PRIVACY POLICY
Effective Date: September 2026 • Last Updated: September 2026
Explains how we collect, use, share, and protect your personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and Information Technology Act, 2000.
Smart Nuts and Bolts (SNB) ("SnagIt", "we", "us") operates snagit.in. This Privacy Policy explains how we collect, use, share, and protect your personal data, in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
By using the Platform, you consent to the practices described in this Policy.
1. Information We Collect
a. Account & Verification Data: Name, college/university email ID, phone number, profile photo, and institutional affiliation.
b. Transaction Data: Billing/delivery address, order/listing history, rental history, and transaction amounts. We do not collect or store your full card, UPI, or net banking credentials — these are handled directly by our PCI-DSS compliant payment gateway partner.
c. Delivery Data: Pickup/drop location details on campus, delivery status, and communication needed to complete delivery.
d. Device & Usage Data: IP address, browser type, device identifiers, pages visited, and cookies (see Section 6).
e. Communications: Messages sent through the Platform, support tickets, and Lost & Found reports.
2. How We Use Your Information
We use your data to: verify your student eligibility; create and manage your account; process orders, rentals, payments, and refunds; coordinate delivery/pickup; prevent fraud and enforce our Terms; provide customer support; send transactional and (with consent) promotional communications; and comply with legal obligations.
3. Legal Basis for Processing
We process your personal data on the basis of your consent (obtained at signup and at checkout), for the performance of the contract between you and SnagIt (i.e., completing your order/rental), and to comply with applicable law.
4. Sharing of Information
We share your data only as necessary with:
- Payment gateway partner(s) — to process payments and refunds securely.
- Delivery personnel/logistics partners — limited to the information needed to complete pickup/delivery (name, phone number, location).
- Your college/university — only where required to verify eligibility, and only to the extent necessary.
- Law enforcement or regulators — where required by law, court order, or to protect the rights, safety, or property of SnagIt or its users.
We do not sell your personal data to third parties.
5. Data Retention
We retain your personal data for as long as your account is active and for a reasonable period thereafter to comply with legal, accounting, tax, and fraud-prevention obligations, after which it is securely deleted or anonymised.
6. Cookies
We use cookies and similar technologies to keep you signed in, remember your preferences, and understand Platform usage. You can control cookies through your browser settings; disabling some cookies may affect Platform functionality.
7. Data Security
We implement industry-standard technical and organisational measures (including encryption in transit, access controls, and secure hosting) to protect your data. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
8. Your Rights
Under the DPDP Act, you have the right to: access the personal data we hold about you; request correction or updating of inaccurate data; request erasure of your data (subject to legal retention requirements); withdraw consent at any time; and nominate another individual to exercise your rights in the event of your death or incapacity.
To exercise these rights, contact us at info@snagit.in.
9. Children's Data
The Platform is intended for users aged 18 and above with a valid institutional email. We do not knowingly collect data from individuals under 18.
10. Data Storage & Transfer
Your data is stored on servers located in India. We do not transfer personal data outside India except where necessary for service functionality and in compliance with applicable law.
11. Grievance Officer
In accordance with the IT Rules, 2011 and the DPDP Act, you may contact our Grievance Officer / Data Protection Contact for any privacy concerns:
We aim to respond within 30 days as required under the DPDP Act.
12. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be notified via the Platform or email. Continued use after such changes constitutes acceptance.