Privacy Policy

1. Who we are

CrashKit is operated by Geo Designs & Research Pvt. Ltd. ("we", "us"), B-10, Krishna Industrial Estate, Opp B.I.D.C., Gorwa Estate, Vadodara - 390 016, Gujarat, India. For personal data described in this policy we act as the Data Fiduciary under the DPDP Act.

2. Data we collect

• Account data - name, organisation, e-mail address and a securely hashed password. We never store your password in readable form. If you choose "Continue with Google", we receive your name, e-mail address and profile picture from Google.
• Project data - files you upload (highway alignment KMZ/KML, crash record spreadsheets), project settings and the reports, workbooks and maps generated from them.
• Usage data - sign-in times, analyses run, their status and plan usage, used to provide the service, apply your plan limits and support you.
• Technical data - a session cookie that keeps you signed in, and your light/dark theme choice stored in your browser.

3. Road crash records

To produce reports, CrashKit processes road crash records downloaded from public road-safety sources (such as the NHAI accident dashboard) or uploaded by you. These records describe road incidents - location, date, time, severity and casualty counts. We use them only to produce the engineering analysis you request and do not attempt to identify any individual from them. If you upload records that contain personal details, you confirm that you are entitled to use them for this purpose.

4. How we use your data

• to create and manage your account and licence, and to apply your plan's limits;
• to run the analyses you request and store your results so you can download them again;
• to provide support, send service messages and handle billing;
• to keep the service secure, prevent misuse and meet legal obligations.

We do not sell your personal data and we do not use it for advertising.

5. Legal basis

We process personal data with your consent, given when you accept your account, and for legitimate uses permitted by the DPDP Act, such as performing the licence agreement with your organisation and complying with law. You may withdraw consent at any time (see section 9); this does not affect processing already carried out.

6. Sharing

We share data only with service providers that help us run CrashKit, under contracts that protect it:

• cloud hosting and database providers that store the application data;
• Google, only if you choose to sign in with Google;
• payment and invoicing providers, for billing.

We may also disclose data when required by law or by a lawful order of a government authority.

7. Where data is stored and how it is protected

Data is stored with reputable cloud providers whose servers may be located outside India. We transfer data abroad only as permitted under the DPDP Act. We protect data with encrypted connections (HTTPS), hashed passwords, access restricted to authorised staff, and an administrator key on top of the password for admin access. No system is perfectly secure; if a personal data breach occurs we will notify you and the Data Protection Board of India as the law requires.

8. How long we keep data

We keep account and project data while your account is active. After an account is closed we delete or anonymise personal data within 90 days, unless we must keep certain records (for example invoices) for longer by law.

9. Your rights

Under the DPDP Act you have the right to:

• obtain a summary of the personal data we hold about you and how it is processed;
• have inaccurate or incomplete data corrected and updated;
• have your personal data erased, unless we must keep it by law;
• withdraw your consent;
• nominate another person to exercise your rights in case of death or incapacity;
• have your grievances addressed by our Grievance Officer, and then by the Data Protection Board of India.

You can update your name, organisation and password yourself in Settings. For anything else, write to the Grievance Officer below. We respond within 30 days.

10. Cookies

We use only cookies that are necessary for the service to work, such as the sign-in session cookie. We do not use advertising or third-party tracking cookies.

11. Children

CrashKit is a professional tool and is not intended for anyone under 18. We do not knowingly collect their data.

12. Changes to this policy

We may update this policy. The date at the top shows the latest version; for significant changes we will inform account holders by e-mail or in the application.

13. Contact and grievances