Legal

Privacy Policy

Trust is the foundation of our network. Here's exactly what we collect, why, and the control you keep.

CrazyTrio Private Limited · Effective 20 February 2026 · Last updated 23 August 2026

About this policy

ValidationCrew (www.validationcrew.com) is owned and operated by CrazyTrio Private Limited, a company incorporated under the Companies Act, 2013 (India). This Privacy Policy covers everyone who uses the platform: Builders who post missions and Validators who complete them.

Detail Value
Legal entity CrazyTrio Private Limited
CIN U92490AP2020PTC115908
Offices Hyderabad, India; Houston, USA
Support email validationcrew.support@gmail.com
Effective date 20 February 2026
Last updated 23 August 2026

In this policy, "CrazyTrio", "ValidationCrew", "we", "us" and "our" mean CrazyTrio Private Limited. "You" means any person or organisation using the platform.

This policy is written and published in English. Where we provide a translation into another language for convenience, the English version is authoritative and governs in the event of any conflict or inconsistency between the two.

We collect only what we need to match Builders with Validators, run missions and pay people, and we never sell your personal data. This policy is written to meet India's Digital Personal Data Protection Act, 2023 (DPDP Act), the DPDP Rules, 2025, and the Information Technology Act, 2000 and its rules.

1. Who is responsible for your data

CrazyTrio Private Limited is the Data Fiduciary for personal data processed through ValidationCrew. Where a Builder collects personal data from Validators inside a mission (for example, interview recordings), the Builder is responsible for its own use of that data and must follow Section 5 of our Terms of Service.

2. What we collect

Category Examples Who it applies to
Account data Name, email, phone, password (stored hashed), 2FA secrets and backup codes Everyone
Profile and demographic data Age, gender, city, country, language, occupation, interests, devices owned, marital status, children, income range, and optional physical attributes (height, weight, skin tone, hair type, body type) Validators
Company data Company name, website, role, billing address Builders
Mission content Mission briefs, test cases, product builds, credentials you share for testing Builders
Submissions Answers, ratings, screenshots, screen recordings, video, audio, files uploaded as proof, daily check-ins Validators
Payment and tax data PAN, bank account or UPI details for payouts, transaction records, invoices. Card data is handled by our payment gateway, not stored by us Builders and Validators
Verification data Documents or work samples submitted for Tester verification Validators applying for Tester status
Support data Tickets, emails and chat messages Everyone
Usage and device data IP address, browser, device type, pages visited, clicks, session recordings, cookies Everyone

Demographic and physical-attribute fields are optional unless a mission you choose to join requires them. You can leave them blank or delete them at any time; you may simply see fewer missions.

3. Why we use it

  • To create and secure your account, including two-factor authentication.
  • To match Validators to missions based on profile, demographics and verification tier.
  • To run missions: deliver briefs, collect submissions and show results to the Builder who paid for them.
  • To process payments, platform fees, refunds and Validator payouts, and to meet tax obligations such as TDS.
  • To verify Testers, prevent fraud, fake accounts and duplicate submissions.
  • To generate test cases and summaries using AI tools (see Section 4).
  • To send transactional emails (mission updates, payment notices, security alerts). Marketing emails only with your consent, and you can unsubscribe any time.
  • To improve the platform using analytics.
  • To build aggregated, de-identified insights about how products are validated. These cannot identify you and are never sold as personal data.

Our legal basis is your consent, given at sign-up and when you join a mission, and the legitimate uses allowed under Section 7 of the DPDP Act (such as complying with law and responding to legal claims).

4. Who we share it with

We share data only as needed to run the platform:

  • Builders see a Validator's submissions for their missions and the profile fields relevant to that mission. Builders do not see your email, phone, PAN or bank details unless you share them yourself.
  • Service providers acting on our instructions: hosting (Railway), payments and payouts (Cashfree, and Stripe for international payments), email delivery (Google Workspace / Gmail), analytics (Google Analytics, Microsoft Clarity), customer support (Freshdesk), and AI processing (OpenAI and OpenRouter, for test-case generation).
  • Authorities when required by law, court order or a valid government request.
  • A buyer or successor if CrazyTrio is merged or acquired, under the same protections.

We do not sell or rent personal data to advertisers, brands or data brokers.

5. International transfers

Some of our providers store or process data outside India, including in the United States. We transfer data only to countries not restricted by the Government of India under Section 16 of the DPDP Act, and we use providers with appropriate security commitments.

6. Cookies and analytics

We use essential cookies to keep you logged in and secure. With your consent, we use Google Analytics and Microsoft Clarity, which may record anonymised sessions (clicks, scrolls, page views) to help us fix usability problems. Password fields and payment fields are masked. You can manage non-essential cookies through our cookie banner or your browser.

7. How long we keep it

Data Retention
Account and profile While your account is active, deleted within 90 days of closure
Submissions and mission content For the life of the mission plus 12 months, unless the Builder account is closed earlier
Payment, invoice and tax records 8 years, as required by Indian tax and company law
Security and access logs At least 1 year, as required under the IT Rules and CERT-In directions
Support tickets 3 years

8. How we protect it

We use encryption in transit (HTTPS), hashed passwords, mandatory two-factor authentication, rate limiting, role-based admin access and restricted access to uploaded files. No system is fully secure. If a breach affects your data, we will notify you and the Data Protection Board of India as required by the DPDP Rules.

9. Your rights

Under the DPDP Act you can:

  • Access a summary of the personal data we hold about you and how we use it.
  • Correct, update or complete your data.
  • Erase your data, subject to legal retention requirements.
  • Withdraw consent at any time. Withdrawal does not affect processing already done.
  • Nominate another person to exercise your rights if you die or become incapacitated.
  • Raise a grievance and, if unresolved, complain to the Data Protection Board of India.

You can do most of this from Settings, or email the Grievance Officer. We respond within 30 days.

10. Children

ValidationCrew is only for people aged 18 and over. We do not knowingly collect data from anyone under 18. If we learn we have, we delete it. Builders must not design missions that target or recruit children.

11. Grievance Officer

Detail Value
Name Ashok Kumar
Designation Grievance Officer, CrazyTrio Private Limited
Email support@validationcrew.com
Address Madhapur, Hyderabad, Telangana 500081, India

We acknowledge grievances within 24 hours and resolve them within 15 days, as required under the IT Rules, 2021.

12. Changes to this policy

We will post updates here and change the "Last updated" date. For material changes, we will notify you by email or in-app at least 7 days before they take effect.