Loading page…
Loading page…
Last updated: September 24, 2026
This policy explains what personal data The Alpha Maker X (“we”, “us”, “our”) collects when you use https://www.thealphamakerx.in, why we collect it, who we share it with, and the rights you have over it. It is written to meet our obligations under India's Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Information Technology Act, 2000.
At checkout, we collect your email address for delivery and your mobile number for Cashfree payment processing. If you create an account, we also collect your name and, where you set one, a password that is stored only as a salted cryptographic hash and is never readable by us. If you sign in with Google instead, we receive your name, email address and profile picture from Google and store no password at all. If you email us for support, we keep that correspondence.
All payments are processed by Cashfree. We never receive, see or store your card number, CVV, UPI PIN, net-banking credentials or bank account details — those are handled entirely inside Cashfree's PCI-DSS compliant systems. What reaches us includes order and payment identifiers, amounts, payment status, timestamps, and refund status. We retain these records to confirm purchases, deliver downloads, reconcile payments, and resolve support requests.
We store the products you bought, the amount paid, any coupon applied, and the order status. If you post a product review, we store its rating and text together with your account, and display it publicly with your name once approved.
When you sign in, we record the IP address and browser user-agent attached to that login session, so you and we can recognise unusual account activity. We also use IP addresses transiently to rate-limit sign-in attempts and other sensitive endpoints against brute-force and abuse. We also use the Meta Pixel (see section 2) to measure how our Facebook and Instagram ads perform: it tells Meta which of our pages you visit, along with your IP address and browser details. We do not sell this data.
We use a small number of strictly necessary storage mechanisms, plus one advertising cookie:
You can clear this data at any time through your browser settings; the site will still work, but you will be signed out and your cart will be empty.
We do not use your personal data for automated decision-making that produces legal effects, and we do not send marketing email unless you have separately asked us to.
We do not sell your personal data. We share the minimum necessary with the following processors, each of whom is bound to use it only to provide their service to us:
We may also disclose personal data where we are legally required to do so — for example in response to a valid order from a court, tax authority or law enforcement agency — or where it is necessary to establish or defend a legal claim.
Our database and the storage holding the product files are hosted by Neon in the United States (AWS us-east-2 region). Our email provider and Google also process data outside India. This means your personal data is transferred to and stored on servers outside India. We rely on these providers' contractual data protection commitments to keep that data protected to the standard described in this policy. By using the site and placing an order, you acknowledge this transfer.
Connections to the site are encrypted with HTTPS, and data is encrypted in transit and at rest by our hosting providers. Passwords are stored only as salted hashes. Your purchased files are never served from a public URL — each download is handed out as a freshly signed link that expires within minutes of being issued, and access is re-checked against your order's live status every single time. Administrative functions are restricted to accounts we have explicitly granted the admin role, and sensitive administrative changes are recorded in an internal audit log.
No system can be guaranteed completely secure. If we ever become aware of a personal data breach affecting you, we will notify you and the Data Protection Board of India as required by the DPDP Act.
Under the DPDP Act you have the right to:
To exercise any of these, email us at the address below. We will respond within 30 days. Note that erasing your account does not withdraw your purchases from our financial records, which we are legally required to retain.
Our products and this site are intended for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will delete it.
We may update this policy as our service changes. The “Last updated” date at the top always reflects the current version. Where a change materially affects your rights, we will take reasonable steps to bring it to your attention.
For any privacy question, request or complaint — including to exercise the rights in section 8 — contact our Grievance Officer at thealphamakerx@gmail.com. We acknowledge grievances within 48 hours and aim to resolve them within 30 days.
See also our Terms & Conditions, Refund & Cancellation Policy and Shipping & Delivery Policy.