Privacy Policy
Last updated: July 28, 2026
This Privacy Policy explains how SprukoMarket, operated by Spruko Technologies Pvt Ltd, collects, uses, discloses, stores, and protects personal information when you visit our website, create or use an account, purchase or download digital products, upload or sell products as an author, communicate with us, or otherwise use our services.
SprukoMarket is a digital-products marketplace based in India and available to users and authors in multiple countries.
We use personal information to provide and secure the marketplace, process purchases and payouts, issue and manage licences, support users and authors, prevent fraud, comply with legal obligations, improve our services, and measure advertising where permitted.
You can manage optional cookies through Cookie Settings and review our Cookie Policy. U.S. users may also review Do Not Sell or Share My Personal Information .
1. Scope
This Privacy Policy applies to personal information processed in connection with SprukoMarket websites, marketplace services, user and author accounts, product listings, purchases, licences, downloads, customer support, live chat, marketing, analytics, and related services.
It does not govern third-party websites, applications, payment services, identity-verification services, social sign-in services, or other services that you use independently. Those providers process information under their own privacy notices when they act as independent controllers.
2. Who is responsible for your information?
Spruko Technologies Pvt Ltd operates SprukoMarket and is generally the controller of personal information processed through the marketplace. Under Indian data-protection law, we may also be described as the data fiduciary.
In limited situations, we may process information on behalf of another organization under a separate written agreement. In those cases, that organization determines the purposes and means of processing, and we act as its processor or service provider.
Controller contact details are provided in the Contact section.
3. Key definitions
- Personal information or personal data: Information that identifies, relates to, describes, or can reasonably be linked with an identifiable person or household, as defined by applicable law.
- Processing: Any action performed on personal information, including collecting, recording, organizing, storing, using, disclosing, transferring, restricting, anonymizing, or deleting it.
- Controller or data fiduciary: The organization that determines why and how personal information is processed.
- Processor, service provider, or contractor: An organization that processes personal information for a controller under contractual restrictions.
- Author: A person or business that uploads, licenses, distributes, or sells digital products through SprukoMarket.
4. Information we collect
4.1 Account and profile information
Name, username, email address, encrypted password, profile image, biography, account settings, language, country or region, communication preferences, and other information you choose to add to your profile.
4.2 Purchase, licence, and commercial information
Products viewed or purchased, order references, transaction status, licences, invoices, refunds, subscriptions where offered, download history, cart activity, and customer-support information associated with an order.
4.3 Author and seller information
Product files, descriptions, previews, portfolio information, sales and earnings records, payout status, tax or business information, support and dispute records, and information needed to administer an author account.
4.4 Payment and payout information
Transaction identifiers, payment status, billing contact information, masked payment details, refund information, payout records, and other information provided by payment or payout partners.
Full card numbers are processed by the payment provider and are not intended to be stored by SprukoMarket. Depending on the payout method, payment providers may collect bank, wallet, tax, or identity information directly under their own privacy notices.
4.5 Identity and business-verification information
Where author verification is enabled or legally required, a trusted verification provider may collect a government-issued identity document, business-registration information, address information, and a selfie or live image used to confirm identity.
The verification provider may send us a verification result, risk status, document type, verified name, or limited supporting records needed for compliance, fraud prevention, audit, or dispute handling. We do not use identity documents or biometric comparison data for advertising.
4.6 Technical, device, and usage information
IP address, browser and device type, operating system, approximate location derived from IP address, referring and exit pages, pages viewed, clicks, session duration, timestamps, diagnostic logs, security events, cookie identifiers, advertising identifiers, and interactions with website features or embedded content.
4.7 Communications and support information
Messages sent through the Help Center, email, live chat, product comments, reviews, dispute communications, security reports, feedback, and other communications you send to us.
4.8 Marketing and preference information
Email subscription status, cookie choices, privacy choices, advertising preferences, campaign engagement, and records maintained to honour unsubscribe or opt-out requests.
4.9 Public information
Author shop names, avatars, product listings, descriptions, previews, reviews, ratings, comments, portfolio items, and other information you choose to make public through SprukoMarket.
5. How we collect information
- Directly from you: when you register, sign in, update a profile, purchase or download a product, upload a product, request a payout, submit verification information, contact support, or exercise a privacy right.
- Automatically: through cookies, tags, logs, pixels, local storage, security tools, analytics technologies, and similar technologies.
- From payment and payout providers: such as transaction status, payment reference, refund status, fraud indicators, and payout confirmation.
- From identity and business-verification providers: such as verification status and compliance results.
- From social sign-in providers: when you choose to register or sign in using a supported third-party account.
- From analytics and advertising providers: where permitted by law and your cookie choices.
- From users, authors, rights holders, and public sources: where needed to investigate disputes, intellectual-property complaints, fraud, abuse, or legal compliance.
7. Why we use personal information and our legal bases
The legal basis depends on your location and the processing activity. Where the GDPR or UK GDPR applies, we generally rely on contract, legitimate interests, consent, or legal obligation. Under Indian law, we rely on consent or another lawful use permitted by applicable law.
| Purpose | Information typically used | Typical GDPR/UK GDPR basis |
|---|---|---|
| Provide accounts and marketplace services | Account, profile, commercial, author, licence, and technical data | Contract; legitimate interests |
| Process purchases, refunds, invoices, and payouts | Account, transaction, billing, payment, and payout data | Contract; legal obligation; legitimate interests |
| Issue licences and enable downloads | Account, order, licence, and download data | Contract; legitimate interests |
| Verify authors and marketplace traders | Identity, business, account, payout, and verification data | Legal obligation; legitimate interests; consent where required |
| Secure the platform and prevent fraud or abuse | Account, transaction, technical, security, device, and verification data | Legitimate interests; legal obligation |
| Provide support and resolve disputes | Account, order, communications, product, and technical data | Contract; legitimate interests; legal obligation |
| Operate live chat and optional features | Session, account, communications, and functional-cookie data | Contract; legitimate interests; consent where required |
| Measure and improve the website | Technical, usage, analytics, and diagnostic data | Legitimate interests; consent where required |
| Send transactional and security communications | Account, order, licence, and contact data | Contract; legitimate interests; legal obligation |
| Send marketing communications | Contact, subscription, purchase, and preference data | Consent; legitimate interests where permitted |
| Measure advertising and conversions | Cookie identifiers, advertising identifiers, event, device, and transaction data | Consent where required; legitimate interests where permitted |
| Comply with law and maintain records | Account, identity, author, transaction, tax, communications, and technical data | Legal obligation; legitimate interests |
| Establish, exercise, or defend legal claims | Any information relevant to the claim, complaint, investigation, or dispute | Legitimate interests; legal obligation |
Where we rely on legitimate interests, those interests include operating and improving a secure marketplace, preventing fraud, protecting users and authors, enforcing contracts, supporting customers, and measuring business performance. We consider the nature of the information, the context of processing, and the effect on individuals before relying on this basis.
8. Automated tools and fraud checks
We and our service providers may use automated rules, device signals, risk scores, or similar tools to identify fraud, account compromise, suspicious payments, policy violations, abusive activity, or security threats.
Where an automated process makes or materially supports a decision that produces legal or similarly significant effects, we will provide any notice, explanation, human-review option, access right, or opt-out right required by applicable law.
10. Third parties acting as independent controllers
Some third parties determine their own purposes and means of processing and are not acting solely on our instructions. These may include payment providers, digital wallets, banks, social sign-in providers, identity verification providers, tax authorities, and certain advertising or embedded-content providers.
Their processing is governed by their own privacy notices. We encourage you to review the notice presented by the relevant provider before using its service.
12. Analytics, advertising, and enhanced measurement
Subject to applicable law and your cookie choices, we may use Google Analytics and Google Ads to understand website activity, attribute advertising visits, measure purchases and other conversions, evaluate campaign effectiveness, and support remarketing or personalized advertising where permitted.
These services may process cookie or device identifiers, IP address, browser and device information, approximate location, page activity, referral information, advertisement interactions, and conversion events.
Where enabled and permitted, enhanced-conversion measurement may use limited first-party information supplied during registration or checkout, such as an email address or telephone number. The information is formatted and transmitted to the advertising provider for conversion measurement subject to applicable consent choices and provider requirements.
You can disable Analytics or Advertisement cookies at any time through Cookie Settings. You may still see advertisements after opting out, but they may be less personalized and advertising measurement may be limited.
13. U.S. state privacy disclosures
This section applies only where a U.S. state privacy law applies to SprukoMarket and grants the relevant right.
We do not sell personal information for monetary compensation. Some disclosures involving advertising cookies, identifiers, internet activity, approximate geolocation, or inferred interests may be considered a “sale,” “sharing,” or targeted advertising under certain U.S. state laws.
| Category | Examples | Collected | Disclosed for business purposes | Shared for targeted advertising |
|---|---|---|---|---|
| Identifiers | Name, email, username, IP address, cookie and device identifiers | Yes | Yes | May occur when Advertisement cookies are enabled |
| Customer-record information | Contact, account, billing, tax, and business information | Yes | Yes | No, except limited identifiers where legally treated as sharing |
| Commercial information | Purchases, licences, downloads, refunds, and transaction history | Yes | Yes | Conversion events may be used for ad measurement where enabled |
| Internet or network activity | Pages viewed, clicks, referral URLs, sessions, and ad interactions | Yes | Yes | May occur when Advertisement cookies are enabled |
| Approximate geolocation | Country, region, or city inferred from IP address | Yes | Yes | May occur when Advertisement cookies are enabled |
| Professional or business information | Author business name, role, registration, tax, and payout information | Where applicable | Yes | No |
| Sensitive personal information | Account credentials and author identity-verification information | Where applicable | Only for permitted operational, security, verification, or legal purposes | No |
| Inferences | Interests or preferences inferred from marketplace activity | Where enabled | Yes | May occur when Advertisement cookies are enabled |
You may opt out of sale, sharing, or targeted advertising by opening Cookie Settings and disabling the Advertisement category, or by visiting: Do Not Sell or Share My Personal Information .
We do not knowingly sell or share personal information of individuals under 16 where an opt-in authorization is required by applicable law.
14. International data transfers
Spruko Technologies Pvt Ltd is based in India, and our service providers, users, and authors may be located in other countries. Your personal information may therefore be processed in India and in countries where our service providers or business partners operate.
Data-protection laws in those countries may differ from the laws where you live. Where applicable law requires transfer safeguards, we use or require an appropriate legal mechanism. Depending on the transfer, this may include an adequacy decision, the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum or Agreement, contractual protections, or another approved mechanism.
You may contact us for information about the safeguards relevant to a particular transfer. We may redact confidential or commercially sensitive information from any copy provided.
15. How long we keep personal information
We keep personal information only for as long as reasonably necessary for the purposes described in this policy, including providing services, maintaining licences and transaction records, resolving disputes, preventing fraud, enforcing agreements, meeting tax and accounting duties, and complying with legal requirements.
| Information | Retention approach |
|---|---|
| Account and profile information | Kept while the account is active and for a limited period after closure for administration, backup, dispute, security, and legal purposes. |
| Orders, licences, payments, payouts, invoices, and tax records | Kept for the period required to provide licences, maintain transaction history, comply with tax and accounting law, resolve disputes, and establish or defend legal claims. |
| Author verification and compliance information | Kept only for as long as needed for verification, marketplace integrity, fraud prevention, audit, sanctions, legal compliance, and dispute handling. |
| Support, live-chat, and dispute communications | Kept for as long as needed to provide support, maintain service quality, resolve disputes, and comply with legal obligations. |
| Security, fraud, and technical logs | Kept for a limited period based on operational and security needs, and longer where necessary for an incident, investigation, claim, or legal obligation. |
| Marketing preferences and suppression records | Kept while marketing is active and, where necessary, after an unsubscribe request so that we can continue to honour the opt-out. |
| Cookie and consent records | Kept according to the durations described in our Cookie Policy and consent-management configuration. |
When information is no longer required, we delete, anonymize, aggregate, or securely isolate it, subject to backup cycles and legal-retention requirements.
16. Security
We use reasonable technical and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.
- Encrypted HTTPS/TLS connections
- Hashed passwords and access controls
- Session, CSRF, anti-bot, and fraud-prevention controls
- Role-based access for authorized personnel
- Payment processing through external payment providers
- Logging, monitoring, backups, and incident-response procedures
No website, transmission method, or storage system is completely secure. You are responsible for protecting your password, device, and account credentials and for notifying us promptly of suspected unauthorized use.
17. Responsible security disclosure
To report a suspected security vulnerability, use the SprukoMarket Help Center or email [email protected]. Include a clear description, affected URL or feature, reproduction steps, and any non-destructive proof of concept.
18. Your privacy rights
Depending on where you live and which law applies, you may have the right to:
- Request access to or a copy of your personal information
- Request correction of inaccurate or incomplete information
- Request deletion or erasure
- Request restriction of processing
- Object to certain processing, including direct marketing
- Request data portability where applicable
- Withdraw consent at any time for future processing based on consent
- Opt out of sale, sharing, or targeted advertising where applicable
- Limit certain uses of sensitive personal information where applicable
- Appeal a denied privacy request where applicable
- Complain to a data-protection or privacy authority
- Receive equal service and not be unlawfully discriminated against for exercising a privacy right
Rights are subject to legal conditions and exceptions. For example, we may retain information needed to complete a transaction, maintain a licence, comply with law, protect security, prevent fraud, or establish and defend legal claims.
To exercise a right, submit a request through the SprukoMarket Help Center or email [email protected]. We may request information reasonably necessary to verify your identity, authority, account, or request.
19. Regional privacy information
19.1 European Economic Area and United Kingdom
Where the GDPR or UK GDPR applies, you may have rights of access, rectification, erasure, restriction, objection, portability, and withdrawal of consent. You may also complain to the data-protection authority in the country where you live, work, or believe an infringement occurred.
We generally respond within one month, although applicable law may permit an extension for complex or numerous requests.
19.2 India
Where the Digital Personal Data Protection Act and Rules apply and the relevant provisions are in force, you may have rights to obtain information about processing, request correction, completion, updating, or erasure, use our grievance-redressal process, and nominate another person to exercise rights in the event of death or incapacity.
You may contact the Grievance Officer listed in the Contact section.
19.3 United States
Depending on the applicable state law, you may have rights to know or access, correct, delete, obtain a portable copy, opt out of sale, sharing, targeted advertising, or certain profiling, limit certain sensitive-data uses, appeal a denied request, and receive non-discriminatory treatment.
Use our Do Not Sell or Share My Personal Information page or Cookie Settings for advertising-related opt-outs.
20. Complaints and appeals
Contact us first if you have a concern about our privacy practices. We will review the complaint and respond within the timeframe required by applicable law.
Where you have a legal right to appeal a denied privacy request, reply to our decision or submit a new Help Center request marked Privacy Appeal.
You may also have the right to complain directly to your local privacy, consumer-protection, or data-protection authority.
21. Marketing choices
- Email: Use the unsubscribe link in a marketing email or submit a request through our Help Center. Unsubscribing from marketing does not stop transaction, security, licence, account, or service messages.
- Cookies and advertising: Open Cookie Settings and disable Analytics or Advertisement cookies.
- Browser and device controls: You may block or delete cookies through your browser, although doing so may affect login, checkout, preferences, embedded content, or other features.
22. Information you make public or provide to others
Information posted publicly through profiles, product listings, reviews, comments, forums, or portfolio pages may be viewed, copied, indexed, or used by other people. Do not publish information you do not want to make public. Information shared directly with another user, author, payment provider, or third-party website is also subject to that recipient’s practices.
23. Children’s privacy
SprukoMarket is not directed to children or individuals under 18, and they are not permitted to create an account or use author services unless expressly allowed under our Terms of Service and applicable law.
We do not knowingly collect personal information from children in violation of applicable law. If you believe a child has provided personal information, contact [email protected]. We will investigate and delete or otherwise handle the information as required by law.
24. Account closure and deletion requests
To close an account or request deletion, submit a request through the SprukoMarket Help Center or email our privacy contact.
Deleting an account does not necessarily delete every record immediately. We may retain limited information where required for active licences, transaction history, tax or accounting obligations, payment disputes, chargebacks, fraud prevention, marketplace integrity, security, legal claims, backups, or enforcement of our Terms of Service.
25. Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes in our services, technologies, providers, legal requirements, or privacy practices. We will publish the updated version on this page and revise the “Last updated” date. Where required by law, we will provide additional notice or request renewed consent.
27. Contact and grievance information
For customer support, technical assistance, account issues, and privacy or data-rights requests, use:
SprukoMarket Help Center
https://help.sprukomarket.com
Privacy and data-protection contact
[email protected]
Grievance Officer — India
Name: A. UdayKumar
Email:
[email protected]
Address: LIG-215, 1-8-67/83, APIIC Colony, ECIL, Kushaiguda,
Hyderabad, Telangana 500062, India
Security reports
[email protected]
Legal and intellectual-property notices
[email protected]
·
[email protected]
SprukoMarket is operated by Spruko Technologies Pvt Ltd, India.