Privacy Policy

DiecastVault ("we", "us", "our") is a personal diecast car collection management platform operated from India. This Privacy Policy describes how we collect, use, store, share, and protect information when you use our website and application ("the Service").

This policy is framed in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 ("DPDP Act"), as applicable.

By creating an account or otherwise using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

We collect the following types of information:

• Account information — your name, email address, and password (stored as a salted hash) when you register.
• Collection data — information you enter about your diecast cars: model names, brands, scales, conditions, purchase prices, sale and trade history, photographs, notes, and set information. This data belongs to you.
• Contact submissions — your name, email address, and message content when you use the contact form.
• Security and device information — your IP address, browser type and version, operating system, device type, and approximate timestamps of sign-ins and account activity. We log this information for every login, signup, and password change to help us detect suspicious activity, prevent fraud, and keep accounts secure.
• Usage and analytics data — pages visited, features used, and general interaction data, which may be collected through analytics tools to help us understand how the Service is used and to improve it.

We use the information we collect to:

• Create and maintain your account and provide the core features of the Service.
• Authenticate your sign-ins and protect your account against unauthorised access.
• Maintain security logs of IP addresses, devices, and login activity, which we may review to investigate suspicious behaviour, abuse, or violations of our Terms of Service, and which may inform a decision to suspend or terminate an account.
• Respond to support requests and messages sent through the contact form.
• Analyse usage patterns (via analytics tools) to fix bugs, understand which features are useful, and improve the Service over time.
• Comply with applicable laws, regulations, and lawful requests from government or law enforcement authorities.

We do not sell your personal data, and we do not use your collection data for advertising.

We use essential cookies to keep you signed in and to maintain your session. These cookies are required for the Service to function and cannot be disabled while remaining logged in.

We may also use analytics tools (such as privacy-conscious web analytics services) to understand aggregate usage patterns — for example, which pages are visited and how often. These tools may record technical information such as your IP address, browser, device type, and pages viewed. We use this information to improve the Service and do not use it to build advertising profiles or share it with advertising networks.

To protect the Service and its users, we reserve the right to suspend or terminate accounts that violate our Terms of Service, show signs of fraudulent or abusive activity, or pose a security risk — based on the security and login information described in Section 2.

If your account is suspended, your data is retained but you will be unable to sign in or access the Service until the suspension is lifted or your account is deleted in accordance with Section 7.

We do not sell, rent, or trade your personal data. We share data only in the following circumstances:

• Service providers — trusted third parties who help us operate the Service, bound by appropriate confidentiality and data protection obligations.
• Analytics providers — as described in Section 4, to help us understand and improve usage of the Service.
• Legal requirements — where required by law, regulation, court order, or a lawful request from a government or law enforcement authority, or where necessary to protect the rights, property, or safety of DiecastVault or its users.

We retain your account and collection data for as long as your account remains active. If you delete your account, your collection data (vehicle records, photographs, trade logs, etc.) is deleted, except where retention of certain records is required by law.

Security and login records described in Section 2 are retained for a limited period for security purposes and are periodically purged.

We implement reasonable security practices and procedures, as required under applicable Indian law, to protect your personal data from unauthorised access, alteration, disclosure, or destruction.

No method of transmission or storage is completely secure. In the event of a data breach affecting your personal data, we will take reasonable steps to notify affected users and relevant authorities as required by applicable law.

As a data principal under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access a summary of the personal data we hold about you and how it is processed.
• Correct or update inaccurate or incomplete personal data — most data can be edited directly within your account.
• Erase your personal data by deleting your account, subject to Section 5 and Section 7.
• Export your collection data in a structured format (e.g. JSON or CSV).
• Withdraw consent for any processing based on consent, at any time.
• Raise a grievance regarding how your data is handled, as described in Section 11.

To exercise these rights, contact us at [email protected]. We may need to verify your identity before processing your request, and will respond within 30 days.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The "last updated" date at the top of this page will be revised whenever we make material changes. Continued use of the Service after changes are posted constitutes acceptance of the updated policy.

In accordance with the Information Technology Act, 2000 and the rules made thereunder, if you have any questions, concerns, or complaints about this Privacy Policy or how we handle your personal data, please contact our support at:

[email protected]

We will acknowledge and address all valid grievances within 30 days. If you remain unsatisfied, you may approach the Data Protection Board of India as provided under the Digital Personal Data Protection Act, 2023.