Legal · DPDP & GDPR aligned

Privacy Policy

What we collect, why we collect it, how we keep it safe, and your rights as a person whose data we hold. No dark patterns, no buried disclosures.

Effective 2026 · MAY · 24Aligned with India DPDP Act 2023 & EU GDPR
30-second summary. We collect what we need to run campaigns and pay people — name, contact, ID, audience analytics, payment details. We never sell personal data. You can export or delete your data at any time from the account settings. Questions? Mail info@altibix.com.

01Plain-English summary

Altibix is the data controller of personal information you provide directly to us. We use this information to operate the marketplace — verify identities, match creators to briefs, route payouts, and provide support. We treat your data the way we'd want our own treated: minimally collected, securely stored, and never sold.

02Data we collect

  • Account data. Name, email, phone, password (hashed), profile photo.
  • Identity data. Government ID (e.g., Aadhaar number via DigiLocker, passport), masked except for verification audit logs.
  • Creator data. Linked social-platform tokens (read-only), audience analytics, content samples.
  • Brand data. Company registration, GSTIN, billing address, campaign briefs.
  • Payment data. Bank account / UPI / international wire details — processed via our PCI-DSS Level 1 payment partner.
  • Usage data. Logged-in activity, device/IP metadata, support conversations.

03Why we collect it

We process data under one or more lawful bases: contractual necessity (running a campaign you initiated), legal obligation (KYC, tax reporting), legitimate interest (fraud prevention, product analytics), and consent (marketing emails, optional analytics). You can withdraw consent at any time without affecting prior processing.

04Who we share with

We share personal data only with: (a) the other side of a campaign you've agreed to, limited to what's necessary; (b) sub-processors who help us run the Service (listed in the Compliance page); (c) authorities, when legally compelled, after exhausting reasonable objections; and (d) acquirers, in the event of a merger or sale, subject to equivalent protections.

We do not sell personal information. We do not share data with advertising networks for behavioural targeting.

05Where we store it

Primary storage is in Mumbai (AWS ap-south-1) for Indian users, and Frankfurt (AWS eu-central-1) for EU users. Cross-border transfers, when needed, are governed by Standard Contractual Clauses (GDPR) and equivalent safeguards under the DPDP Act.

06How long we keep it

  • Active account data — for as long as your account is open.
  • Identity verification records — 7 years after account closure (regulatory requirement).
  • Payment records — 8 years after the transaction (Indian tax law).
  • Support tickets — 3 years after closure.
  • Marketing preferences — until you unsubscribe.

07Your rights

You have the right to access, correct, port, restrict, or delete your personal data. Most of this is available self-service in the account settings; the rest, send a written request to info@altibix.com and we'll respond within 30 days (DPDP / GDPR limit).

08Cookies & similar technologies

We use strictly necessary cookies for sign-in and security, and optional analytics cookies (off by default in EU) to understand product usage. You can manage preferences any time from the cookie banner or your account settings. We do not use third-party tracking pixels.

09Children

Altibix is for users 18 and older. We do not knowingly collect data from anyone under 18. If you believe we have, please email info@altibix.com and we will delete it.

10Contact our DPO

Altibix's Data Protection Officer: info@altibix.com. India grievance officer: info@altibix.com. EU representative: listed on our Compliance page.