Privacy Policy

1. Introduction

Arleik (“we,” “our,” or “us”) is a creator support platform that enables fans to send tips to creators through a shareable link. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our website and services.

By using Arleik, you agree to the practices described in this policy. If you do not agree, please discontinue use of our services.

1A. Regulatory Framework

This policy complies with the Digital Personal Data Protection (DPDP) Act, 2023 and the Information Technology Act, 2000. As an intermediary under IT Act Section 79, we follow prescribed guidelines for data handling and user privacy. We also adhere to the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.

2. Information We Collect

2.1 Information You Provide

• Account information: Email address, username, display name, bio, and avatar — provided during registration via Supabase Auth.
• UPI ID: Stored to generate payment QR codes and UPI deep links. Displayed on your public support page. We do NOT process, hold, or intermediate any payments.
• Messages: Fan messages attached to tips sent to creators.
• Contact information: Information you provide when contacting our support team.

2.2 Information Collected Automatically

• Usage data: Pages visited, features used, clicks, and interactions with the platform.
• Device information: Browser type, operating system, device type, and screen resolution.
• Log data: IP address, access times, and referring URLs.
• Cookies: See our Cookie Policy for details.

2.3 Information We Do Not Store

We do not store sensitive financial data such as UPI PINs, bank account credentials, or payment transaction details. All payments happen directly between users via UPI — Arleik does not process or intermediate any transactions.

2.4 Lawful Basis for Processing (DPDP Act, 2023)

• Account data: Contractual necessity — required to provide the service to you.
• UPI ID: Consent — the creator voluntarily provides their UPI ID for display on their page.
• Messages: Legitimate interest — delivering tip messages from fans to creators.
• Usage data: Legitimate interest — improving the platform and ensuring security.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Generate UPI payment links and QR codes for creators
• Deliver fan messages to creators
• Provide analytics and insights to creators about their support activity
• Communicate with you about your account, updates, and support inquiries
• Comply with legal and regulatory requirements
• Detect and prevent fraud, abuse, and security incidents
• Improve and optimize our platform and services

4. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

• Between users: Fan messages and display names are shared with creators as part of the tipping experience. Creator profile information (including UPI ID) is publicly visible on their support page.
• Service providers: We may share data with trusted third-party providers who help us operate the platform (hosting via Supabase, analytics, email).
• Legal compliance: We may disclose information if required by law, regulation, legal process, or governmental request.
• Safety: We may share information to protect the rights, safety, or property of Arleik, our users, or the public.

5. Data Security

We implement the following security measures to protect your personal information:

• Encryption in transit: All data transmitted between your browser and our servers is encrypted via TLS 1.3.
• Encryption at rest: Data stored in our database is encrypted via Supabase's AES-256 encryption.
• Access controls: Row Level Security (RLS) is enforced on all database tables, ensuring users can only access their own data.
• Breach notification: We will notify affected users within 72 hours of discovering a data breach, as required by the DPDP Act, 2023.

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Data Retention

• Active accounts: Your personal data is retained for as long as your account is active.
• Deleted accounts: Personal data is deleted within 30 days of account deletion, except where retention is required by law.
• Tax/legal compliance: Transaction records (tip amounts, dates) may be retained for up to 7 years as required by Indian tax law.
• Anonymized analytics: Aggregated, anonymized usage data may be retained indefinitely for product improvement.

7. Your Rights

Under the Digital Personal Data Protection Act, 2023 and applicable laws, you have the following rights:

• Right to access: Request a copy of the personal data we hold about you.
• Right to correction: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data, subject to legal retention requirements.
• Right to grievance redressal: File a complaint with our Grievance Officer (see Section 12 below).
• Right to nominate: Under the DPDP Act, you may nominate another person to exercise your data rights in case of death or incapacity.

To exercise any of these rights, contact us at admin@arleik.com or our Grievance Officer at grievance@arleik.com.

8. Children's Privacy

Our services are not directed to individuals under the age of 18. To receive payments on the platform, users must be at least 18 years old. Creators under 18 may only use the platform through a verified parent or legal guardian account. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such data, we will take steps to delete it promptly.

9. Third-Party Links

Our platform may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our platform or by sending you an email. Your continued use of Arleik after changes take effect constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: admin@arleik.com

12. Grievance Officer

In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, the contact details of the Grievance Officer are provided below: