Last updated: 28 August 2026
CRUX respects your privacy and aims to handle personal information responsibly and transparently.
This Privacy Policy explains what information may be collected when you visit cruxlabstools.com, purchase a CRUX digital product, create or use an account, contact us or otherwise interact with the website.
In this Policy, “CRUX”, “we”, “us” and “our” refer to CRUX / The Crux Labs and the operator of the CRUX website.
1. Information We May Collect
The information we collect depends on how you use the website.
Information you provide directly
You may provide information such as:
- your name;
- email address;
- mobile/phone number;
- billing information;
- order number;
- account information, where an account is created;
- information entered during checkout;
- messages submitted through our Contact Us form;
- product, payment or support-related information; and
- any other information you voluntarily provide to us.
Please do not provide sensitive personal information that is not necessary for your purchase or support request.
2. Order and Purchase Information
When you purchase a digital product, we may process information including:
- your name;
- email address;
- phone number where collected;
- billing details where required;
- products purchased;
- order value;
- order date and status;
- payment method;
- transaction or payment reference;
- download permissions and download history; and
- information necessary to provide customer support.
WooCommerce is used to manage CRUX products, orders, customer records and digital-download access.
We use this information to process your order, confirm payment, provide your digital product, maintain purchase records and assist you if a problem occurs.
3. Payment Information
Payments on CRUX are processed through third-party payment service providers such as Razorpay.
When you make a payment, information necessary to process and verify that payment may be transmitted to the payment provider.
The payment provider may process information such as:
- your name;
- contact information;
- transaction information;
- payment method information;
- device or technical information; and
- information required for fraud prevention, regulatory compliance and payment processing.
CRUX does not intend to directly collect or store your complete card number, CVV, UPI PIN, banking password or OTP.
Sensitive payment authentication information is handled by the relevant payment provider, bank, card network, UPI provider or other authorised payment service.
Your use of Razorpay’s payment services is also subject to Razorpay’s applicable privacy practices.
4. Digital Product Delivery
We use your order and contact information to provide access to purchased digital products.
This may include:
- displaying a download on the Order Received page;
- sending order and download information by email;
- maintaining download permissions;
- verifying previous purchases;
- assisting with expired or failed downloads; and
- preventing unauthorised access to paid products.
More information about delivery is available in our Digital Delivery Policy.
5. Purchaser Identification and Watermarking
CRUX may use purchaser-identifying measures for certain paid digital products to discourage unauthorised redistribution.
Where enabled for a particular product, information such as the purchaser’s name, mobile number, order identifier or similar information may be used to create a purchaser-specific watermark or licence identifier.
Where such personalised identification is used, CRUX will aim to make this reasonably clear at or before purchase.
Such information will be used for legitimate product-protection, licence and misuse-prevention purposes and not for unrelated public disclosure.
6. Contact and Support Forms
When you contact CRUX through a website form, we may collect information such as:
- your name;
- email address;
- order number, where relevant;
- type of issue;
- your message; and
- other information you voluntarily provide.
We use this information to respond to your request, investigate payment or delivery problems, provide support and maintain reasonable support records.
Do not include passwords, OTPs, UPI PINs, complete card information or other unnecessary financial credentials in a support message.
7. Customer Accounts
If customer accounts are available and you create or use one, we may store information connected with your account, including:
- account identifier;
- name and contact information;
- order history;
- download history;
- billing information where applicable; and
- account-related preferences.
Account information may be used to provide order history, download access, authentication, password reset and other customer-account functions.
8. Technical Information and Server Logs
When you use the website, certain technical information may be processed automatically.
This may include:
- IP address;
- browser type;
- device type;
- operating system;
- date and time of access;
- pages or website functions accessed;
- error information;
- security logs; and
- other standard server or technical information.
This information may be used to:
- operate the website;
- maintain security;
- diagnose technical problems;
- prevent fraud or abuse;
- investigate errors; and
- improve reliability and performance.
9. Cookies
CRUX uses cookies and similar technologies where necessary for website functionality.
WooCommerce may use essential cookies to perform functions such as:
- remembering cart contents;
- maintaining a customer session;
- recognising changes to the cart;
- supporting checkout;
- maintaining login sessions; and
- providing other ecommerce functionality.
Some of these cookies are necessary for the website, cart or checkout to work correctly.
Disabling essential cookies in your browser may cause parts of the website or checkout process to stop functioning correctly.
10. Analytics, Advertising and Marketing Technologies
CRUX may introduce analytics or advertising technologies in the future to understand website usage or measure marketing campaigns.
If tools such as Google Analytics, Meta Pixel or similar non-essential tracking technologies are introduced, we will review and update this Privacy Policy and implement any additional notice or consent mechanism required by applicable law.
We do not treat a purchase or support enquiry by itself as consent to receive unrelated promotional messages.
Where CRUX introduces an email newsletter or direct marketing system, appropriate choice, consent and unsubscribe mechanisms will be provided where required.
11. How We Use Personal Information
We may use personal information for legitimate and lawful purposes including:
- operating the CRUX website;
- creating and managing orders;
- processing and verifying payments;
- providing digital downloads;
- sending transactional emails;
- providing customer support;
- investigating failed or duplicate payments;
- managing refunds;
- maintaining account and download access;
- preventing fraud, abuse and unauthorised redistribution;
- protecting CRUX intellectual property;
- maintaining website and information security;
- complying with legal, tax, accounting or regulatory obligations;
- resolving disputes or complaints; and
- improving the reliability and usability of our website and services.
We aim to collect only information reasonably necessary for these purposes.
12. Transactional Communications
When you purchase a product or request support, CRUX may send communications necessary to complete or support that interaction.
These may include:
- order confirmations;
- payment-related notifications;
- download information;
- account-related emails;
- password-reset messages;
- refund or support updates; and
- responses to enquiries.
These operational communications are different from promotional marketing messages.
13. How We Share Information
CRUX does not sell personal information.
We may share personal information only where reasonably necessary with service providers that help operate the website and business, such as:
- website hosting providers;
- payment providers such as Razorpay;
- WordPress/WooCommerce-related infrastructure;
- transactional email or SMTP providers;
- form and communication services;
- technical service providers;
- professional advisers such as accountants or legal advisers where necessary; and
- government, regulatory, law-enforcement or judicial authorities where disclosure is required or permitted by law.
Service providers receive only the information reasonably necessary for the relevant service, subject to their respective obligations and privacy practices.
14. Third-Party Services
Some functions on the CRUX website depend on third-party services.
These services may process information independently under their own privacy policies and legal obligations.
CRUX cannot control every aspect of the privacy, security or operational practices of an independent third-party provider.
We therefore recommend reviewing the privacy information provided by a relevant third party where appropriate, particularly for payment services.
15. Data Storage and Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected or where continued retention is required for legal, accounting, taxation, payment, fraud-prevention, dispute-resolution or other legitimate purposes.
For example, order records may need to be retained for longer than an ordinary website enquiry because they form part of transaction and business records.
Download and customer-account information may also be retained where necessary to maintain legitimate purchase access or resolve customer issues.
When information is no longer reasonably required, we may delete, anonymise or securely dispose of it, subject to applicable legal obligations.
16. Data Security
CRUX takes reasonable technical and organisational steps designed to protect personal information from unauthorised access, misuse, alteration, disclosure or loss.
Measures may include, where appropriate:
- HTTPS encryption;
- access controls;
- secure account credentials;
- software and plugin updates;
- restricted administrative access;
- payment processing through established payment providers;
- backups;
- security monitoring; and
- reasonable hosting and server protections.
No website, internet transmission or electronic storage system can be guaranteed to be completely secure.
If we become aware of a personal-data or security incident, we will take reasonable steps to investigate, contain and address it and make notifications where required by applicable law.
17. Your Choices and Rights
Subject to applicable law and legitimate record-retention requirements, you may contact us to request assistance regarding personal information associated with you.
Depending on the circumstances and applicable law, this may include requests to:
- know what personal information we hold about you;
- obtain access to relevant personal information;
- correct inaccurate or incomplete information;
- request deletion or erasure where appropriate;
- withdraw consent where processing depends on consent; or
- raise a grievance about how your personal information has been handled.
Certain information may need to be retained despite a deletion request where retention is necessary to comply with law, maintain legitimate transaction records, prevent fraud, establish or defend legal claims or fulfil another lawful requirement.
We may ask for reasonable information to verify your identity before acting on a privacy request.
18. Withdrawal of Consent
Where we rely on your consent for a particular use of personal information, you may withdraw that consent by contacting us or using any withdrawal mechanism provided for that purpose.
Withdrawal of consent does not normally affect processing that lawfully occurred before withdrawal.
If certain information is necessary to provide a service, withdrawing or refusing that information may prevent us from continuing to provide the relevant service.
19. Information Relating to Minors
CRUX is primarily designed for students, learners and young professionals.
If a user is under 18 years of age, they should use the website and make purchases with the involvement of a parent or lawful guardian where required.
CRUX does not intend to knowingly use children’s personal information for behavioural monitoring, profiling or targeted advertising in violation of applicable law.
As India’s data-protection requirements relating to children come into force or change, CRUX may introduce additional age, consent or verification measures where required.
20. International Processing
Some third-party technology, hosting, email or payment providers may use infrastructure located in India or other countries.
Where personal information is processed through such providers, we will use services in a manner intended to comply with applicable Indian law and any applicable restrictions on cross-border processing.
21. Legal Disclosure
We may disclose information where reasonably necessary to:
- comply with applicable law;
- respond to a lawful government or regulatory request;
- comply with a court or legal order;
- investigate fraud, abuse or security incidents;
- enforce our Terms & Conditions;
- protect the rights, safety or property of CRUX, our customers or others; or
- establish, exercise or defend legal claims.
22. Links to Other Websites
The CRUX website may contain links to third-party websites or services.
Once you leave the CRUX website, the privacy practices of the third-party website apply.
CRUX is not responsible for the privacy practices or content of independent websites that it does not control.
23. Changes to This Privacy Policy
We may update this Privacy Policy when our products, website, payment systems, service providers, analytics tools, legal obligations or privacy practices change.
The current version will be published on this page together with the latest update date.
Material changes may also be communicated through another appropriate method where required.
24. Other CRUX Policies
This Privacy Policy should be read together with:
25. Privacy Questions and Grievances
If you have a question, request or grievance relating to your personal information or this Privacy Policy, please contact CRUX through the Contact Us page.
We will review privacy and personal-information grievances and respond within the timeframe required under applicable law.
26. Contact
For privacy-related questions or requests, please use the Contact Us page on CRUX.