Privacy Policy

• Mobile number — verified via a one-time password (OTP) when you schedule a pickup. This is your account identifier.
• Pickup details — your name, address, landmark, city and pincode, so our agent can reach you.
• Device & quote details — the model you are selling and the condition answers you give, which determine your quote.
• Payout details — your UPI ID or bank account number and IFSC, only if you choose those payout methods. Cash payouts need no financial details.
• Technical data — basic logs (IP address, browser type) for security and fraud prevention, and analytics events if analytics is enabled.

• To generate your quote and create and fulfil your sell order.
• To schedule and complete the doorstep pickup.
• To pay you via your chosen payout method.
• To send you transactional updates about your order (we do not send marketing messages without your consent).
• To prevent fraud and abuse of the service.

We do not sell your personal data to anyone.

• Our pickup agents — they see your name, address and order details to complete the pickup.
• Service providers — Google Firebase (phone OTP verification and reCAPTCHA fraud protection) and our hosting provider (Vercel). These providers process data on our behalf under their own security commitments.
• Authorities — if required by law, for example device-trade record requirements applicable in India.

Every device we buy goes through a certified data erasure before resale or recycling. You should still sign out of your accounts and remove SIM and memory cards before handing the device over — see our Terms & Conditions for details. We never access, copy or retain the personal content on your device.

We use a single, signed session cookie to keep you logged in after OTP verification. It contains no personal data beyond your verified phone reference and expires automatically. If analytics is enabled, Google Analytics and Meta Pixel may set their own cookies — you can block these in your browser without affecting the sell flow.

Order records are retained as long as required for accounting, tax and dispute purposes, then deleted or anonymised. Payout details are stored only against completed orders. Data is encrypted in transit (HTTPS everywhere) and access is limited to staff who need it.

Under the DPDP Act you may request access to, correction of, or deletion of your personal data, and you may withdraw consent at any time (which may prevent us from completing an open order). To exercise any right, contact us at the address below. We respond within 30 days.

For privacy questions or complaints, contact: support@cashlix.in. We operate from Bengaluru, Karnataka, India.

We may update this policy as the service evolves. Material changes will be announced on this page with a new "last updated" date.