Privacy Policy

This Privacy Policy describes how CashOfOne.in ("CashOfOne", "we", "our", or "us"), operated by Geenexa Waste Management LLP, collects, uses, stores, discloses, and protects personal data when you access or use our website, mobile application, and related services (collectively, the "Services"). This Policy is issued in compliance with the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, and should be read together with our Terms & Conditions.

1. Data Fiduciary Information

CashOfOne.in is operated by Geenexa Waste Management LLP, a limited liability partnership registered in Bengaluru, Karnataka, India. We are authorized by the Central Pollution Control Board (CPCB) as a professional refurbisher and recycler under the E-Waste (Management) Rules, 2022.

2. Categories of Personal Data We Collect

We may collect and process the following categories of personal data:

• Identity and KYC information;
• Contact details;
• Device information (including IMEI/serial numbers);
• Transaction details;
• Payment and payout information;
• Logistics information;
• Communications with customer support;
• Technical or usage data collected through cookies and similar technologies.

3. Sources of Personal Data

Personal data is collected directly from you, automatically through your use of our Services, and from trusted third-party partners such as logistics providers, payment processors, and compliance databases, as permitted under applicable law.

4. Purpose and Lawful Basis of Processing

We process personal data for lawful purposes including account creation, transaction processing, device inspection, KYC verification, fraud prevention, customer support, legal compliance, warranty management, and service improvement. Processing is based on consent, legitimate use, or legal obligation as recognized under the DPDP Act, 2023.

5. Children’s Data

Our Services are intended only for individuals who are 18 years of age or older. We do not knowingly collect personal data of children. If we become aware that a child’s personal data has been collected, we will delete it promptly.

6. Disclosure of Personal Data

We may share personal data with logistics partners, payment service providers, refurbishers, warranty service partners, regulators, and law enforcement authorities where required by law. We do not sell personal data to third parties.

7. Cross-Border Data Transfers

Where required for operational efficiency, personal data may be processed outside India, subject to safeguards permitted under the DPDP Act and subject to countries not restricted by the Government of India.

8. Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, or as required under applicable laws, including tax, e-waste compliance, and cybersecurity obligations.

9. Data Security

We implement reasonable technical and organizational security measures to protect personal data against unauthorized access, loss, misuse, or alteration, including access controls, encryption where appropriate, audit logs, and incident response procedures.

10. Rights of Data Principals

You have the right to access, correct, update, erase your personal data, withdraw consent, nominate a representative, and seek grievance redressal as provided under the DPDP Act, 2023. Requests may be submitted through our designated grievance channel.

11. Grievance Redressal

Any complaints or concerns regarding processing of personal data may be addressed to our designated Grievance Officer using the contact details provided on our website. We aim to resolve grievances within the timelines prescribed by law.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal, regulatory, or operational requirements. Updated versions will be posted on our website with a revised effective date.