Effective Date: October 14, 2026
1.1 This Privacy Policy (the "Policy") explains how TDW Technologies Private Limited, operating under its trademarked name AutoVRse ("AutoVRse", "we", "us", "our"), collects, uses, discloses, retains and protects personal information when you use GRO, our virtual reality game (the "Game"), together with our related websites, support channels, software, updates and documentation (together, the "Services").
1.2 AutoVRse is the data controller for the personal information described in this Policy.
1.3 This Policy does not cover:
the personal information that Meta Platforms collects and uses through your Meta account, the Meta Horizon Store, your headset or Meta's own features. That processing is governed by Meta's privacy policy; or
third-party services you choose to use alongside the Game, such as Discord, YouTube or social media platforms, each of which operates under its own privacy policy.
1.4 This Policy should be read together with the GRO Terms of Service.
1.5 If you do not agree with this Policy, please do not use the Services.
In this Policy:
"Child" means a person under 13 years of age, unless local law defines the term differently;
"Personal Information" means any information relating to an identified or identifiable natural person, and includes "personal data" and "personal information" as those terms are used in applicable privacy laws;
"Parent" means a parent or legal guardian;
"Preteen Account" means a parent-managed Meta account for a child aged 10 to 12 (the applicable age range may vary by country);
"Teen" means a person aged 13 to 17 years; and
"User", "you" or "your" means any person who accesses or uses the Services
3.1 The Game is intended for players aged 13 and over.
3.2 Access to the Game requires a Meta account. Meta operates three account types relevant to this Policy: adult accounts for users 18 and over; teen accounts for users aged 13 to 17, which are managed by the Teen and may be placed under parental supervision; and Preteen Accounts for children aged 10 to 12, which are created and managed by a Parent.
4.1 The section below sets out the categories of Personal Information we collect, why we collect each category, and the legal basis on which we rely.
A. Account and profile
Examples: Meta user identifier; Meta account username; avatar and cosmetic selections; language and accessibility settings; game settings and preferences
Why we collect it: To authenticate you, create and restore your player profile, and apply your settings
Legal basis: Performance of a contract
B. Purchases and entitlements
Examples: In-app purchase and downloadable content entitlement records; transaction identifiers and timestamps; refund, chargeback and dispute records. Purchases are processed by Meta.
Why we collect it: To deliver items you have bought, restore entitlements, handle refunds and prevent fraud, and to keep accounting records
Legal basis: Performance of a contract; compliance with a legal obligation
C. Technical, session and diagnostic data
Examples: The Photon Cloud region your session connects through; the Game build version; device model; operating system and firmware version; and crash logs, error logs and other diagnostic data
Why we collect it: To connect you to a nearby multiplayer server, identify which build a problem occurred on, and diagnose crashes and defects
Legal basis: Performance of a contract; legitimate interests in service reliability
D. Gameplay data
Examples: Progress, levels, scores, achievements, inventory and farm state; in-game actions and events; session start and end times and duration; feature usage
Why we collect it: To save and restore your progress, operate multiplayer and leaderboards, and balance and improve the Game
Legal basis: Performance of a contract; legitimate interests in improving the Game
E. Multiplayer, social and safety data
Examples: Session and room identifiers; player reports you make or that are made about you; moderation and enforcement records
Why we collect it: To operate multiplayer features, respond to reports, enforce our Terms of Service and keep players safe
Legal basis: Performance of a contract; legitimate interests in player safety and platform integrity
F. Voice data
Examples: Real-time voice audio during multiplayer voice chat. Voice is not recorded or stored on our servers. See Section 6.
Why we collect it: To provide voice chat
Legal basis: Performance of a contract
G. Movement and positional data
Examples: The position, orientation and motion of your headset and controllers, and your hand positions where you use hand tracking. This data is processed in real time and is not stored.
Why we collect it: To place you in the virtual environment, animate your avatar, register your in-game actions, and show your movement to other players in your session
Legal basis: Performance of a contract
H. Support and correspondence
Examples: Email address; Meta or Discord username; Game version and hardware details; your description of the issue; attachments; correspondence history
Why we collect it: To respond to your request, resolve the issue and improve our support
Legal basis: Performance of a contract; legitimate interests in service quality
4.2 Legal basis. For users in the European Economic Area and the United Kingdom, the last column of the table shows the legal basis on which we rely. Where we rely on legitimate interests, we have weighed those interests against your rights and freedoms. For users in India, we process Personal Information on the basis of your consent or, where available, a legitimate use permitted by the Digital Personal Data Protection Act 2023.
4.3 IP address. Your IP address is used to route your connection to our multiplayer and voice provider, and is received by that provider for that purpose. We do not store your IP address. The only location-related information we hold is the Photon Cloud region your session connected through.
4.4 Sources. We collect Personal Information from you, from your headset and the Game, from Meta, and from other players when they submit a report.
5.1 We use Personal Information to:
provide, operate and maintain the Game, including authentication, saving and restoring progress, and delivering purchased items;
run multiplayer sessions, leaderboards and voice chat;
provide customer support and respond to your requests;
detect, investigate and prevent cheating, fraud, abuse, harassment and breaches of our Terms of Service, and take enforcement action;
diagnose crashes, defects and performance problems, and improve stability, comfort and game feel;
understand in aggregate how the Game is used so that we can make development decisions;
send you service communications about your account, purchases, outages and material changes to our terms or this Policy; and
comply with legal obligations, respond to lawful requests, keep accounting and tax records, and establish, exercise or defend legal claims.
6. Service providers and other disclosures
6.1 Service providers. We use the third-party providers listed in Annex A to operate the Game. They process Personal Information on our instructions and for no other purpose.
6.2 Other disclosures. We may disclose Personal Information:
to law enforcement, regulators, courts or other public authorities where we are legally required to do so, or where disclosure is necessary to protect the safety of a user or of the public;
to our professional advisers, including lawyers, auditors and insurers, under duties of confidentiality;
to establish, exercise or defend legal claims; and
to an actual or prospective buyer, investor or successor in connection with a merger, acquisition, financing, reorganization or sale of assets, subject to confidentiality obligations and, where the transaction completes, on terms requiring the recipient to honor this Policy.
7.1 We do not sell Personal Information, and we do not share it for cross-context behavioral advertising or targeted advertising. We have not done either in the preceding 12 months.
8.1 The Game is rated 13+. We collect only the Personal Information reasonably necessary to operate the Game, and we never condition participation in the Game, or in any activity, prize or feature within it, on the disclosure of more Personal Information than is reasonably necessary. A Parent may exercise a Teen's rights on the Teen's behalf, as described in Section 12.
8.2 Preteen Accounts, ages 10 to 12
8.2.1 The Game is not designed for or directed to children under 13. A child aged 10 to 12 can reach the Game only if the Parent who manages their Preteen Account approves it using Meta's parental controls. A Parent can remove that approval at any time through the same controls.
8.2.2 Notice to Parents. This Policy, including this Section, describes our practices for a Child's Personal Information.
8.2.3 What we collect and how we use it. Where a Child plays the Game, we collect the categories of Personal Information described in Section 4.1 and use them only for the purposes in Section 5.
8.2.4 Disclosure. We disclose a Child's Personal Information only to the service providers listed in Annex A, to other players in a session as described in Section 8.3, and to authorities where necessary to protect the Child's safety, to comply with law or to protect against liability.
8.2.5 Retention. As set out in Section 10.
8.2.6 Parental rights. A Parent may at any time:
review the Personal Information we hold about their Child;
ask us to correct or delete it;
stop the Child from using the Game.
8.2.7 To make a request, write to privacy.game@autovrse.in from the email address associated with the Parent's Meta account, and include the Child's in-game display name. We may need to take reasonable steps to verify that you are the Child's Parent before we act, so that we do not disclose a Child's information to the wrong person.
8.2.8 If a Parent tells us to stop collecting or using the Child's Personal Information, or asks us to delete it, the Child will no longer be able to play the Game, and progress and purchased in-game items will be lost and cannot be restored.
9.1 Your Personal Information may be transferred to, stored in and processed in a country other than the one you live in.
9.2 Where we transfer Personal Information from the European Economic Area or the United Kingdom to a country that does not have an adequacy decision, we rely on the standard contractual clauses approved by the European Commission and the United Kingdom equivalent.
10.1 We keep Personal Information only for as long as we need it for the purpose for which we collected it, and then delete it or irreversibly anonymize it.
10.2 To decide how long to keep each category of Personal Information, we consider the purpose for which we collected it and whether that purpose still applies, for example whether your account is still active; whether we need it to resolve a dispute, enforce our Terms of Service or handle a report; and whether the law requires us to keep it, for example accounting and tax records.
10.3 Deleting your Personal Information does not delete the records that Meta holds about you or your purchases. To exercise rights against Meta, please use Meta's own tools.
11.1 If a personal data breach occurs, we notify the competent authorities and affected individuals where applicable law requires it, including, where the law requires, notifying the authority within 72 hours of becoming aware of the breach.
12.1 Subject to the law that applies to you, you have the right to:
access the Personal Information we hold about you, and receive a copy of it;
correct Personal Information that is inaccurate or incomplete;
delete your Personal Information;
receive a portable copy in a structured, commonly used, machine-readable format, and ask us to transmit it to another controller where technically feasible;
restrict our processing in certain circumstances;
object to processing based on our legitimate interests;
withdraw consent at any time where we rely on it;
not be discriminated against for exercising your rights. We will not deny you the Game, charge you a different price or give you a lower quality experience because you exercised a privacy right;
nominate another person to exercise your rights in the event of your death or incapacity, where Indian law applies; and
complain to a data protection authority or other regulator in the place where you live or work.
12.2 How to make a request. Write to privacy.game@autovrse.in with the subject line "Privacy Rights Request", telling us what you want and giving us your in-game display name.
12.3 Verification. We need to be confident that a request comes from you, or from someone authorized to act for you, before we act on it.
12.4 Authorized agents. You may use an authorized agent, including a Parent acting for a minor. We may ask for proof of the agent's authority.
12.5 Timelines. We acknowledge requests within 10 days and respond within 30 days.
12.6 Cost. We do not charge for responding to a request. Where a request is manifestly unfounded, excessive or repetitive, we may charge a reasonable fee or decline to act, and we will explain why.
12.7 Limits. We may be unable to give full effect to a request where doing so would infringe another person's rights, prejudice an investigation into cheating, abuse or harm to a minor, or conflict with a legal obligation to retain the information. We will tell you which exception we are relying on.
12.8 What deletion means. If you ask us to delete your Personal Information, you will lose your progress, achievements, inventory and purchased in-game items, and they cannot be restored. We will retain the transaction and accounting records we are legally required to keep, and a minimal suppression record so that we can honor your request. Deletion does not affect information held by Meta.
13.1 United States
13.1.1 If you live in a state with a comprehensive consumer privacy law you have the rights described in Section 12, subject to your state's law.
13.1.2 Appeals. If we decline your request, in whole or in part, you may appeal by writing to privacy.game@autovrse.in with the subject line "Privacy Request Appeal" within 60 days of our response. We will respond to your appeal within 45 days. If we deny your appeal, we will tell you how to contact your state Attorney General.
13.2 India
13.2.1 AutoVRse is the Data Fiduciary for the Personal Information described in this Policy.
13.2.2 Data protection contact. Our data protection contact for India is named in Section 17.
13.2.3 Grievance redressal. Write to the email address in Section 17 with the subject line "DPDP Grievance". We will acknowledge within 10 days and respond within 30 days.
13.3 Other jurisdictions
13.3.1 If your local law gives you rights that go beyond this Policy, we will honor them. Nothing in this Policy limits any right you have under mandatory local law.
14.1 The Game. The Game does not use cookies.
14.2 Our website. grogame.com uses only cookies that are necessary for the site to work.
15.1 If you interact with us on Discord or another community platform, that platform collects and uses your information under its own privacy policy. We see the profile information and messages that the platform makes available to us in that setting, and we use it only to run the community and respond to you.
16.1 We may update this Policy to reflect changes to the Game, our practices or the law.
17.1 For any privacy question, request or complaint:
Entity: TDW Technologies Private Limited, operating as AutoVRse
Privacy contact: Angad Raghavan, Privacy Officer
Email: privacy.game@autovrse.in
Postal address: 3rd Floor, Rear Wing, Subham Complex, 1st A Main Road, Sarakki Industrial Area, JP Nagar 3rd Phase, Bengaluru 560078, Karnataka, India