help@clickin.in.

22.3 Respecting the Rights of Others

As a responsible user, you must not misuse personal data of other users or engage in activities that violate their privacy or rights. This includes:

• Sending spam, phishing links, or fraudulent messages.
• Accessing, storing, or misusing another user's personal information.
• Harassing or impersonating individuals on our platform.

Violations may lead to strict actions including suspension, legal notice, or FIR under relevant Indian laws such as the Information Technology Act, 2000 and the Indian Penal Code (IPC).

22.4 Following Community and Legal Norms

You must use CLICKIN in accordance with applicable Indian laws, including:

• Digital Personal Data Protection (DPDP) Act, 2023.
• Information Technology Act, 2000 and its amendments.
• Consumer Protection Act, 2019.
• Indian Penal Code (IPC), 1860.

Using CLICKIN for any illegal activity—such as cyberstalking, blackmailing, data theft, or identity fraud—will result in legal consequences and cooperation with law enforcement authorities.

22.5 Device and Network Security

You are advised to use secure devices and networks when accessing CLICKIN. Best practices include:

• Installing antivirus and firewall software.
• Avoiding the use of public Wi-Fi for financial or sensitive activities.
• Keeping your device operating system and browser up to date.

We are not liable for losses or data breaches arising from your use of insecure devices or networks.

22.6 Reporting Vulnerabilities or Misuse

If you identify any misuse of the platform or a potential security issue, you are encouraged to report it responsibly at help@clickin.in. Prompt reporting helps us improve the safety and reliability of the platform for all users.

22.7 Consent and Acknowledgement

By using CLICKIN, you acknowledge that you have read, understood, and agreed to:

• This Privacy Policy and your role in it.
• Acting in accordance with legal and ethical responsibilities.
• Ensuring your own security and that of others on the platform.

Your responsible behavior directly contributes to a secure and trustworthy environment on CLICKIN.

Section 23: Data Localization and Storage in India

At CLICKIN, we understand the importance of protecting personal data within the jurisdiction of Indian law. This section explains how we handle the storage, processing, and localization of user data in accordance with the laws and expectations of India, including the Digital Personal Data Protection (DPDP) Act, 2023 and guidelines from the Ministry of Electronics and Information Technology (MeitY).

23.1 What is Data Localization?

Data localization refers to the requirement that certain categories of data—especially personal and sensitive personal data—be stored and processed within India's geographical boundaries. The Indian government promotes this approach to ensure:

• Better control over data security and privacy.
• Facilitation of legal enforcement and investigation.
• Protection against foreign surveillance or misuse.

23.2 Our Commitment to Indian Data Residency

We ensure that the primary storage of all user data collected through CLICKIN is located within secure, ISO-certified data centers situated in India. These facilities follow industry best practices for:

• Data encryption at rest and in transit.
• 24/7 surveillance and physical access controls.
• Disaster recovery and backup protocols.

By keeping your data within India, we align with national digital sovereignty objectives and ensure your information remains protected under applicable Indian regulatory frameworks.

23.3 Cross-Border Data Transfer (If Applicable)

In very limited circumstances, where a third-party service (such as email delivery or analytics) is involved, some non-sensitive data may be processed by providers with servers outside India. However:

• Such transfers are carried out only in compliance with Section 16 of the DPDP Act, 2023.
• We verify that the recipient country maintains adequate data protection standards.
• Strong Data Processing Agreements (DPAs) are executed with such third parties to safeguard your rights.
• Transfers occur only when absolutely necessary and, where applicable, with appropriate user knowledge or consent.

23.4 Duration of Storage

We retain personal data only for as long as required to fulfill the purposes described in this Privacy Policy or as mandated under applicable Indian laws, including tax, regulatory, or audit obligations. After the applicable retention period, data is securely deleted using certified data wiping methods.

23.5 Data Protection Safeguards in Storage

To protect the integrity, confidentiality, and availability of your stored data, we implement the following safeguards:

• End-to-end AES-256 encryption for data storage.
• Role-based access control (RBAC) to restrict access to authorized personnel only.
• Real-time security monitoring and incident response mechanisms.
• Regular vulnerability assessments and security audits.

23.6 Legal Compliance and Government Access

We cooperate with law enforcement agencies and government authorities only when legally required. Access to user data is provided strictly against valid written requests, judicial orders, or other legally authorized procedures in accordance with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

We never sell or voluntarily disclose your personal data to foreign entities or commercial organizations without your explicit consent.

23.7 Your Rights Related to Data Storage

As a user in India, you have the following rights under the Digital Personal Data Protection (DPDP) Act, 2023:

• Know where your personal data is stored.
• Request correction or deletion of stored personal data.
• Withdraw consent for future storage of non-essential personal data.
• Submit complaints to our Grievance Officer or the Data Protection Board if your rights are violated.

23.8 Future Readiness and Updates

We continuously monitor regulatory developments issued by MeitY, the Reserve Bank of India (RBI), and other competent authorities. If new localization or data storage requirements are introduced, we will promptly update our infrastructure, internal practices, and this Privacy Policy accordingly.

CLICKIN remains committed to supporting India's digital sovereignty while providing world-class standards of privacy, security, and responsible data management for all users.

Section 24: Artificial Intelligence (AI) and Automated Decision-Making

At CLICKIN, we may use Artificial Intelligence (AI) technologies and automated systems to enhance your experience, provide faster services, and improve our platform. This section explains how such systems work, what decisions they may take, and your rights regarding these automated processes—especially in accordance with Indian digital rights and emerging ethical standards.

24.1 Use of AI at CLICKIN

We use AI in the following areas:

• Content Recommendations: To show you relevant services, offers, or content based on your preferences.
• Fraud Detection: To identify suspicious or potentially harmful activities automatically.
• Chat Support: Our chatbot may use AI to respond quickly to basic queries and route complex issues to human agents.
• Personalization: We tailor your dashboard, search results, or notifications using machine learning models trained on anonymized data.

24.2 No Solely Automated Legal or Financial Decisions

We do not use AI to make any legally binding decisions or financial judgments (such as approving refunds, banning accounts, or terminating services) without human involvement. Every sensitive or impactful decision is reviewed or authorized by a real person.

24.3 Transparency and Fairness in Algorithms

We strive to ensure our AI systems are:

• Fair: Designed to avoid bias based on religion, caste, gender, region, or language.
• Transparent: We provide clear information about when and how AI is used in our services.
• Accountable: Human reviewers oversee and validate important AI decisions before final implementation.

24.4 Your Rights Regarding Automated Processing

Under Indian laws and recognized best practices, you have the following rights whenever AI-based or automated tools are used:

• Right to Explanation: You may request a human explanation of how an AI-based recommendation or outcome was generated.
• Right to Challenge: If you disagree with an automated outcome, such as an incorrect warning or recommendation, you may request a human review.
• Right to Opt-Out (Where Applicable): For non-essential AI-powered features, you may choose not to participate in automated processing where such an option is available.

24.5 Responsible AI Use and Indian Digital Ethics

We align our AI practices with globally accepted ethical AI principles and evolving Indian government initiatives, including the National Strategy for AI (NITI Aayog) and the Digital India Initiative. Our objective is to:

• Maintain human dignity and fairness.
• Ensure explainability and accountability in algorithm design.
• Protect the privacy of all users, particularly minors, marginalized communities, and rural populations.

24.6 No Profiling Without Consent

We do not use AI to profile you for advertising or targeted marketing without your explicit consent. Any profiling carried out for personalization or marketing purposes is strictly opt-in, and you may withdraw your consent at any time.

24.7 Human Oversight Always Exists

Even where AI is used to generate recommendations or categorize content, human administrators or moderators are always available to intervene, override automated outcomes, or provide clarification whenever necessary. Your concerns will never be handled exclusively by automated systems.

CLICKIN believes in developing trustworthy and responsible AI systems that enhance user experience while respecting privacy, fairness, transparency, and individual rights. We remain committed to evolving alongside Indian legal frameworks and ethical standards for artificial intelligence.

Section 25: Minors and Child Privacy Protection in India

At CLICKIN, we are deeply committed to protecting the privacy and personal data of minors (children under 18 years of age) in strict compliance with Indian laws and international child safety norms. This section outlines how we handle the data of minors, obtain verifiable consent, and maintain transparency with parents and guardians.

25.1 Definition of a Minor (Child)

As per the Digital Personal Data Protection Act, 2023 (DPDP Act) and Section 11 of the Indian Majority Act, a minor is defined as an individual below the age of 18 years. For the purposes of this Privacy Policy, all references to children or minors apply to users under this age limit.

25.2 No Direct Data Collection from Minors

We do not knowingly collect personal information directly from children under the age of 18 without verifiable consent from their parent or legal guardian. If you are a minor, you must obtain permission from your parent or legal guardian before accessing or using our services.

25.3 Parental or Guardian Consent

Before collecting any personal data from a user identified as a minor, we ensure that:

• Consent is obtained from the child's parent or legal guardian through verifiable methods such as email confirmation or OTP authentication.
• The parent or guardian is informed about what information will be collected, how it will be used, and their rights to review, correct, or delete such information.

25.4 Child-Centric Data Practices

We follow strict child-focused data protection practices, including:

• We do not profile or track minors for personalized advertisements.
• No behavioral advertising is conducted for children.
• We collect only the minimum amount of personal information necessary for basic platform functionality.
• We avoid deceptive user interface patterns or dark patterns that could manipulate children.

25.5 Rights of Parents and Guardians

If you are the parent or legal guardian of a minor who has interacted with our services, you have the right to:

• Review the child's personal information that we have collected.
• Request correction or deletion of the child's personal information at any time.
• Withdraw consent previously provided for processing the child's personal data.
• Contact our Grievance Officer regarding any concerns related to the child's online experience or privacy.

25.6 Educational Content and Age-Appropriate Design

Where services or content are accessible to minors, we make every reasonable effort to:

• Ensure the content is age-appropriate and safe.
• Avoid displaying mature, harmful, misleading, or inappropriate material.
• Design interfaces that are simple, understandable, and suitable for younger users.

25.7 Compliance with Indian and Global Child Safety Laws

Our child privacy practices comply with the following legal frameworks:

• Digital Personal Data Protection Act, 2023 (India).
• Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.
• Protection of Children from Sexual Offences (POCSO) Act, 2012 for child safety, reporting obligations, and content moderation.
• United Nations Convention on the Rights of the Child (UNCRC) to align with internationally recognized child privacy and safety standards.

25.8 Reporting Child Safety Concerns

If you believe that a child's personal information has been collected without appropriate parental consent, or if you have concerns regarding child safety on our platform, please report the matter immediately to our Grievance Officer at help@clickin.in. We investigate such concerns with the highest priority and take appropriate action under applicable Indian laws.

25.9 Special Precautions During Contests or Promotions

Where promotional activities or campaigns are intended for young audiences, we ensure that:

• Parental or guardian consent is obtained before participation.
• Prizes, rewards, or promotional offers are not manipulative, misleading, or exploitative.
• Terms and conditions are presented in clear, simple, and age-appropriate language.

CLICKIN prioritizes child safety in every interaction. Our systems, policies, and operational practices are designed to ensure that no minor is exposed to unnecessary data collection, privacy risks, or inappropriate content while using our platform.

Section 26: Consent Management and Opt-Out Rights

At CLICKIN, we believe that consent is not just a legal requirement but a fundamental right of every user. This section outlines how we obtain, manage, store, and respect your consent—including your rights to opt out of data processing at any time—in accordance with the Digital Personal Data Protection (DPDP) Act, 2023 and applicable Indian information technology laws.

26.1 What is Consent?

Consent is the clear and affirmative action taken by a user to allow us to collect, use, or process their personal data. As defined under the DPDP Act:

• Consent must be free, specific, informed, unconditional, and unambiguous.
• The user must be aware of the purpose for which the personal data is being collected.
• Consent must be revocable at any time.

26.2 When Do We Ask for Consent?

We request your consent before performing any of the following activities:

• Creating an account or profile on CLICKIN.
• Sending marketing emails, SMS, or WhatsApp messages.
• Collecting location information or device identifiers.
• Placing non-essential cookies on your browser.
• Sharing your personal data with third-party partners.

26.3 Consent Capture Mechanisms

We obtain and record consent through transparent and verifiable methods, including:

• Checkboxes or toggles (unchecked by default) for optional data processing.
• Cookie consent banners with "Accept" and "Manage Preferences" options.
• Email or SMS verification for sensitive processing activities.
• Pop-up prompts or privacy dashboards within your user account.

26.4 Consent Logging and Storage

We securely maintain records of all user consents, including:

• Date, time, and method through which consent was provided.
• Details of the specific processing activities consented to.
• Version of the Privacy Policy or Terms applicable at that time.
• User IP address and device information for authenticity verification.

These records help us maintain accountability and demonstrate compliance with applicable Indian privacy laws.

26.5 Right to Withdraw Consent (Opt-Out)

Under the DPDP Act and your digital privacy rights, you have the right to:

• Withdraw consent at any time without affecting the lawfulness of earlier processing.
• Opt out of specific services such as marketing communications, newsletters, or location-based personalization.
• Request deletion of personal data processed solely on the basis of your consent.

You may exercise these rights through:

• Your privacy settings dashboard within your account.
• Emailing our Grievance Officer at help@clickin.in.
• Clicking the "Unsubscribe" link available in our communications.

26.6 Granular Consent

We allow you to manage your consent preferences individually. For example:

• You may agree to receive email communications while opting out of SMS notifications.
• You may allow storage of browsing preferences while declining marketing profiling.

This ensures that you remain in full control of how your personal data is processed.

26.7 Consent for Minors

For users under the age of 18, we require verifiable consent from a parent or legal guardian before collecting or processing any personal data, as described in Section 25 of this Privacy Policy.

26.8 Validity and Review of Consent

We periodically review and refresh your consent preferences, particularly when:

• Our services or Privacy Policy change.
• Your account has remained inactive for an extended period.
• You request changes to your privacy preferences.

26.9 Third-Party Consent Sharing

Where your personal data is shared with third parties (as outlined in Section 8), we ensure that:

• Specific consent is obtained before such sharing takes place.
• Third parties comply with applicable data protection laws and do not reuse your data without additional authorization.
• You are informed about such sharing through this Privacy Policy or during the consent process.

26.10 Your Responsibilities as a User

We encourage every user to:

• Read all consent requests carefully before agreeing.
• Review and update privacy preferences regularly through account settings.
• Immediately report any suspected misuse of personal data or unauthorized processing.

At CLICKIN, we treat your consent as an ongoing expression of your choices—not merely a checkbox. We remain committed to ensuring that your consent is meaningful, transparent, revocable, and respected throughout every interaction with our platform.

Section 27: Payment Information and Financial Data Security

At CLICKIN, we take the protection of your payment and financial information extremely seriously. This section outlines how we collect, process, and secure any financial data shared with us, in compliance with the Information Technology Act, 2000, the Reserve Bank of India (RBI) guidelines, and other applicable Indian regulations governing digital payments and e-commerce security.

27.1 What Financial Information We Collect

We may collect the following types of financial information when you make a transaction on our platform:

• Name on the card or payment account.
• Billing address and contact number (for invoice generation).
• UPI ID (Unified Payments Interface).
• Transaction ID, payment amount, and transaction timestamp.
• Partial card details (we never store the complete card number or CVV).
• Bank name or payment wallet used (e.g., Paytm, PhonePe, Google Pay, Cashfree, Instamojo, Razorpay, etc.).

27.2 Secure Payment Gateways

CLICKIN does not store or directly process any card credentials or other highly sensitive financial information. All online payments are securely processed through RBI-authorized, PCI-DSS compliant payment gateways such as:

• Razorpay
• PayU
• Paytm Payment Gateway
• PhonePe Business
• Cashfree
• Google Pay / UPI

These payment providers utilize 128-bit or higher SSL encryption along with industry-standard security controls. During card or UPI processing, your sensitive financial information is never stored on our servers.

27.3 Compliance with RBI & IT Act Regulations

We strictly comply with applicable RBI requirements, including:

• No storage of complete debit or credit card details after successful transactions.
• Card tokenization by banks or payment gateways wherever applicable.
• Mandatory Two-Factor Authentication (2FA) for applicable payment transactions.

We also follow the security practices prescribed under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

27.4 Fraud Detection and Monitoring

To detect and prevent fraudulent or suspicious financial activity, we implement:

• Real-time transaction monitoring.
• IP address and device fingerprint analysis for unusual behavior.
• Automatic alerts for duplicate or high-risk transactions.
• Manual verification where suspicious patterns or disputes are identified.

27.5 Refunds and Chargebacks

If you request a refund or initiate a chargeback, we may temporarily retain the following information for reconciliation purposes:

• Your name and email address associated with the transaction.
• Date of transaction and payment method used.
• Reason for the refund or chargeback request.
• Bank reference number or UTR (Unique Transaction Reference).

This information is used solely for validation and dispute resolution and is securely deleted once the refund or investigation process has been completed.

27.6 Data Sharing with Financial Institutions

Where necessary, we may share limited payment-related information with:

• Your issuing bank for refunds or settlement purposes.
• Authorized payment processors (such as Cashfree, Razorpay, Instamojo, or Paytm).
• Law enforcement authorities where legally required for fraud investigations or regulatory compliance.

We never sell, rent, or disclose payment information to advertisers or marketing partners.

27.7 Data Retention of Financial Records

We retain only limited, non-sensitive financial records (such as invoices and transaction summaries) for up to 5 years in accordance with applicable Indian taxation and accounting regulations. Sensitive payment credentials—including complete card numbers, CVV values, and UPI authentication details—are never stored on our systems.

27.8 Your Responsibilities

To help keep your financial information secure, we recommend that you:

• Use secure internet connections and avoid public Wi-Fi while making payments.
• Never share OTPs, CVVs, passwords, or complete card details with anyone claiming to represent CLICKIN.
• Immediately report suspicious or unauthorized transactions to both your bank and our support team.

27.9 Need Help?

If you experience any payment-related issues or have concerns regarding billing or financial security, please contact our Grievance Officer at help@clickin.in or refer to our Terms of Use for refund procedures and support timelines.

Your financial safety is one of our highest priorities. We continuously implement industry best practices to ensure every transaction on CLICKIN remains secure, reliable, and trustworthy.

Important: We will never ask for your password, OTP, CVV, or complete card details through phone calls, emails, SMS, WhatsApp, or social media. Please stay alert and report any suspicious communication immediately.

Section 28: Artificial Intelligence and Automated Decision-Making

At CLICKIN, we aim to innovate responsibly by incorporating emerging technologies such as Artificial Intelligence (AI) and Machine Learning (ML) in a transparent, ethical, and user-friendly manner. This section explains how AI-driven systems are used on our platform and what this means for your personal data and privacy rights under applicable Indian laws.

28.1 Use of AI and Automation

We may use AI technologies for several legitimate purposes, including but not limited to:

• Providing personalized content recommendations based on your browsing behavior and preferences.
• Detecting spam, abuse, fraud, and suspicious activities through intelligent pattern recognition.
• Offering automated customer support using chatbots or virtual assistants.
• Analyzing large datasets to improve website performance, user experience, business operations, and service quality.

28.2 No Solely Automated Decisions with Legal Impact

We confirm that no decision producing legal or similarly significant effects on you will be made solely through automated processing. Wherever AI or automated systems assist in decision-making, appropriate human oversight is maintained to ensure fairness, transparency, and compliance with applicable Indian laws.

28.3 Your Rights Against Automated Processing

Under the Digital Personal Data Protection (DPDP) Act, 2023 and the evolving legal framework in India:

• You have the right to request human intervention regarding any significant decision influenced by automated processing.
• You may express your point of view or challenge an automated outcome that affects you.
• You may request a meaningful explanation regarding how an AI-assisted decision or recommendation was generated.

28.4 Transparency and Algorithmic Accountability

We are committed to ensuring that our AI systems operate responsibly and transparently. Where AI-generated content or recommendations are presented to you, we will make reasonable efforts to identify such content appropriately.

Our AI systems undergo regular testing and evaluation for:

• Fairness and non-discrimination.
• Bias detection and mitigation.
• Security and reliability.
• Compliance with applicable Indian laws, regulations, and ethical standards.

28.5 AI and Data Protection Compliance

All AI-related processing of personal data is carried out in accordance with applicable Indian privacy laws, including the Digital Personal Data Protection (DPDP) Act, 2023, the Information Technology Act, 2000, and recognized industry best practices.

Wherever reasonably possible, information used to improve AI systems is anonymized, aggregated, or de-identified to protect user privacy.

28.6 Opt-Out Options

If you do not wish to participate in certain AI-powered features or automated personalization services, you may opt out through your account settings or by contacting us at help@clickin.in.

Please note that opting out of certain AI-based features may reduce or limit some personalized functionalities available on CLICKIN.

We remain committed to using Artificial Intelligence responsibly while ensuring that technology always supports—not replaces—human judgment, transparency, privacy, and user trust.

Section 29: Biometric and Sensitive Personal Data Handling

At CLICKIN, we understand the importance of protecting your sensitive personal data, particularly biometric information and other information classified as Sensitive Personal Data or Information (SPDI) under applicable Indian laws. This section explains how we collect, process, store, and safeguard such information with the highest standards of privacy and security.

29.1 What is Sensitive Personal Data?

As defined under Rule 3 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, Sensitive Personal Data or Information (SPDI) includes:

• Passwords.
• Financial information (such as bank account or payment card details).
• Health conditions and medical records.
• Sexual orientation.
• Biometric information (including fingerprints, facial recognition, retina scans, etc.).
• Physical, physiological, and mental health conditions.
• Any information relating to the above that is provided for processing.

29.2 Collection of Biometric and SPDI

We do not collect biometric information or other sensitive personal data unless it is strictly necessary for a specific service and legally permitted under applicable Indian laws.

Whenever such information is collected, we ensure that:

• Explicit written or recorded consent is obtained before collection.
• Users are informed about the purpose, intended usage, and retention period.
• Collection remains lawful, necessary, proportionate, and limited to the stated purpose.

29.3 Storage and Protection Measures

Where biometric or sensitive personal information is collected, it is protected using industry-standard technical and organizational safeguards, including:

• Strong encryption during storage and transmission.
• Data anonymization or tokenization wherever technically feasible.
• Restricted access limited to authorized personnel only.
• Secure backup systems and protected storage infrastructure located in India or trusted jurisdictions permitted under applicable law.

29.4 Consent and Withdrawal

Before collecting any biometric or sensitive personal information:

• We obtain informed, specific, and prior consent using clear and understandable language.
• You may withdraw your consent at any time.
• Upon withdrawal, we will securely delete or anonymize the information within a reasonable period unless retention is required by applicable law.

29.5 Limited Disclosure

Sensitive personal information or biometric data will never be disclosed to any third party without your prior consent unless:

• Disclosure is required by law.
• Disclosure is necessary pursuant to judicial, regulatory, or law enforcement requests.
• Disclosure is required to fulfill the specific purpose for which you originally provided consent.

We never sell, rent, or commercially exploit biometric or sensitive personal information.

29.6 Compliance with Indian Legal Framework

Our practices are designed to comply with applicable Indian legal requirements, including:

• Information Technology Act, 2000 and associated rules.
• Digital Personal Data Protection (DPDP) Act, 2023.
• Guidelines and directions issued by MeitY or other competent Government authorities.

29.7 User Rights and Grievance Redressal

If you believe that your biometric or sensitive personal information has been collected, processed, disclosed, or handled improperly, you may contact our Grievance Officer by emailing help@clickin.in.

We investigate every complaint seriously and strive to resolve all genuine concerns promptly in accordance with applicable statutory timelines and Indian privacy laws.

Section 30: Amendments and Change Management Policy

At CLICKIN, we reserve the right to revise, modify, or update this Privacy Policy at any time to reflect changes in applicable laws, technological advancements, business operations, company practices, or user expectations. This section explains how such amendments are managed and how users are informed whenever significant changes occur.

30.1 Reasons for Amendments

We may amend this Privacy Policy under the following circumstances:

• To comply with updates to Indian laws, including the Digital Personal Data Protection (DPDP) Act, 2023, the Information Technology Act, 2000, and other applicable regulations.
• To reflect new services, products, or platform features involving the collection, processing, or storage of personal data.
• To address security vulnerabilities or risks identified through internal audits, legal reviews, cybersecurity assessments, or government advisories.
• To incorporate valuable feedback received from users, regulators, partners, or other stakeholders.

30.2 Notification of Changes

Whenever this Privacy Policy is updated, we will inform users through one or more of the following methods:

• Publishing the updated Privacy Policy with a revised "Last Updated" date at the top of this page.
• Displaying a prominent notice on our homepage or user dashboard for a reasonable period.
• Sending notifications through your registered email address or in-app messages, where applicable.
• Obtaining your explicit consent before implementing material changes whenever required under applicable Indian law.

Material changes may include introducing new categories of personal data collection, expanding third-party data sharing practices, or modifying your legal rights regarding personal data.

30.3 User Responsibility to Stay Updated

We encourage every user to review this Privacy Policy periodically to remain informed about our latest privacy practices. Continued use of CLICKIN after updates become effective will constitute your acceptance of the revised Privacy Policy unless otherwise stated.

30.4 Retroactive Application

Unless specifically required by applicable law, amendments to this Privacy Policy will not have retroactive effect. Updated provisions will apply only to personal data collected or processed after the revised version becomes effective. Where any competent legal or regulatory authority requires retrospective implementation, we will comply with such legal obligations.

30.5 Grievance Related to Policy Changes

If you have any questions, concerns, or grievances regarding amendments to this Privacy Policy, or if you believe that any update adversely affects your privacy rights, you may contact our Grievance Officer without delay.

We will acknowledge and respond to all genuine amendment-related concerns within the timelines prescribed under applicable Indian laws.

For any questions regarding Privacy Policy amendments, please contact us at: help@clickin.in

At CLICKIN, transparency remains one of our core values. We are committed to ensuring that every policy update is communicated clearly, implemented responsibly, and aligned with applicable Indian privacy and data protection laws.

Section 31: Your Acknowledgment and Acceptance of this Policy

By accessing or using CLICKIN, its applications, or any of its services (including browsing the website, creating an account, submitting inquiries, or making purchases), you confirm that you have read, understood, and expressly agreed to the terms outlined in this Privacy Policy.

31.1 Consent to Data Practices

When you interact with our platform, whether as a registered user or a visitor, you provide your free, informed, specific, and unequivocal consent for CLICKIN to collect, store, process, and use your personal data in accordance with this Privacy Policy and as permitted under applicable Indian laws, including:

• Information Technology Act, 2000.
• Digital Personal Data Protection (DPDP) Act, 2023.
• Indian Penal Code (IPC), 1860 (where applicable to data-related offences).
• Applicable notifications, circulars, and guidelines issued by the Ministry of Electronics and Information Technology (MeitY).

31.2 Continued Usage Implies Agreement

If you continue using our services after updates to this Privacy Policy become effective, your continued use shall constitute your acknowledgment and acceptance of the revised terms. If you disagree with any provision of this Privacy Policy, you should immediately discontinue using our services and may request withdrawal of consent or deletion of your personal data in accordance with applicable law.

31.3 Legal Binding Nature

This Privacy Policy constitutes a legally binding agreement between you (the user) and Inofixa Technologies, the owner and operator of CLICKIN. By using our services, you agree to be legally bound by this Privacy Policy to the same extent as if you had executed a written agreement under the provisions of the Indian Contract Act, 1872.

31.4 User Declarations

By accessing or using CLICKIN, you declare and confirm that:

• You are legally competent to enter into a binding contract under the laws of India (or you are using the platform under the authorization of your parent or legal guardian where permitted).
• You have voluntarily provided accurate, complete, and truthful information wherever required.
• You understand your rights under applicable Indian privacy and data protection laws and are using our services voluntarily and with informed consent.

31.5 Opt-Out and Withdrawal

If at any time you wish to withdraw your consent or no longer agree with this Privacy Policy, you may:

• Deactivate your account through the platform (where available).
• Contact our Grievance Officer by emailing help@clickin.in to request deletion of your personal data.

Please note that withdrawal of consent will not affect the lawfulness of any processing activities carried out before such withdrawal, where those activities were performed in accordance with applicable law.

Your continued trust is important to us. CLICKIN remains committed to handling your personal information responsibly, lawfully, and transparently while respecting your rights under applicable Indian privacy laws.

Section 32: Contact Information and Grievance Redressal Mechanism

At CLICKIN, we are committed to protecting your privacy and resolving all data protection concerns promptly, fairly, and transparently. In accordance with the Information Technology Act, 2000, the Digital Personal Data Protection (DPDP) Act, 2023, and other applicable Indian laws, we have appointed a dedicated Grievance Officer to address privacy-related concerns and user complaints.

32.1 Grievance Officer Details

If you have any questions, concerns, feedback, or complaints regarding this Privacy Policy or the processing of your personal data, please contact:

Name: Mustakim Khan
Designation: Grievance Officer – Inofixa Technologies
Email: help@clickin.in
Mobile: +91 9619701322
Office Address: CLICKIN
3/4 Old Mumbra Panvel Road, Thane, Mumbai, Maharashtra, India – 421204
Working Hours: Monday to Saturday, 10:00 AM to 6:00 PM (IST)

32.2 How to File a Grievance

You may submit a grievance relating to your personal data or privacy rights by emailing our Grievance Officer. To help us resolve your concern efficiently, please include:

• Your full name and contact number.
• Your registered email address on CLICKIN (if applicable).
• A detailed description of your concern, including relevant screenshots or supporting documents where available.
• The specific section of this Privacy Policy (if applicable) to which your concern relates.

32.3 Resolution Timeline

In accordance with Rule 5(9) of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and the DPDP Act, 2023, we aim to:

• Acknowledge your grievance within 48 hours.
• Resolve genuine grievances within 15 business days from the date of receipt.

32.4 Escalation

If you are not satisfied with our response or resolution, you may escalate your grievance to the appropriate authority, including the Data Protection Board of India or any other competent authority available under the Information Technology Act, 2000 or the Digital Personal Data Protection (DPDP) Act, 2023.

32.5 Jurisdiction and Language

This Privacy Policy shall be governed by the laws of India. All communications, notices, grievance proceedings, and legal correspondence relating to this Privacy Policy will ordinarily be conducted in the English language unless otherwise required by applicable law.

32.6 Final Note

We are committed to protecting your privacy rights while maintaining complete transparency regarding how your personal information is collected, processed, stored, shared, and protected. If you have any questions or concerns regarding this Privacy Policy or our privacy practices, we encourage you to contact us without hesitation.

Your trust is extremely important to us, and CLICKIN remains committed to maintaining the highest standards of privacy, accountability, and legal compliance.

Section 33: Definitions and Interpretations

This section provides definitions of important terms used throughout this Privacy Policy to ensure clarity, transparency, and a common understanding between CLICKIN and its users. These definitions are based on applicable Indian laws, including the Information Technology Act, 2000 and the Digital Personal Data Protection (DPDP) Act, 2023.

33.1 "Personal Data"

"Personal Data" means any information relating to an identifiable individual or any information by which an individual can be identified, either directly or indirectly. This includes, but is not limited to, your name, contact information, identification numbers, online identifiers, location information, and any other information linked to your identity.

33.2 "Sensitive Personal Data"

"Sensitive Personal Data" includes information such as passwords, financial information (including bank account or payment card details), health information, biometric information, sexual orientation, Aadhaar-related information, and any other category of information recognized as sensitive under applicable Indian laws. Such information receives enhanced protection under this Privacy Policy.

33.3 "Processing"

"Processing" refers to any operation performed on personal data, whether by automated or manual means. This includes collection, recording, organization, storage, adaptation, alteration, retrieval, consultation, use, disclosure, sharing, dissemination, restriction, deletion, destruction, or any other form of handling of personal data.

33.4 "Data Principal"

"Data Principal" refers to the individual to whom the personal data relates. Under the Digital Personal Data Protection (DPDP) Act, 2023, every user of CLICKIN whose personal information is processed is considered the Data Principal.

33.5 "Data Fiduciary"

"Data Fiduciary" refers to Inofixa Technologies, the owner and operator of CLICKIN, which determines the purpose and means of processing personal data and is responsible for ensuring that such processing complies with applicable Indian laws.

33.6 "Third Party"

"Third Party" means any individual, organization, company, government authority, contractor, service provider, advertiser, payment gateway, analytics provider, or other legal entity other than you (the user) and CLICKIN that may receive or process your personal information for authorized purposes.

33.7 "Consent"

"Consent" means a freely given, specific, informed, unconditional, and unambiguous indication of the Data Principal's agreement to the processing of personal data. Consent may be withdrawn at any time in accordance with applicable law.

33.8 "Anonymization"

"Anonymization" refers to the irreversible process of transforming personal information so that it can no longer identify an individual, either directly or indirectly.

33.9 "Pseudonymization"

"Pseudonymization" means processing personal data in such a manner that it cannot be attributed to a specific individual without the use of additional information, which is stored separately and protected using appropriate security measures.

33.10 "Applicable Laws"

"Applicable Laws" means all laws, statutes, regulations, notifications, circulars, rules, governmental orders, judicial decisions, and regulatory guidelines applicable within India, including but not limited to the Information Technology Act, 2000, the Digital Personal Data Protection (DPDP) Act, 2023, together with all amendments issued from time to time.

33.11 Interpretation Clause

Unless the context otherwise requires, words expressed in the singular include the plural and vice versa. References to one gender include all genders. Section headings are provided solely for convenience and shall not affect the interpretation or legal meaning of any provision contained in this Privacy Policy.

33.12 Updates to This Section

We may revise this section periodically to reflect changes in legal terminology resulting from new legislation, judicial decisions, regulatory guidance, or updates to applicable Indian privacy laws. Users are encouraged to review this section regularly to remain informed of the latest definitions and interpretations.

Section 34: Automated Decision Making and Profiling

At CLICKIN, we believe in maintaining complete transparency regarding how your personal data is processed. This section explains our approach to automated decision-making, profiling, and your associated rights under applicable Indian laws, including the Digital Personal Data Protection (DPDP) Act, 2023, while also following internationally recognized privacy principles.

34.1 What is Automated Decision Making?

Automated decision making refers to decisions or recommendations generated entirely or primarily through automated systems, algorithms, or computer-based technologies without direct human intervention. Such processes may include automated recommendations, fraud detection, service suggestions, content personalization, or risk assessment based on user activity and available information.

34.2 What is Profiling?

Profiling refers to any form of automated processing of personal data used to evaluate, analyze, or predict aspects relating to an individual's preferences, interests, browsing behavior, purchasing patterns, location, or usage habits. At CLICKIN, profiling may be used solely to improve your experience by displaying relevant services, recommendations, or promotional content.

34.3 Use Cases on CLICKIN

Automated systems may be used for purposes including:

• Displaying relevant services or categories based on your browsing history or previous interactions.
• Personalizing offers, recommendations, or discounts according to your interests, activity, or geographical region.
• Detecting suspicious activities, fraud, spam, abuse, or unauthorized access attempts to enhance platform security.
• Improving website performance, user experience, and operational efficiency through analytics-driven insights.

34.4 Your Rights Related to Automated Decisions

Subject to applicable Indian laws and recognized privacy principles, you have the right to:

• Know when automated processing significantly influences a decision affecting you.
• Request human intervention wherever a decision has been made solely through automated means.
• Object to profiling or automated processing where it may significantly affect your rights or legitimate interests.
• Seek clarification regarding the logic involved in automated recommendations or profiling, wherever reasonably possible.

34.5 Limitations

At present, CLICKIN does not rely on automated decision-making systems that produce legal or similarly significant effects on users without meaningful human oversight. Automated tools are used primarily to improve user experience, enhance security, prevent fraud, and personalize services. Such systems are regularly monitored to minimize bias, discrimination, or unintended adverse outcomes.

34.6 Transparency and Fairness

We are committed to ensuring that automated processing remains fair, transparent, explainable, and accountable. Our systems undergo regular reviews, testing, and audits to evaluate their accuracy, reliability, effectiveness, and compliance with applicable legal, ethical, and technical standards.

34.7 How to Opt Out or Raise a Concern

If you believe that an automated process or profiling activity has unfairly affected you, or if you wish to opt out of non-essential profiling or personalization features, you may contact our Grievance Officer at help@clickin.in.

We will review your request in accordance with applicable Indian laws and respond within the prescribed timelines wherever legally required.

CLICKIN remains committed to using automation responsibly while ensuring that technology always supports transparency, fairness, accountability, and the protection of your fundamental privacy rights.

Section 35: Children’s Data Protection

At CLICKIN, we are committed to safeguarding the privacy and personal data of children. We strictly comply with the provisions of the Digital Personal Data Protection (DPDP) Act, 2023 and follow internationally recognized privacy practices when handling information relating to minors. Protecting children's privacy is one of our highest priorities.

35.1 Age Limit for Use

Our services are primarily intended for individuals who are 18 years of age or older. Children below the age of 18 are not permitted to create an account, access certain services, or submit personal information without the verified consent of a parent or legal guardian.

35.2 Parental Consent

If we become aware that personal information has been collected from a child under the age of 18 without valid parental or guardian consent, we will promptly take reasonable steps to delete such information from our records.

Parents or legal guardians who believe that their child has submitted personal information without appropriate consent may contact us immediately at help@clickin.in so that appropriate action can be taken.

35.3 Types of Data Not Collected from Minors

We do not knowingly collect the following categories of personal information from children:

• Identity documents such as Aadhaar, school identification cards, or similar government-issued identification.
• Personal contact information including private phone numbers or email addresses without parental authorization.
• Browsing behavior, precise location information, or behavioral tracking data for advertising purposes.
• Payment details, banking information, or other financial information.

35.4 Educational Content and Children's Safe Areas

If CLICKIN provides educational or child-friendly content in the future, such services will be designed in accordance with applicable Indian legal requirements and child safety standards. These areas will include:

• No targeted advertising or behavioral profiling of children.
• Appropriate parental supervision and verification mechanisms wherever required.
• Simple, age-appropriate language, navigation, and user interfaces.

35.5 Compliance with Indian Law

We comply with all applicable provisions relating to children's personal data under the Digital Personal Data Protection (DPDP) Act, 2023. We implement reasonable technical, organizational, and administrative safeguards to prevent unauthorized access, misuse, disclosure, alteration, or loss of any information relating to minors.

35.6 International Compliance (COPPA)

Although CLICKIN primarily operates within India, we also recognize internationally accepted child privacy principles, including the Children's Online Privacy Protection Act (COPPA) of the United States. Accordingly, we do not knowingly process a child's personal information without verifiable parental involvement wherever such standards may apply.

35.7 Reporting and Support

If you become aware of a child using CLICKIN in violation of this Privacy Policy, or if you wish to review, correct, or request deletion of information relating to a minor, please contact our Grievance Officer by emailing help@clickin.in with the subject line "Minor Data Concern".

We treat every child privacy concern with the highest level of priority and will investigate all genuine reports promptly while taking appropriate action in accordance with applicable Indian laws and our internal child protection procedures.

Section 36: Advertising, Analytics, and Third-Party Marketing

At CLICKIN, we use advertising, analytics, and marketing technologies to improve user experience, understand website performance, deliver relevant content, and enhance our services. This section explains how third-party advertising and analytics providers may process certain information, what data may be shared, and the choices available to you under applicable Indian privacy laws.

36.1 Use of Advertising Networks

We may display advertisements through trusted third-party advertising networks, including but not limited to:

• Google Ads.
• Meta (Facebook) Audience Network.
• Other reputable Indian or international advertising technology partners.

These platforms may use cookies, pixels, tags, scripts, or similar technologies to understand:

• Your interaction with advertisements.
• The pages you visit on CLICKIN.
• Your device type, browser, operating system, and IP address.

This information helps improve advertisement relevance, measure campaign effectiveness, and optimize the user experience.

36.2 Data Shared with Advertisers

Where permitted by law, we may share limited non-personally identifiable or aggregated information with advertising partners for campaign optimization and analytics purposes. Such information may include:

• General demographic information (such as approximate age group or geographic region).
• Browsing behavior and usage patterns on CLICKIN.
• Device type, browser information, and session statistics.

We do not share your name, email address, mobile number, payment information, or other directly identifiable personal information with advertisers unless you have provided your explicit consent or disclosure is otherwise permitted by applicable law.

36.3 Third-Party Analytics Tools

To understand website performance and continuously improve our services, we may use trusted analytics platforms including:

• Google Analytics for website traffic analysis and performance measurement.
• Meta Pixel (Facebook Pixel) for conversion tracking and advertising performance.
• WebEngage, CleverTap, or similar customer engagement and analytics platforms where applicable.

These services may use cookies or anonymous identifiers in accordance with their own privacy policies.

36.4 Affiliate and Referral Tracking

Where affiliate programs or referral campaigns are offered, we may use referral links, campaign identifiers, or tracking codes to identify referral sources, calculate commissions, measure campaign effectiveness, and improve our marketing initiatives.

No sensitive personal information is disclosed to affiliate partners without your prior consent.

36.5 Opting Out of Personalized Advertising

You may manage or disable personalized advertising through:

• Your Google Ads personalization settings.
• Your Meta (Facebook) advertising preferences.
• Your browser cookie preferences.
• Industry-recognized advertising opt-out mechanisms where available.

Even after opting out, advertisements may still appear; however, they may be less relevant because they will no longer be personalized using your browsing behavior.

36.6 Compliance with the DPDP Act, 2023

Our advertising and analytics practices are designed to comply with the Digital Personal Data Protection (DPDP) Act, 2023. Accordingly:

• Personal data is processed only on lawful grounds, including valid consent where required.
• You may withdraw consent for non-essential advertising or analytics at any time.
• We remain transparent regarding the purposes for which personal information is processed.

36.7 International Advertising Standards

Where applicable, we also follow internationally recognized advertising and privacy standards, including guidance issued by organizations such as the Interactive Advertising Bureau (IAB) and the Advertising Standards Council of India (ASCI). We do not knowingly engage in misleading, deceptive, discriminatory, or harmful advertising practices.

36.8 Third-Party Privacy Policies

Although we carefully select reputable third-party providers, CLICKIN is not responsible for the independent privacy practices of external advertising, analytics, or marketing platforms. We encourage users to review the privacy policies of any third-party service before interacting with them.

36.9 Feedback and Complaints

If you believe that any advertising, analytics, or marketing practice associated with CLICKIN violates your privacy rights or applicable law, please contact our Grievance Officer at help@clickin.in.

We investigate all genuine complaints promptly and remain committed to maintaining responsible, transparent, and privacy-conscious advertising and analytics practices.

Section 37: User Rights to Access, Correct, and Port Their Data

At CLICKIN, we believe every user should have meaningful control over their personal information. In accordance with the Digital Personal Data Protection (DPDP) Act, 2023 and internationally recognized privacy principles, this section explains your rights to access, correct, update, and, where applicable, obtain a portable copy of your personal data.

37.1 Right to Access Your Personal Data

As a registered user of CLICKIN, you have the right to request access to the personal information we hold about you. Subject to applicable legal requirements, this may include:

• Your basic profile information, including your name, email address, mobile number, and other registration details.
• Your account activity, login history, and service usage records.
• Your communication history with our customer support or Grievance Officer.
• Records of your consent relating to marketing communications or personal data processing.

You may submit your request by emailing help@clickin.in. We aim to respond within 15 working days, subject to verification and applicable legal requirements.

37.2 Right to Correction and Update

You have the right to request correction, completion, or updating of inaccurate, incomplete, or outdated personal information maintained by CLICKIN. This includes, where applicable:

• Your name or business information.
• Email address, mobile number, or postal address.
• Profile details and account information.
• Incorrect transaction or service records.

Certain information may be updated directly through your account dashboard. Where self-service updates are unavailable, you may contact us with supporting documentation to verify the requested correction.

37.3 Right to Data Portability

Where permitted by applicable law and technically feasible, you may request a machine-readable copy of your personal information for transfer to another service provider. We may provide such information in commonly accepted formats such as:

• CSV.
• JSON.
• XML.

Portable data may include profile information, account registration details, communication preferences, and service history, subject to applicable legal and technical limitations.

37.4 Identity Verification

To protect your privacy and prevent unauthorized disclosure of personal information, we may require reasonable identity verification before processing requests relating to access, correction, or portability. Verification methods may include:

• One-Time Password (OTP) verification using your registered email address or mobile number.
• Submission of a government-issued identity document where legally necessary.
• Verification against information already available in our records.

37.5 Right to Know How Your Data is Processed

You may request information regarding:

• The purposes for which your personal data is collected and processed.
• The categories of personal information maintained by us.
• Categories of third parties with whom your information has been shared.
• Whether any automated processing or profiling has been applied, where applicable.

37.6 Conditions and Limitations

Certain requests may be limited or declined where required by applicable law, including situations involving:

• Legal obligations requiring continued retention of information.
• Pending investigations, litigation, or regulatory proceedings.
• Protection of the rights, privacy, or security of other individuals.

Where a request cannot be fully fulfilled, we will provide an explanation to the extent permitted by applicable law.

37.7 Charges for Requests

In accordance with the DPDP Act, 2023, we generally do not charge users for their first reasonable request relating to access, correction, or portability within a calendar year. However, repetitive, excessive, or manifestly unfounded requests may be subject to a reasonable administrative fee where permitted by law.

37.8 How to Submit a Request

You may exercise your privacy rights using any of the following methods:

• Email: help@clickin.in
• Postal Address: Inofixa Technologies, 3/4 Old Mumbra Panvel Road, Thane, Mumbai, Maharashtra, India – 421204.
• Account Dashboard: Where available, navigate to My Profile → Privacy Settings to manage your privacy preferences.

CLICKIN remains committed to ensuring transparency, accountability, and user control over personal information. We value your trust and strive to make the exercise of your privacy rights simple, secure, and efficient.

Section 38: Children's Privacy

At CLICKIN, we are deeply committed to protecting the privacy, safety, and personal information of children. We recognize the heightened responsibility associated with processing children's data and strictly comply with the Digital Personal Data Protection (DPDP) Act, 2023, the Information Technology Act, 2000, the Juvenile Justice (Care and Protection of Children) Act, 2015, and other applicable Indian laws.

38.1 Age Limit for Use

Our services are intended primarily for individuals who are 18 years of age or older. By accessing or using CLICKIN, you represent that you have attained the age of 18 years. If you are a parent or legal guardian and believe that your child has provided personal information without authorization, please contact us immediately.

38.2 Parental Consent Requirement

Where any of our services are specifically designed for educational, academic, or youth-oriented purposes, we will obtain verifiable parental or legal guardian consent before collecting, using, or processing any personal information relating to a minor.

Without such consent, we do not knowingly collect, retain, or process personal information belonging to children under the applicable legal age.

38.3 Personal Data That May Be Collected (Where Permitted)

Where parental or guardian consent has been properly obtained, the categories of personal information that may be collected include:

• Name and age.
• Educational preferences or limited learning-related information.
• Approximate location information where essential for the requested service.

Such information will always be limited to what is reasonably necessary for lawful educational services, awareness programs, or child-oriented features specifically approved by a parent or guardian.

38.4 Enhanced Protection for Children's Data

Information relating to minors receives enhanced protection through additional technical and organizational safeguards, including:

• Higher levels of encryption and secure storage.
• Restricted internal access limited to authorized personnel.
• Manual review of sensitive processing activities.
• No behavioral advertising, profiling, or targeted marketing directed at children.

38.5 Deletion of Children's Data

Parents or legal guardians may request deletion of a child's personal information at any time by contacting our Grievance Officer at help@clickin.in.

Following successful verification of the request, we will make reasonable efforts to permanently delete the applicable information within 10 working days, unless a longer retention period is required by applicable law.

38.6 No Targeted Advertising to Children

CLICKIN does not knowingly display personalized advertisements or perform behavioral profiling relating to users identified as children. Children's information is never used for:

• Behavioral advertising.
• Marketing profiling.
• Cross-platform advertising or tracking.
• Commercial targeting based on browsing activity.

38.7 Reporting Privacy Concerns

If you become aware of any unauthorized collection, misuse, or disclosure of a child's personal information through CLICKIN, please notify our Grievance Officer immediately by emailing help@clickin.in.

Every child privacy concern is investigated with the highest priority and appropriate action is taken wherever necessary.

38.8 Compliance with Indian Laws

Our children's privacy practices are designed to comply with applicable Indian legal requirements, including:

• Digital Personal Data Protection (DPDP) Act, 2023.
• Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.
• Juvenile Justice (Care and Protection of Children) Act, 2015.

We continuously review legal developments to ensure that our child privacy practices remain aligned with evolving Indian regulatory requirements.

38.9 Digital Safety and Awareness

CLICKIN supports digital literacy and online safety initiatives for children, parents, and guardians. We encourage responsible internet usage, privacy awareness, and active parental supervision to help create a safer digital environment for young users.

Section 39: Data Breach Notification and Handling

At CLICKIN, we take the protection of your personal information extremely seriously. In the unlikely event of a personal data breach, we are committed to responding promptly, transparently, and responsibly in accordance with the Digital Personal Data Protection (DPDP) Act, 2023, the Information Technology Act, 2000, applicable CERT-In directions, and other relevant Indian cybersecurity regulations.

39.1 What Constitutes a Data Breach

A personal data breach refers to any accidental or unlawful event resulting in the unauthorized access, disclosure, alteration, destruction, loss, or unavailability of personal information. Examples include:

• Unauthorized access to our systems, databases, or user accounts.
• Accidental disclosure or leakage of personal information.
• Ransomware attacks or malicious encryption of stored data.
• Loss, theft, or compromise of devices or backups containing personal information.

39.2 Immediate Response Protocol

Upon becoming aware of a suspected or confirmed data breach, our incident response procedures include:

• Containment: Immediately isolating affected systems and securing compromised accounts.
• Assessment: Determining the nature, scope, severity, and potential impact of the incident.
• Investigation: Conducting a detailed technical and forensic investigation to identify the root cause and affected information.
• Corrective Measures: Eliminating identified vulnerabilities, strengthening security controls, and preventing further unauthorized access.

39.3 Notification to Authorities and Users

Where required under applicable Indian law, including the DPDP Act, 2023, CLICKIN will:

• Notify the appropriate regulatory authority, including the Data Protection Board of India, within the legally prescribed timeframe.
• Notify affected users through email, website notifications, or other appropriate communication channels.
• Provide clear information regarding the nature of the breach, the categories of data affected, potential risks, and recommended protective measures.
• Maintain appropriate records of reportable breaches where required by applicable law.

39.4 User Assistance and Remedies

Where your personal information may have been affected, we will provide appropriate assistance, which may include:

• Prompt communication regarding the incident.
• Password reset recommendations and account security guidance.
• Temporary account protection measures where appropriate.
• Assistance with reporting cybercrime or regulatory complaints where legally applicable.

39.5 Prevention Measures and Security Reviews

To minimize the likelihood of future incidents, we continuously strengthen our security framework through:

• Regular penetration testing and vulnerability assessments.
• 24×7 security monitoring and intrusion detection systems.
• Periodic cybersecurity awareness training for employees.
• Independent security audits conducted by qualified third-party professionals.

39.6 Compliance with Indian Laws

Our breach management procedures are designed to comply with applicable Indian legal requirements, including:

• Sections 43A and 72A of the Information Technology Act, 2000.
• Digital Personal Data Protection (DPDP) Act, 2023.
• CERT-In Directions relating to cybersecurity incident reporting and response.

39.7 How Users Can Help

Users are encouraged to remain vigilant and promptly notify us if they observe:

• Suspicious login attempts or unauthorized account activity.
• Emails, messages, or phone calls falsely claiming to represent CLICKIN.
• Requests for passwords, OTPs, financial information, or other confidential credentials.

You may immediately report any such concerns to our Grievance Officer by emailing help@clickin.in.

39.8 Commitment to Transparency

We believe transparency is essential to maintaining user trust. Where a verified data breach occurs, we will communicate openly, responsibly, and in accordance with applicable legal obligations while taking every reasonable step to protect affected users and strengthen our security systems against future incidents.

Section 40: Location Data Collection, Usage, and Consent

At CLICKIN, we may collect, process, and use your location information to provide location-based services, improve user experience, strengthen account security, and deliver relevant content. We handle all location data responsibly and in accordance with the Digital Personal Data Protection (DPDP) Act, 2023, the Information Technology Act, 2000, and other applicable Indian laws and regulatory guidelines.

40.1 What Constitutes Location Data

Location data refers to information that identifies or helps determine the geographical position of your device or your approximate location. Depending on the service you use, this may include:

• GPS coordinates (latitude and longitude).
• Wi-Fi or Bluetooth-based location estimates.
• IP address-based geolocation.
• Mobile network or cell tower triangulation.
• Location information manually provided by you, such as your city, state, or postal code.

40.2 When We Collect Location Data

We may collect your location information only under circumstances such as:

• When you grant permission through your browser or mobile device.
• When you use location-based features such as nearby services or localized search.
• When interacting with region-specific content, advertisements, or business listings.
• Where collection is required for security verification, fraud prevention, or lawful compliance.

40.3 How We Use Location Data

Your location information may be used for legitimate business purposes, including:

• Providing localized services, recommendations, and relevant content.
• Displaying nearby businesses, offers, or service providers.
• Enhancing account security by detecting unusual login locations.
• Supporting logistics, delivery, scheduling, or appointment-based services where applicable.
• Improving platform performance, analytics, and overall user experience.

40.4 User Consent for Location Access

We obtain your explicit and informed consent before accessing precise location information. Consent may be requested through:

• Browser permission prompts.
• Android or iOS system permission requests.
• Privacy settings, consent checkboxes, or feature-specific confirmations within CLICKIN.

You may withdraw your consent at any time by disabling location permissions within your browser, device settings, or account preferences, where available.

40.5 Storage and Retention of Location Data

Location information is retained only for as long as reasonably necessary to provide the requested service or to comply with applicable legal obligations. We implement appropriate security measures including:

• Encryption of location data during transmission and storage.
• Restricted access limited to authorized personnel.
• Secure deletion once the retention period expires or the information is no longer required.

40.6 Sharing of Location Data

We do not sell, rent, or trade your location information. Where necessary, limited location data may be shared only with:

• Trusted mapping or analytics service providers supporting platform functionality.
• Logistics or delivery partners where location is essential to complete your requested service.
• Government authorities or law enforcement agencies where disclosure is required under applicable law.

40.7 Your Rights Regarding Location Data

Subject to the DPDP Act, 2023, you have the right to:

• Know when your location information is being collected or processed.
• Withdraw consent for future collection of location information.
• Request deletion of stored location data where legally permissible.
• Submit a grievance if you believe your location information has been processed unlawfully.

40.8 Security of Location Data

To safeguard your geographic information, we implement multiple security measures, including:

• Secure authentication and access controls.
• Protected APIs and firewall-based security mechanisms.
• Encryption, audit logging, and continuous monitoring of systems handling location information.

40.9 Managing Location Preferences

You may control or disable location access at any time through:

• Your web browser's location permission settings.
• Android or iOS location privacy settings.
• Privacy controls available within your CLICKIN account, where supported.

Please note that disabling location services may affect the availability or functionality of certain location-based features.

40.10 Compliance and Transparency

Our handling of location information complies with applicable Indian privacy and cybersecurity requirements, including the Digital Personal Data Protection (DPDP) Act, 2023, the Information Technology Act, 2000, and any applicable notifications or guidelines issued by MeitY, CERT-In, or other competent authorities.

At CLICKIN, we remain committed to processing your location information lawfully, securely, and transparently while ensuring that you remain in full control of how your location data is collected, used, and protected.

Section 41: Audio, Video, and Media Consent

At CLICKIN, we may collect, receive, or process audio recordings, video content, photographs, screen recordings, or other media formats during our interactions with users. Such media may be obtained directly through features such as voice search, video testimonials, webinars, support calls, or user submissions, or indirectly through recordings made during physical events, training sessions, or customer support interactions where applicable. We treat all media content with the highest level of confidentiality, security, and legal compliance.

41.1 Consent for Recording and Use

By using our services, participating in recorded communications (including customer support calls, webinars, online meetings, or interviews), or voluntarily submitting audio, video, photographs, testimonials, or similar media, you provide your informed and explicit consent for CLICKIN to collect, store, process, and use such content in accordance with this Privacy Policy.

Where we intend to publicly publish, display, advertise, or otherwise distribute your identifiable media for promotional or marketing purposes, we will obtain separate and explicit consent before doing so.

41.2 Purpose of Media Processing

Audio, video, and other media content may be processed for legitimate purposes including:

• Providing customer support and service quality assurance.
• Training employees and improving internal operational processes.
• Verifying transactions, communications, or service requests.
• Enhancing platform security and fraud prevention.
• Publishing testimonials, reviews, interviews, or promotional content only after obtaining appropriate consent.
• Documenting offline events, workshops, conferences, or business meetings where recording is reasonably expected or separately communicated.

All such processing is carried out in accordance with applicable Indian laws and only for lawful, specific, and legitimate purposes.

41.3 Storage and Retention

All media files are stored using appropriate technical and organizational security measures, including encryption where applicable, secure storage environments, restricted access controls, and periodic security reviews.

Media content is retained only for as long as reasonably necessary to fulfill the lawful purpose for which it was collected, after which it is securely deleted, anonymized, or archived in accordance with applicable legal requirements and internal retention policies.

41.4 Right to Withdraw Consent

You may withdraw your consent for the future use of your audio, video, photographs, testimonials, or other media content at any time by contacting us at help@clickin.in.

Upon receiving and verifying your request, we will discontinue any future use, publication, or display of the relevant media and take reasonable steps to remove or securely delete the content from our systems, except where continued retention is required by applicable law or for the establishment, exercise, or defense of legal claims.

CLICKIN remains committed to handling all audio, video, and media content responsibly, transparently, and in full compliance with applicable Indian privacy and data protection laws.

Section 42: Third-Party SDKs and Tools

At CLICKIN, we may integrate trusted third-party Software Development Kits (SDKs), Application Programming Interfaces (APIs), plugins, and development tools into our website, mobile applications, or digital services to enhance functionality, improve user experience, provide secure transactions, analyze performance, enable communications, and deliver other essential features. We carefully evaluate such integrations to ensure compliance with applicable Indian privacy laws and industry best practices.

42.1 Purpose of Third-Party SDKs and Tools

Third-party SDKs and APIs may be integrated for legitimate operational purposes, including:

• Providing secure login or registration through platforms such as Google, Facebook, or Apple.
• Delivering push notifications using services such as Firebase Cloud Messaging.
• Performing website analytics and usage measurement through platforms such as Google Analytics, Mixpanel, or Hotjar.
• Processing secure online payments through payment gateways including Razorpay, Paytm, UPI, or other authorized payment providers.
• Offering customer support, live chat, feedback, or communication services using trusted third-party platforms.
• Supporting advertising, remarketing, conversion tracking, and campaign measurement through platforms such as Google Ads or Meta Ads.

Each integration is implemented solely for specific business purposes that enhance the services offered through CLICKIN.

42.2 Information Collected by Third-Party SDKs

Depending on the functionality provided, third-party SDKs or APIs may collect limited technical or personal information, including:

• Device identifiers (such as Android ID, Advertising ID, or similar identifiers).
• IP address, browser information, operating system details, and approximate location.
• Session duration, user interactions, feature usage, clicks, and application crash reports.
• Masked or tokenized payment information processed through authorized payment providers.
• Identifiers used for analytics, advertising measurement, or service optimization.

Information collected by these providers is generally governed by their own privacy policies. While we carefully select reputable service providers, we encourage users to review the applicable privacy policies of such third parties independently.

42.3 Compliance with Indian Law

Our integration of third-party SDKs and APIs is designed to comply with the Information Technology Act, 2000, the Digital Personal Data Protection (DPDP) Act, 2023, and other applicable Indian regulations. Accordingly:

• Only SDKs necessary for legitimate business purposes are integrated.
• Third-party service providers are evaluated for security, privacy, and regulatory compliance before implementation.
• Appropriate contractual obligations are maintained wherever required to protect user information.
• SDK integrations are periodically reviewed to minimize security risks and prevent unauthorized data processing.

Our objective is to ensure that every third-party integration remains proportionate, transparent, and consistent with applicable legal requirements.

42.4 User Controls and Opt-Out Options

Where technically feasible, users may manage or restrict certain third-party services by:

• Disabling location permissions through device settings.
• Managing notification permissions within browser or mobile operating system settings.
• Adjusting personalized advertising preferences offered by supported platforms.
• Requesting that we discontinue certain categories of third-party data sharing where permitted by law and technically practicable.

Please note that disabling certain SDKs or permissions may reduce the availability or functionality of specific features offered by CLICKIN.

42.5 Disclaimer Regarding Third-Party SDKs

Although CLICKIN implements appropriate technical, contractual, and organizational safeguards before integrating third-party SDKs or APIs, we cannot control the independent privacy practices of external service providers beyond our reasonable supervision. Any processing performed directly by such providers remains subject to their respective privacy policies, contractual commitments, and applicable laws.

42.6 Examples of Third-Party SDKs and Tools

The following are examples of third-party technologies that may be integrated into our services where appropriate:

• Google Firebase (notifications, messaging, analytics).
• Meta/Facebook SDK (authentication, analytics, advertising).
• Google Ads or AdMob services.
• Razorpay, Paytm, UPI, or other authorized payment SDKs.
• Truecaller SDK for simplified login or verification, where implemented.
• Mixpanel, Segment, or similar analytics platforms.

This list is illustrative and non-exhaustive. Third-party technologies may change over time as our services evolve. Any future integrations will continue to follow appropriate security reviews, lawful processing principles, and applicable Indian data protection requirements.

Section 43: Data Processing for Legal Compliance and Regulatory Obligations

At CLICKIN, we process certain categories of personal information where necessary to comply with applicable laws, regulations, judicial directions, governmental requests, and statutory obligations. Such processing is carried out only to the extent required by law and in accordance with the Digital Personal Data Protection (DPDP) Act, 2023, the Information Technology Act, 2000, and other applicable Indian legal frameworks.

43.1 Legal Basis for Processing

We may process your personal information without obtaining separate consent where such processing is expressly permitted or required under applicable law, including where it is necessary for:

• Compliance with statutory or regulatory obligations.
• Responding to lawful requests from courts, tribunals, or government authorities.
• Preventing fraud, cybercrime, financial crime, or other unlawful activities.
• Protecting the rights, safety, property, or legitimate interests of CLICKIN, its users, or the general public.

Such processing is limited strictly to the purposes authorized under applicable Indian law.

43.2 Disclosure to Government Authorities

Where legally required, we may disclose relevant personal information to:

• Courts, tribunals, and judicial authorities.
• Law enforcement agencies.
• Government departments and regulatory authorities.
• Cybersecurity agencies such as CERT-In.
• Other competent authorities authorized under Indian law.

Such disclosures are made only after verifying the legal validity of the request and only to the extent reasonably necessary for compliance.

43.3 Record Maintenance

Where required by law, we maintain appropriate records relating to:

• User transactions and financial records.
• Consent logs and privacy preferences.
• Security incidents and audit trails.
• Customer support communications.
• Other records required under applicable taxation, accounting, cybersecurity, or regulatory obligations.

Records are retained only for the duration required under applicable law or legitimate business requirements.

43.4 Regulatory Audits and Investigations

If required by any competent authority, we may provide information necessary to support lawful audits, inspections, investigations, compliance reviews, or enforcement proceedings. We cooperate with regulators while continuing to implement reasonable safeguards to protect user privacy wherever legally permissible.

43.5 Cross-Reference to Applicable Laws

Our legal compliance activities are guided by applicable Indian laws, including but not limited to:

• Digital Personal Data Protection (DPDP) Act, 2023.
• Information Technology Act, 2000.
• Information Technology Rules and applicable notifications.
• CERT-In Directions and cybersecurity advisories.
• Income tax, accounting, consumer protection, and other applicable statutory requirements.

We periodically review our compliance processes to ensure continued alignment with evolving legal and regulatory obligations.

CLICKIN remains committed to processing personal information lawfully, responsibly, and transparently while fulfilling all applicable legal and regulatory obligations imposed under Indian law.

Section 44: International Data Transfers

At CLICKIN, we primarily store and process personal information within India. However, in certain circumstances, your personal data may be transferred to, accessed from, or processed in jurisdictions outside India where trusted third-party service providers or technology partners assist us in delivering our services. Any such international transfer is carried out responsibly and in accordance with applicable Indian laws, including the Digital Personal Data Protection (DPDP) Act, 2023.

44.1 When International Transfers May Occur

Your personal information may be transferred internationally where reasonably necessary for purposes including:

• Cloud hosting, secure data storage, or backup infrastructure.
• Email delivery, communication, or customer support services.
• Website analytics, performance monitoring, or cybersecurity services.
• Payment processing through internationally operating service providers.
• Other legitimate business operations requiring trusted cross-border technology services.

Such transfers occur only where necessary to provide or improve our services.

44.2 Safeguards for International Transfers

Before transferring personal information outside India, we implement appropriate safeguards, including:

• Assessing the privacy and security standards of the receiving service provider.
• Entering into contractual obligations requiring appropriate protection of personal information.
• Applying technical safeguards such as encryption during transmission and storage wherever appropriate.
• Limiting transferred information to the minimum amount necessary for the intended purpose.

We make reasonable efforts to ensure that transferred personal information receives a level of protection substantially comparable to that required under applicable Indian law.

44.3 Compliance with Indian Law

Cross-border transfers of personal information are carried out only where permitted under the Digital Personal Data Protection (DPDP) Act, 2023, together with any notifications, rules, or directions issued by the Government of India from time to time.

Where future legal restrictions or approved country lists are introduced under applicable law, CLICKIN will update its transfer practices accordingly.

44.4 User Rights

Subject to applicable law, you may request information regarding:

• Whether your personal information has been transferred outside India.
• The categories of information transferred.
• The safeguards implemented to protect such information.
• The lawful basis for any international transfer.

Requests relating to international data transfers may be submitted by contacting our Grievance Officer at help@clickin.in.

44.5 Our Commitment

Wherever your personal information is processed, CLICKIN remains responsible for protecting your privacy through appropriate contractual, organizational, and technical safeguards. We continuously monitor our international service providers to ensure ongoing compliance with applicable privacy, security, and regulatory requirements.

Section 45: Data Protection Impact Assessments (DPIA)

At CLICKIN, we recognize the importance of proactively identifying and minimizing privacy risks associated with the processing of personal data. Accordingly, we conduct Data Protection Impact Assessments (DPIAs) whenever processing activities are likely to pose significant risks to the rights and freedoms of individuals. Our DPIA framework is designed to support compliance with the Digital Personal Data Protection (DPDP) Act, 2023, the Information Technology Act, 2000, and applicable industry best practices.

45.1 Purpose of a DPIA

A Data Protection Impact Assessment helps us evaluate how personal data is collected, processed, stored, shared, and protected before implementing new technologies, products, services, or processing activities. The primary objectives include:

• Identifying potential privacy and security risks.
• Assessing the impact of processing on users' rights and interests.
• Implementing appropriate safeguards before data processing begins.
• Ensuring ongoing compliance with applicable legal and regulatory requirements.

DPIAs support responsible innovation while maintaining a high standard of privacy protection.

45.2 When We Conduct a DPIA

We may perform a Data Protection Impact Assessment before introducing or substantially modifying activities such as:

• New technologies involving large-scale processing of personal data.
• Artificial Intelligence (AI), machine learning, or automated decision-making systems.
• Processing involving sensitive personal information.
• Large-scale behavioral analytics, profiling, or location-based services.
• New third-party integrations or international data transfers presenting elevated privacy risks.

Assessments are carried out before the relevant processing activity is implemented whenever reasonably practicable.

45.3 Assessment Process

Our DPIA process generally includes:

• Identifying the purpose and scope of the proposed processing.
• Evaluating the necessity and proportionality of the processing activity.
• Assessing potential risks to privacy, confidentiality, integrity, and security.
• Implementing technical, organizational, and legal safeguards to reduce identified risks.
• Documenting assessment findings and periodically reviewing them as processing activities evolve.

Where appropriate, legal, compliance, security, and technical teams participate in the assessment process.

45.4 Continuous Review

Data Protection Impact Assessments are not one-time exercises. We periodically review completed assessments whenever significant operational, technological, legal, or regulatory changes occur to ensure that identified risks continue to be appropriately managed.

45.5 Our Commitment

Through our DPIA program, CLICKIN remains committed to embedding privacy into the design of our products, services, and business processes. By proactively identifying risks and implementing appropriate safeguards, we strive to protect personal information while maintaining transparency, accountability, and compliance with applicable Indian privacy laws.

Section 46: Privacy by Design and Default

At CLICKIN, privacy is embedded into the design, development, and operation of our products, services, and business processes. We follow the principle of Privacy by Design and Default, ensuring that the protection of personal data is considered from the earliest stages of planning and throughout the entire lifecycle of every service we provide. Our approach aligns with the Digital Personal Data Protection (DPDP) Act, 2023, the Information Technology Act, 2000, and recognized international privacy best practices.

46.1 Privacy Integrated into System Design

Privacy requirements are incorporated during the planning, development, testing, deployment, and maintenance of our systems. Before introducing new features, products, or technologies, we evaluate their potential impact on personal data and implement appropriate safeguards wherever necessary.

46.2 Data Minimization

We collect and process only the minimum amount of personal information necessary to provide the requested services or fulfill legitimate business purposes. We avoid collecting excessive or unnecessary information and regularly review our data collection practices to ensure continued compliance with applicable legal requirements.

46.3 Privacy-Friendly Default Settings

Wherever reasonably practicable, our products and services are configured with privacy-protective default settings. Features involving additional collection, sharing, or processing of personal information are enabled only after obtaining the user's consent or where otherwise permitted under applicable law.

46.4 Security Throughout the Data Lifecycle

Appropriate technical and organizational security measures are implemented throughout the lifecycle of personal information, including during collection, storage, use, transmission, sharing, archival, and secure deletion. These measures include encryption, access controls, monitoring, logging, and periodic security assessments.

46.5 Continuous Improvement

We regularly review and improve our privacy controls to reflect changes in technology, cybersecurity risks, regulatory developments, and industry standards. Privacy considerations form an ongoing part of our governance, risk management, and compliance activities.

46.6 Our Commitment

By adopting Privacy by Design and Default principles, CLICKIN seeks to ensure that privacy is not treated as an afterthought but as a fundamental element of every service we offer. We remain committed to protecting personal information through responsible design, transparency, accountability, and continuous compliance with applicable Indian privacy laws.

Section 47: Data Governance and Accountability

At CLICKIN, we recognize that responsible data governance is essential to protecting personal information and maintaining user trust. We have established internal governance frameworks, policies, procedures, and accountability mechanisms to ensure that all personal data is collected, processed, stored, shared, retained, and deleted in accordance with the Digital Personal Data Protection (DPDP) Act, 2023, the Information Technology Act, 2000, and other applicable Indian laws.

47.1 Internal Data Governance Framework

Our data governance framework is designed to ensure that personal information is managed responsibly throughout its lifecycle. This framework includes:

• Clearly defined privacy and data protection policies.
• Documented procedures for lawful data processing.
• Clearly assigned responsibilities for employees handling personal information.
• Periodic reviews of governance practices to ensure continued compliance.

These measures help maintain consistency, accountability, and regulatory compliance across our operations.

47.2 Accountability and Responsibility

Inofixa Technologies, as the operator of CLICKIN, remains accountable for ensuring that personal information is processed lawfully, fairly, transparently, and securely. Our management, authorized personnel, and service providers are expected to comply with internal privacy policies and applicable legal obligations at all times.

47.3 Employee Awareness and Training

Employees and authorized personnel who handle personal information receive appropriate training on privacy obligations, information security, confidentiality, cybersecurity awareness, and responsible data handling practices. Training programs are periodically updated to reflect evolving legal requirements, emerging threats, and industry best practices.

47.4 Monitoring and Compliance Reviews

We regularly monitor our privacy program through internal reviews, compliance assessments, security evaluations, and operational audits. Where appropriate, corrective actions are implemented to address identified risks, strengthen internal controls, and continuously improve our privacy management practices.

47.5 Documentation and Record Keeping

We maintain appropriate documentation relating to privacy governance, including records of processing activities, security controls, user consent where applicable, incident management, training activities, and compliance reviews. Such documentation is retained in accordance with applicable legal and regulatory requirements.

47.6 Continuous Improvement

Privacy governance is an ongoing process. We periodically update our governance framework to reflect changes in legislation, regulatory guidance, technology, cybersecurity risks, and business operations. Through continuous improvement, CLICKIN remains committed to maintaining a strong culture of privacy, accountability, transparency, and responsible data management.

Section 48: Compliance Monitoring and Policy Review

At CLICKIN, privacy compliance is an ongoing commitment rather than a one-time obligation. We regularly monitor, evaluate, and improve our privacy practices to ensure continued compliance with the Digital Personal Data Protection (DPDP) Act, 2023, the Information Technology Act, 2000, and other applicable Indian laws, regulations, and industry standards.

48.1 Periodic Compliance Reviews

We conduct regular reviews of our privacy program, internal policies, technical safeguards, and operational procedures to verify that personal information continues to be processed lawfully, securely, and in accordance with applicable legal requirements.

These reviews may include assessments of:

• Privacy policies and internal procedures.
• Data collection and processing activities.
• Third-party service providers and contractual obligations.
• Information security controls and incident response processes.

Periodic reviews enable us to identify opportunities for improvement and maintain ongoing regulatory compliance.

48.2 Internal Audits and Assessments

Where appropriate, we perform internal audits, compliance assessments, and risk evaluations to verify adherence to our privacy governance framework. Findings from these reviews may result in updates to policies, technical controls, employee training programs, or operational processes designed to strengthen the protection of personal information.

48.3 Monitoring Regulatory Changes

We continuously monitor changes to applicable laws, judicial decisions, regulatory guidance, government notifications, cybersecurity advisories, and industry best practices. Whenever necessary, we revise our privacy practices and this Privacy Policy to remain aligned with evolving legal and regulatory requirements.

48.4 Corrective and Preventive Actions

Where reviews or assessments identify areas requiring improvement, we implement appropriate corrective and preventive measures, including:

• Updating internal policies and procedures.
• Strengthening technical and organizational security controls.
• Providing additional employee awareness and privacy training.
• Improving monitoring, documentation, and compliance reporting processes.

These actions help us continuously improve our privacy management program and reduce future compliance risks.

48.5 Our Commitment

Through continuous monitoring, regular policy reviews, and proactive compliance management, CLICKIN remains committed to maintaining the highest standards of privacy, accountability, transparency, and responsible data protection. We will continue to strengthen our privacy practices as technology, legal requirements, and user expectations evolve.

Section 49: Severability and Survival

At CLICKIN, every provision of this Privacy Policy has been drafted to operate independently while collectively forming a comprehensive framework governing the collection, use, processing, storage, disclosure, and protection of personal information. This section explains how this Privacy Policy will continue to operate if any individual provision is found to be invalid, unenforceable, or unlawful under applicable law.

49.1 Severability of Provisions

If any provision, clause, subsection, or part of this Privacy Policy is declared invalid, illegal, void, or unenforceable by a court of competent jurisdiction or any regulatory authority, such determination shall apply only to the affected provision and shall not affect the validity, legality, or enforceability of the remaining provisions of this Privacy Policy.

The remaining provisions shall continue to remain in full force and effect to the maximum extent permitted under applicable law.

49.2 Modification of Invalid Provisions

Where any provision is determined to be invalid or unenforceable, it shall, to the extent reasonably possible, be interpreted, modified, or replaced in a manner that most closely reflects the original intent and purpose of the affected provision while remaining consistent with applicable legal requirements.

49.3 Survival of Obligations

Any provisions of this Privacy Policy that, by their nature, are intended to survive the termination of your relationship with CLICKIN shall continue to remain effective after such termination. These may include, without limitation:

• Obligations relating to confidentiality and protection of personal information.
• Data retention requirements mandated by applicable law.
• Rights and obligations relating to dispute resolution, legal compliance, and regulatory cooperation.
• Limitations of liability and other provisions intended to continue beyond termination.

49.4 Continued Legal Effect

Termination of your account, discontinuation of our services, or withdrawal of your consent will not invalidate or terminate those provisions of this Privacy Policy that are legally required to remain effective or that are reasonably necessary to protect the legitimate rights, obligations, and interests of CLICKIN, its users, or applicable regulatory authorities.

49.5 Our Commitment

By including this Severability and Survival clause, CLICKIN seeks to ensure that this Privacy Policy remains legally effective, enforceable, and operational even if any individual provision is modified or declared unenforceable. We remain committed to maintaining a privacy framework that is transparent, legally compliant, and aligned with applicable Indian laws and regulatory requirements.

Section 50: Data Protection Under Indian Law

At CLICKIN, we respect your right to privacy and are fully committed to protecting your personal information in accordance with the laws of India. Our privacy practices are designed to comply with the Digital Personal Data Protection (DPDP) Act, 2023, the Information Technology Act, 2000, and other applicable Indian laws governing the lawful collection, processing, storage, security, sharing, and protection of personal data.

50.1 Compliance with the DPDP Act, 2023

The Digital Personal Data Protection (DPDP) Act, 2023 establishes the legal framework governing the processing of digital personal data in India. As the operator of CLICKIN, Inofixa Technologies is committed to complying with the core principles of the Act, including:

• Lawful Processing: Personal data is collected and processed only with valid user consent or where otherwise permitted by applicable law.
• Purpose Limitation: Personal information is processed solely for the specific and legitimate purposes communicated at the time of collection.
• Data Minimization: We collect only the personal information reasonably necessary to provide our services.
• Accuracy: Reasonable efforts are made to ensure that personal information remains accurate, complete, and up to date.
• Storage Limitation: Personal data is retained only for as long as necessary to fulfill the relevant purpose or comply with legal obligations.
• Security Safeguards: Appropriate technical, organizational, and administrative measures are implemented to protect personal information against unauthorized access, disclosure, alteration, or loss.

These principles guide every stage of our personal data processing activities.

50.2 Role of the Data Principal and Data Fiduciary

Under the DPDP Act, 2023:

• Data Principal refers to you, the individual to whom the personal information relates.
• Data Fiduciary refers to CLICKIN, operated by Inofixa Technologies, which determines the purpose and means of processing personal information.

As a Data Principal, you are entitled to rights including:

• Access to your personal information.
• Withdrawal of consent where applicable.
• Correction or deletion of inaccurate or unnecessary personal information.
• Information regarding how and with whom your personal information has been shared.
• The right to submit grievances relating to the processing of your personal information.

We remain committed to respecting and facilitating these rights in accordance with applicable law.

50.3 Information Technology Act, 2000 and Reasonable Security Practices

In accordance with Section 43A of the Information Technology Act, 2000, we implement reasonable security practices and procedures designed to protect personal information, including:

• Encryption of sensitive personal information during transmission and storage where appropriate.
• Regular security assessments, vulnerability testing, and audits.
• Role-based access controls and continuous monitoring of authorized access.
• Employee confidentiality obligations and privacy awareness training.

These safeguards help maintain the confidentiality, integrity, and availability of personal information processed through CLICKIN.

50.4 Legal Cooperation and Law Enforcement

Where required by applicable law, we may disclose relevant personal information to courts, law enforcement agencies, regulatory authorities, or other competent governmental bodies pursuant to valid legal processes. Such disclosures are made only where legally required and only to the extent necessary to comply with applicable legal obligations.

50.5 Cross-Border Data Transfers

Although we endeavor to process and store personal information within India whenever reasonably practicable, certain services may require limited international transfers of personal information. Any such transfers are carried out only:

• To jurisdictions permitted under applicable Indian law.
• Using appropriate contractual, technical, and organizational safeguards.
• In compliance with applicable legal requirements governing international data transfers.

Cross-border processing is undertaken only where necessary for legitimate operational purposes and with appropriate protections in place.

50.6 Your Responsibilities

Users are responsible for ensuring that the personal information they provide to CLICKIN is accurate, complete, and kept reasonably up to date. Submission of false, misleading, or fraudulent information may result in restriction, suspension, or termination of access to certain services where permitted under applicable law.

At CLICKIN, protecting your personal information through integrity, transparency, accountability, and lawful processing remains one of our highest priorities. We continuously review our privacy practices to remain aligned with evolving Indian legal and regulatory requirements while preserving the trust you place in our services.

Section 51: Consent Management and Withdrawal

At CLICKIN, your consent forms the foundation of our personal data processing practices. We are committed to obtaining, recording, managing, and honoring your consent in a transparent, lawful, and accountable manner in accordance with the Digital Personal Data Protection (DPDP) Act, 2023, the Information Technology Act, 2000, and other applicable Indian laws.

51.1 What Constitutes Valid Consent

Under applicable Indian law, valid consent must satisfy the following requirements:

• Freely Given: Consent must be provided voluntarily without coercion, undue influence, fraud, or misrepresentation.
• Informed: Users must be clearly informed about the categories of personal information collected, the purpose of processing, and any intended disclosures.
• Specific: Consent must relate to clearly identified processing purposes and shall not be bundled with unrelated activities.
• Clear and Unambiguous: Consent must be expressed through an affirmative action such as selecting a checkbox, clicking an acceptance button, or another explicit confirmation.
• Revocable: Users retain the right to withdraw their consent at any time, subject to applicable legal requirements.

We do not rely on silence, inactivity, or pre-selected options as valid consent.

51.2 Methods of Consent Collection

We may obtain consent through various lawful mechanisms, including:

• Registration forms and online application forms.
• Checkboxes and acceptance buttons presented before submitting information.
• Cookie banners and consent management interfaces.
• Email confirmations for sensitive processing activities or marketing communications.
• Feature-specific consent requests where additional permissions are required.

Consent is requested only where legally necessary and only for clearly identified processing activities.

51.3 Consent for Minors

Where applicable under the DPDP Act, 2023, individuals below the age of 18 years may only provide personal information through verified consent obtained from a parent or legal guardian. We implement reasonable measures to verify age and obtain guardian authorization wherever required by applicable law.

51.4 Consent Record-Keeping

To demonstrate compliance and maintain accountability, we securely maintain records relating to user consent, which may include:

• Date and time consent was provided.
• The specific purpose for which consent was granted.
• Device information or IP address associated with the consent transaction, where appropriate.
• The version of the Privacy Policy or consent notice accepted by the user.

These records are maintained securely and are accessible only to authorized personnel where necessary.

51.5 Withdrawal of Consent

You may withdraw your consent at any time using any of the following methods:

• Updating your privacy preferences through your CLICKIN account, where available.
• Sending a request to help@clickin.in.
• Using the unsubscribe option included within marketing emails or promotional communications.

Upon receiving and verifying your request, we will discontinue processing your personal information for the affected purpose unless continued processing is required by applicable law or another lawful basis exists.

51.6 Effect of Withdrawal

Withdrawal of consent may affect your ability to access certain services or features offered through CLICKIN. For example:

• You may no longer receive promotional emails or marketing communications.
• Certain personalized features or account functionality may become unavailable.
• Some services that depend upon the relevant processing activity may no longer be provided.

Where reasonably practicable, we will explain the consequences of withdrawing consent before implementing your request.

51.7 Contact Regarding Consent

If you have any questions, concerns, or disputes relating to your consent preferences or wish to exercise your consent-related rights, you may contact our Grievance Officer by emailing help@clickin.in.

At CLICKIN, we are committed to ensuring that your privacy choices are respected, accurately recorded, securely maintained, and implemented promptly in accordance with applicable Indian privacy laws.

Section 52: User Rights Under Indian Law

At CLICKIN, we recognize and respect your rights as a Data Principal under the Digital Personal Data Protection (DPDP) Act, 2023 and other applicable Indian laws. We are committed to ensuring that you remain informed, empowered, and in control of your personal information through transparent privacy practices and effective mechanisms for exercising your legal rights.

52.1 Right to Access

You have the right to request access to the personal information that we hold about you. Subject to applicable legal requirements, you may request details including:

• The categories of personal information collected about you.
• The purposes for which your personal information is processed.
• The categories of third parties with whom your personal information has been shared.
• The expected retention period applicable to your personal information.

You may exercise this right through your CLICKIN account (where available) or by contacting us at help@clickin.in.

52.2 Right to Correction

If any personal information maintained by us is inaccurate, incomplete, or outdated, you have the right to request correction or updating of such information. Where appropriate, we will also notify relevant third parties with whom the corrected information has been shared, subject to applicable legal and technical limitations.

Examples of information that may be updated include your name, email address, mobile number, postal address, or other profile information.

52.3 Right to Erasure

You may request deletion of your personal information where:

• The information is no longer necessary for the purpose for which it was collected.
• You have withdrawn your consent and no other lawful basis exists for continued processing.
• The personal information has been processed unlawfully.

Requests for deletion remain subject to applicable legal obligations requiring continued retention, including statutory compliance, fraud prevention, regulatory investigations, or dispute resolution.

52.4 Right to Data Portability

Where permitted by applicable law and technically feasible, you may request a copy of your personal information in a structured, commonly used, and machine-readable format such as CSV or JSON. This enables you to transfer your information to another service provider if you choose to do so.

52.5 Right to Restrict Processing

You may request that we temporarily restrict the processing of your personal information under circumstances including:

• Where you contest the accuracy of the information pending verification.
• Where you object to processing but do not wish your information to be deleted.
• Where the information is required by you for the establishment, exercise, or defense of legal claims.

During any approved restriction period, we will generally limit processing activities except where processing remains necessary under applicable law.

52.6 Right to Object

You may object to certain categories of processing, including:

• Processing based upon legitimate business interests, where applicable.
• Direct marketing communications.
• Profiling associated with marketing activities.

Where a valid objection is received, we will discontinue the relevant processing unless compelling lawful grounds require its continuation.

52.7 Right to File a Complaint

If you believe that your privacy rights have been violated or your personal information has been processed unlawfully, you may:

• Submit a complaint to our Grievance Officer.
• Escalate the matter to the Data Protection Board of India or any other competent authority as permitted under applicable law.

We will make reasonable efforts to acknowledge and resolve all genuine complaints within the applicable legal timelines.

52.8 Exercising Your Rights

To exercise any of your privacy rights, please contact us by emailing help@clickin.in or by writing to our registered office. We may request reasonable identity verification before fulfilling your request in order to protect your personal information from unauthorized access or disclosure.

At CLICKIN, we remain committed to empowering every user with meaningful control over their personal information while ensuring that all personal data is processed responsibly, securely, transparently, and in full compliance with applicable Indian privacy laws.

Section 53: Changes to This Privacy Policy

At CLICKIN, we may update, modify, or revise this Privacy Policy from time to time to reflect changes in legal requirements, technological developments, business operations, security practices, or regulatory guidance under applicable Indian laws, including the Digital Personal Data Protection (DPDP) Act, 2023.

53.1 Right to Modify the Policy

We reserve the right to amend, update, or revise this Privacy Policy at our sole discretion, provided that such changes are consistent with applicable law. Any modifications will be made to ensure continued protection of personal data and compliance with evolving regulatory requirements.

53.2 Notification of Changes

Where required under applicable law, we will take reasonable steps to notify users of significant changes to this Privacy Policy. Such notifications may be provided through:

• Website banners or pop-up notifications on CLICKIN.
• Email communication sent to registered users.
• Account dashboard notifications (where applicable).

We encourage users to periodically review this Privacy Policy to stay informed about how their personal data is handled.

53.3 Effective Date of Changes

Unless otherwise stated, any updated version of this Privacy Policy will become effective immediately upon publication on CLICKIN. Continued use of our services after such updates constitutes acceptance of the revised Privacy Policy.

53.4 User Responsibility

It is your responsibility to review this Privacy Policy periodically to ensure that you are aware of any changes. If you do not agree with the revised terms, you should discontinue use of our services and may request deletion of your personal data in accordance with applicable law.

53.5 Our Commitment

At CLICKIN, we are committed to maintaining transparency in all updates to this Privacy Policy. Any changes will continue to prioritize user privacy, data protection, legal compliance, and responsible data handling practices under Indian law.

Section 54: Governing Law and Jurisdiction

This Privacy Policy and all matters arising out of or relating to the collection, processing, storage, sharing, and protection of personal data on CLICKIN shall be governed by and interpreted in accordance with the laws of India, without regard to its conflict of law principles.

54.1 Applicable Law

All legal issues, disputes, claims, or obligations arising under this Privacy Policy shall be subject to applicable Indian laws, including but not limited to:

• The Digital Personal Data Protection (DPDP) Act, 2023.
• The Information Technology Act, 2000 and applicable rules.
• Relevant rules, notifications, and guidelines issued by the Government of India or competent regulatory authorities.
• Applicable judicial precedents and statutory amendments from time to time.

54.2 Jurisdiction

Subject to applicable law, the courts and competent authorities located in Mumbai, Maharashtra, India shall have exclusive jurisdiction over all disputes arising out of or relating to this Privacy Policy or the use of CLICKIN.

54.3 Dispute Resolution

In the event of any dispute or disagreement relating to privacy or data protection matters, we encourage users to first contact our Grievance Officer at help@clickin.in to seek an amicable resolution.

Where disputes cannot be resolved informally, they may be escalated to the appropriate adjudicating authority or Data Protection Board of India, as applicable under the DPDP Act, 2023 or other relevant laws.

54.4 Good Faith Resolution

Both CLICKIN and its users agree to act in good faith and cooperate in resolving any disputes in a fair, transparent, and timely manner, with the intention of avoiding unnecessary legal proceedings wherever possible.

54.5 Our Commitment

At CLICKIN, we remain committed to complying with Indian legal frameworks and ensuring that all privacy-related matters are handled in a lawful, transparent, and structured manner under the applicable jurisdiction.

Section 55: Final Provisions and Policy Updates

This Privacy Policy constitutes a legally binding agreement between CLICKIN (a digital brand of Inofixa Technologies) and its users, governing the use of the platform and the processing of personal data in accordance with applicable Indian laws, including the Digital Personal Data Protection (DPDP) Act, 2023 and the Information Technology Act, 2000.

55.1 Effective Date

This Privacy Policy is effective from May 26, 2025 and supersedes all previous versions. The latest revision date will always be displayed on the Privacy Policy page for transparency and user reference.

55.2 Amendments and Revisions

We reserve the right to update, modify, or revise this Privacy Policy at any time to reflect changes in legal, regulatory, operational, or technological requirements. Any such changes will be communicated through appropriate channels, including:

• Website banners or in-app notifications.
• Email notifications to registered users (where applicable).
• Updates published directly on the Privacy Policy page of CLICKIN.

We encourage users to review this Privacy Policy periodically to stay informed about about how their personal data is handled.

55.3 Continued Use Implies Acceptance

By continuing to access or use CLICKIN after any updates to this Privacy Policy, you acknowledge and accept the revised terms. If you do not agree with any changes, you must discontinue use of our services immediately.

55.4 Interpretation and Conflict

In the event of any conflict between this Privacy Policy and any other policies or terms published on CLICKIN, the provisions of this Privacy Policy shall prevail with respect to matters relating to personal data protection and privacy. This Policy shall be interpreted in accordance with the laws of India, including:

• The Information Technology Act, 2000 and applicable rules.
• The Digital Personal Data Protection (DPDP) Act, 2023.
• Relevant provisions of applicable Indian cyber and penal laws.

55.5 Severability

If any provision of this Privacy Policy is found to be invalid, unlawful, or unenforceable by a competent authority, such provision shall be modified or removed to the minimum extent necessary, while the remaining provisions shall continue in full force and effect.

55.6 Waiver

Any failure or delay by CLICKIN in exercising or enforcing any right or provision under this Privacy Policy shall not constitute a waiver of such right or provision.

55.7 Entire Agreement

This Privacy Policy, along with the Terms of Use, Cookies Policy, and other legal documents published on CLICKIN, constitutes the entire agreement between the user and the platform regarding the use and processing of personal data.

55.8 Feedback and Suggestions

We welcome your feedback, suggestions, and concerns regarding this Privacy Policy. You may contact us at help@clickin.in for any privacy-related queries or improvements.

Thank you for trusting CLICKIN. Your privacy is our priority.