DPDP Act 2023 & CERT-In Compliant

Privacy Policy & Data Protection

Last updated: November 10, 2026 • Effective Date: January 1, 2026

1. Commitment to Personal Data Protection

AIStoreHub ("we", "our", or "the Platform") is committed to protecting your privacy and personal data in strict compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act, 2023) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

This Privacy Policy explains what personal data we collect as a Data Fiduciary, the lawful purpose for which it is processed, how long it is retained, and your statutory rights as a Data Principal under Indian law.

2. Itemized Notice of Personal Data Collected

Account & Identity Data

Email address, chosen username, public avatar image, GitHub profile identifier (when connecting GitHub OAuth), and creator bio.

Usage & Interaction Data

AI package views, search queries, prompt copy clicks (ChatGPT/Claude), code downloads (.zip), star/save actions, and CLI telemetry (aihub pull).

Technical & Security Telemetry

One-way hashed IP address, browser user-agent, operating system, timestamped access logs, and error diagnostic traces.

Payment & Creator Billing

Transaction IDs, currency (USD/INR), purchase history, and creator payout wallet records. Credit card numbers and UPI MPINs are never stored on AIStoreHub servers; they are processed exclusively by PCI-DSS compliant payment gateways (Dodo Payments / Stripe).

3. Lawful Purpose of Processing (Section 4, DPDP Act 2023)

Your personal data is processed strictly for specified, lawful, and transparent purposes:

To provide and maintain user accounts, personalized libraries, and developer CLI tokens;
To dispatch transactional emails (1-tap login codes, desktop setup guides, and purchase receipts);
To detect, prevent, and mitigate malicious child_process scripts, token exfiltration, and abuse;
To compute creator revenue shares and process payouts;
To comply with statutory legal obligations and CERT-In cybersecurity directions.

4. Mandatory 180-Day Log Retention (CERT-In Cybersecurity Directions)

In accordance with the Cybersecurity Directions issued under Section 70B(6) of the Information Technology Act, 2000 by CERT-In (effective April 2022), AIStoreHub maintains secure, timestamped server logs, access events, and API transaction records for a mandatory minimum period of 180 calendar days.

These logs are retained in encrypted, access-controlled audit partitions strictly for security forensics, fraud detection, and regulatory compliance, and are not shared with any commercial third-party advertisers.

5. Your Statutory Rights as a Data Principal (DPDP Act, 2023)

Under Chapter III (Sections 11 to 14) of the Digital Personal Data Protection Act, 2023, you hold the following non-waivable statutory rights:

Right to Access Information (Section 11)You may request a summary of the personal data being processed about you and the identities of any Data Processors with whom it has been shared.

Right to Correction & Updating (Section 12)You can edit your profile details, avatar, and linked repositories directly in your Profile Settings.

Right to Erasure / Right to be Forgotten (Section 12)You hold the right to request the complete deletion of your account and erasure of your personal data, subject only to statutory log retention requirements mandated by law.

Right of Grievance Redressal (Section 13)You may lodge any privacy or data handling grievance with our designated Data Protection / Grievance Officer, who is bound to resolve it within statutory timelines.

Right to Nominate (Section 14)You have the right to nominate another individual who, in the event of death or incapacity, shall exercise your Data Principal rights on your behalf.

Escalation to Data Protection Board of India (DPBI)If you are not satisfied with the resolution of your grievance by the Data Protection Officer within the prescribed timeframe, you hold the statutory right under Section 13(3) of the DPDP Act, 2023 to appeal and lodge a formal complaint with the Data Protection Board of India (DPBI).

6. Technical Safeguards & CERT-In Incident Notification

AIStoreHub enforces multi-layered technical measures:

Transport Security: 100% of data in transit is encrypted using Modern TLS (TLS 1.3 / 256-bit AES encryption);
Authentication Security: Secure 8-digit OTP verification with short-lived tokens, rate-limited attempts, and hashed authentication secrets;
Database Isolation: PostgreSQL Row-Level Security (RLS) ensures that private systems, personal tokens, and creator wallets are accessible only by the verified owner;
CERT-In 6-Hour Security Reporting: In strict compliance with CERT-In directions under Section 70B(6), any verified cybersecurity incident (unauthorized data exposure or zero-day token exfiltration) is reported to the Indian Computer Emergency Response Team (incident@cert-in.org.in) within 6 hours;
Zero Data Selling: We never sell, rent, or trade your personal data to marketing aggregators or third-party ad networks.

7. Data Protection & Grievance Officer Contact

For any queries regarding this Privacy Policy, data subject requests, or to exercise your statutory rights under the DPDP Act 2023, please reach out directly:

Grievance & Privacy OfficerAbhinav MishraAIStoreHub Legal & Compliance

Direct Emailgrievance@aistorehub.inCC: privacy@aistorehub.in

Statutory Acknowledgment: Within 24 Hours • Resolution Window: Within 15 Days

8. आठवीं अनुसूची के तहत वैधानिक सूचना (DPDP Act, 2023 Section 5(3))

डिजिटल व्यक्तिगत डेटा संरक्षण अधिनियम, 2023 (DPDP Act, 2023) की धारा 5(3) के अनुसार, प्रत्येक उपयोगकर्ता को अपनी भाषा में गोपनीयता सूचना प्राप्त करने का अधिकार है।

डेटा संग्रह एवं उपयोग: AIStoreHub केवल खाता निर्माण, सुरक्षित 1-टैप लॉगिन, और ओपन-सोर्स AI पैकेज डाउनलोड के लिए न्यूनतम आवश्यक व्यक्तिगत डेटा (ईमेल, उपयोगकर्ता नाम) एकत्र करता है। हम आपका डेटा किसी भी तीसरे पक्ष या विज्ञापन नेटवर्क को कभी नहीं बेचते हैं।

अधिकार: आपको अपने खाते और डेटा को हटाने (Right to Erasure), जानकारी देखने (Right to Access), और शिकायत निवारण का पूर्ण अधिकार प्राप्त है।

शिकायत अधिकारी: अभिनव मिश्रा (grievance@aistorehub.in)। 24 घंटे के भीतर पावती और 15 दिनों में समाधान।