01 Overview
alted. ("we," "us," "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share information when you use alt-ed.in (the "Platform").
This policy is governed by the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
By using the Platform, you consent to the practices described in this policy. If you do not agree, please do not use the Platform.
02 Data We Collect
We collect the following categories of personal data:
| Category | Examples | Who |
|---|---|---|
| Account Information | Name, email address, username, profile picture | All users |
| Payment Information | Transaction ID, payment method type, billing details | All users |
| Financial Details | UPI ID, bank account number, IFSC code | Sellers (for payouts) |
| KYC / Identity | PAN card number, name as per PAN | Sellers only |
| Device & Technical Data | IP address, browser type, OS, device identifiers | All users |
| Usage Data | Pages visited, products viewed, search queries, time on site | All users |
| Transaction History | Purchase history, download logs, sales records | All users |
| Communications | Support emails, dispute messages | All users |
| Cookies & Tracking | Session cookies, analytics cookies, preferences | All users |
We do not collect sensitive personal data beyond what is listed above. We do not collect government ID documents other than PAN card information for Seller KYC verification as required by law.
We do not store full payment card numbers. All card processing is handled directly by our payment partners.
03 How We Use Your Data
We use personal data for the following purposes:
- To operate the Platform — creating and managing accounts, processing purchases, delivering digital files, and managing Seller listings
- To process payments — facilitating transactions between Buyers and Sellers, processing payouts to Sellers, and managing refunds
- To verify identity — conducting KYC verification for Sellers as required by applicable financial regulations
- To communicate with you — sending transactional emails (purchase confirmations, payout notifications, support replies), and product or platform updates
- To improve the Platform — analysing usage patterns to enhance features, fix bugs, and personalise the user experience
- To maintain security — detecting and preventing fraud, abuse, and unauthorised access
- To comply with legal obligations — retaining financial records as required by Indian law, responding to lawful requests from authorities
We do not use your personal data for automated decision-making that produces significant legal effects without human review.
05 Third-Party Services
alted. uses the following third-party services that may process your personal data:
| Service | Purpose | Data Shared |
|---|---|---|
| Cashfree Payments | Payment processing & Seller payouts | Payment info, UPI ID, bank details |
| Paytm (One97) | Payment processing | Payment info |
| Vercel | Web hosting & deployment | IP address, request logs |
| Supabase | Database & backend infrastructure | Account data, transaction data |
| Cloudflare | CDN, DDoS protection, security | IP address, traffic data |
| Google Analytics | Usage analytics | Anonymised usage data, device info |
Each third-party service operates under its own privacy policy. We encourage you to review their respective policies. alted. takes reasonable steps to ensure these service providers maintain appropriate data protection standards.
06 Data Retention
We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required by law:
- Account data — retained for the duration of your account and up to 2 years after closure
- Transaction & financial records — retained for 7 years as required under Indian tax and accounting laws
- KYC data (PAN) — retained for a minimum of 5 years as required under applicable regulations
- Usage and analytics data — retained for up to 26 months
- Support communications — retained for 2 years
Upon expiry of the applicable retention period, your data will be securely deleted or anonymised.
07 Security
We implement reasonable technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These include:
- HTTPS encryption for all data in transit
- Database access controls and authentication via Supabase
- DDoS and threat protection via Cloudflare
- Limited employee access to personal data on a need-to-know basis
- Payment data handled exclusively by PCI-DSS compliant payment processors
No method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the Data Protection Board of India and affected users as required under the DPDP Act, 2023.
08 Your Rights
Under the Digital Personal Data Protection Act, 2023, you have the following rights with respect to your personal data:
- Right to Access — request a summary of the personal data we hold about you
- Right to Correction — request correction of inaccurate or incomplete personal data
- Right to Erasure — request deletion of your personal data, subject to legal retention obligations
- Right to Grievance Redressal — raise a complaint with us; we will respond within 30 days
- Right to Nominate — nominate another individual to exercise these rights on your behalf in the event of your death or incapacity
- Right to Withdraw Consent — withdraw consent for data processing at any time; withdrawal does not affect the lawfulness of processing prior to withdrawal
To exercise any of these rights, contact us at contact@alt-ed.in. We will respond within 30 days. Identity verification may be required before processing your request.
10 Children's Privacy
The Platform is accessible to users of all ages for browsing and purchasing. However, we do not knowingly collect any personal data beyond a name and email address from users under the age of 18, and we do not permit users under 18 to register as Sellers or complete KYC processes.
If you are a parent or guardian and believe your child under 18 has provided us with personal data beyond what is necessary for account creation, please contact us at contact@alt-ed.in and we will take appropriate steps.
11 Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by posting the updated policy on the Platform with a revised effective date, and where appropriate, by email notification.
Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the updated policy.
12 Contact & Grievance Officer
For any privacy-related concerns, data requests, or complaints, please contact our designated Grievance Officer:
Placeholder Technologies
alted.
Flat-310, Block A-13, SSM Nagar, Alapakkam,
New Perungalathur, Chennai - 600063,
Tamil Nadu, India
Email: contact@alt-ed.in
Response time: within 30 days of receipt
If your concern is not resolved to your satisfaction, you may approach the Data Protection Board of India once it is constituted under the DPDP Act, 2023.