Privacy Policy

1. Who we are

HNX Web Solutions ("HNX Web", "we", "us") builds and operates websites and web applications for our clients, including hnxweb.com and platforms we develop such as cricteam.hnxweb.com. This policy explains what information we collect across these sites, why we collect it, and how it's handled.

2. Information we collect

Depending on which of our sites or tools you use, we may collect:

• Contact form details: name, phone number or email, and any project details you choose to share via hnxweb.com.
• Phone number: used to log in via WhatsApp verification on platforms like cricteam.hnxweb.com, and to identify your role (organiser, captain, or player) within that platform.
• Auction and team data: if you use cricteam.hnxweb.com, information you or your organiser enters, such as team names, player details, and bid activity.
• Basic technical data: standard web logs (IP address, browser type, pages visited) collected automatically by our hosting provider for security and performance purposes.

3. WhatsApp login & OTP verification

Some of our platforms, including cricteam.hnxweb.com, let you sign in using your WhatsApp number instead of a traditional password. Here's exactly how that works:

• You enter your phone number, and we send a one-time verification code to that number via WhatsApp, using the official WhatsApp Business Platform (operated by Meta).
• We generate this code ourselves and store it temporarily (for a few minutes) solely to confirm the code you enter matches — it is deleted immediately after use or once it expires.
• Once verified, we treat your phone number as your account identifier and use it to determine your role and permissions within the platform.
• We do not read, store, or have access to your WhatsApp messages, contacts, or any other WhatsApp account data beyond the phone number itself and the delivery status of the verification message.

4. How we use your information

• To authenticate you and give you access to the correct area of the platform based on your role.
• To operate core features such as team registration, auction bidding, and results tracking.
• To respond to enquiries submitted through our contact form.
• To maintain the security, stability, and performance of our websites.
• To improve our services based on aggregated, non-identifying usage patterns.

5. Third-party services we use

We rely on a small number of trusted providers to run our platforms:

• Meta / WhatsApp Business Platform: delivers the OTP messages used for login. Meta's own privacy policy governs how WhatsApp handles message delivery on its network.
• Cloudflare: hosts our websites (Cloudflare Pages) and provides underlying infrastructure such as data storage for login sessions and security/network protection.

We do not sell your personal information to any third party, and we do not share it with advertisers.

6. Data storage & security

Data is stored using Cloudflare's infrastructure with standard encryption in transit (HTTPS). Access to stored data, including phone numbers and role assignments, is limited to what's needed to operate the platform. While we take reasonable steps to protect your information, no online system can be guaranteed 100% secure.

7. Data retention

Verification codes are deleted immediately after use or expiry. Account and role information (such as your phone number and team association) is retained for as long as the relevant auction, tournament, or platform account remains active, or until you request its deletion.

8. Cookies

Our sites may use minimal, functional cookies or local session storage to keep you logged in and remember basic preferences. We do not use tracking cookies for advertising purposes.

9. Your rights & choices

You can ask us to:

• Tell you what information we hold about you.
• Correct inaccurate information.
• Delete your account and associated data, subject to any records we're required to keep for legal or operational reasons (e.g. ongoing auction records).

To make any of these requests, contact us using the details below.

10. Children's privacy

Our platforms are intended for organisers, captains, and players participating in cricket team auctions, and are not directed at children under 13. If you believe a child has provided us personal information without appropriate consent, please contact us so we can remove it.

11. Changes to this policy

We may update this policy from time to time as our platforms evolve. The "Last updated" date at the top of this page will reflect the most recent revision. Continued use of our sites after an update means you accept the revised policy.

12. Contact us

Questions about this policy or your data? Reach out:

• WhatsApp: +91 88607 62906
• Email: hello@hnxweb.com
• Website: hnxweb.com