Privacy Policy

Turfzo Sports Technologies Pvt. Ltd. (“we”, “us”, or “our”) is committed to protecting the privacy of our users (“you”). This Privacy Policy explains how we collect, store, share, and process your personal information when you use our website (turfzo.app), mobile application, or any associated venue booking services. We strictly adhere to the Digital Personal Data Protection (DPDP) Act, 2023, of India and other applicable data security regulations.

By signing up on Turfzo, completing booking checkout, or submitting inquiry forms, you provide your explicit consent for us to process your personal data for the specific purposes outlined in this policy. You have the right to withdraw your consent at any time by emailing us at privacy@turfzo.com. Please note that withdrawing consent may limit our ability to provide booking facilitation services to you.

We collect personal information necessary to process bookings, prevent fraud, and run the Platform:

• Account Registration Data: Full name, email address, mobile phone number, and avatar image (obtained via Google OAuth login if selected).
• Booking History: Venue selections, play dates, slot timings, sport category preferences, tournament entry registrations, and transaction amounts.
• Device Telemetry: IP address, device type, operating system, browser configuration, page navigation paths, and time spent on pages.
• Payment Processing: All payment details are collected directly by our RBI-compliant payment aggregator, Cashfree. Turfzo never views or stores your raw card numbers, CVVs, net banking credentials, or UPI PINs.

We process your personal data under the DPDP Act guidelines only to:

• Facilitate, confirm, and manage your sports venue bookings.
• Deliver transactional SMS and email notifications (booking confirmations, QR codes, payment receipts, slot reminders, and cancellation alerts).
• Verify user identities and prevent fraudulent or abusive bookings.
• Analyze usage trends to improve page layout, navigation speeds, and add new sports arenas.
• Comply with statutory tax auditing, accounting, and legal requirements.

We do not sell, rent, or lease your personal data. We share information only with trusted third parties for service delivery:

• Partner Venues: When you book a slot, we share your name and mobile number with the respective Partner (turf owner) to verify your entry at the ground.
• Payment aggregators: Cashfree (to process checkout payments securely).
• Notification Services: Email and SMS gateways to dispatch automated confirmation logs.
• Legal Obligations: We may disclose data if required by law enforcement or competent judicial bodies under a valid government warrant.

We use first-party cookies to manage secure sessions, remember authentication tokens, and keep you logged in. You can disable cookies in your browser settings, but doing so will prevent you from making bookings or logging in. We also use analytics tools (such as PostHog) to aggregate non-identifying telemetry patterns to improve our UI flows.

We implement robust technical and organizational security controls:

• All database communication is protected via end-to-end HTTPS/TLS encryption.
• User passwords and profiles are securely stored and encrypted via Firebase Auth services.
• We perform regular code audits, linting checks, and use dependency alerts to prevent vulnerability injections.

We retain your account details as long as your account remains active. Transactional history and invoice logs are retained for a period of 7 years in compliance with Indian tax laws. For details on how billing data, reversals, and cancellations are settled, please see our Refund & Cancellation Policy.

You have the right to request complete erasure of your account. You can trigger deletion directly from your profile page or by sending an email to privacy@turfzo.com. Upon verification, we will permanently purge all non-statutory data within 30 days.

In compliance with the Digital Personal Data Protection Act, 2023, you can address any privacy concerns, data rights requests, or complaints to our designated Grievance Officer:

We may update this Privacy Policy periodically. We will notify you of any changes by posting the revised version on this page and updating the "Last updated" date. We encourage you to review this page regularly to stay informed.