Privacy policy

Last updated: 29 October 2026

This policy explains how SpaceMartX (Proprietor: Your Name) (“SpaceMartX”, “we”, “us”) collects, uses and protects your personal data when you use spacemartx.in. We process personal data in line with India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.

1. Data we collect

• Account data: your email address and/or mobile number (used to sign in with a one-time code), and your name if you add it for invoices.
• Order data: the products you buy, amounts, order and payment IDs, timestamps and the keys or activation details delivered to you.
• Support data: messages you send us through the contact form or email.
• Technical data: IP address, browser type, device information and pages visited, collected through server logs and — only if you allow it — analytics and advertising cookies.

2. Payments

Payments are processed by Razorpay Software Pvt. Ltd. Your card, UPI, net-banking and wallet details are entered directly into Razorpay’s secure checkout. We never receive or store full card numbers, CVVs or UPI PINs. Razorpay shares with us only the payment status, payment ID and the method type. See Razorpay’s privacy policy.

3. How we use your data

• To create your account and sign you in securely.
• To process payments, deliver products and send receipts.
• To answer support requests and handle refunds.
• To keep accounting and tax records as required by law.
• To prevent fraud and abuse and keep the site secure.
• Only with your consent: to measure site usage and the performance of our advertising.

4. Cookies and tracking

We currently use only essential cookies: smx_session, which keeps you signed in, and security cookies needed to run the site. We do not use analytics or advertising cookies, so we don’t show a cookie banner. If we start using them, we will update this policy and ask for your consent first.

5. Sharing

We never sell your personal data. We share it only with service providers who help us run SpaceMartX, under contracts that protect it:

• Razorpay (payments), our email and SMS providers (sending codes and receipts), and our hosting provider.
• Meta and Google — only if you accept analytics/advertising cookies, as described above.
• Government or law-enforcement authorities when required by law.

6. Retention

• One-time sign-in codes are stored only as a hash and deleted immediately after use or expiry.
• Order and payment records are kept for 8 years to meet Indian tax and accounting laws.
• Account data is kept while your account is active; you can ask us to delete it (order records will still be kept as required by law).
• Support messages are kept for up to 3 years.

7. Your rights

Under the DPDP Act you can: ask what personal data we hold about you; ask us to correct or complete it; ask us to erase it (subject to legal retention); withdraw consent for analytics/advertising at any time; nominate another person to exercise your rights; and raise a grievance with us and, if unresolved, with the Data Protection Board of India. Email support@spacemartx.com from your registered email or mention your registered mobile number. We respond within 30 days.

8. Security

We use HTTPS everywhere, password-less sign-in with short-lived hashed codes, signed session cookies, strict content security policies and access controls. No system is perfectly secure, but we work hard to protect your data and will notify you and the authorities of any personal data breach as the law requires.

9. Children

SpaceMartX is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.

10. Grievance Officer

We acknowledge grievances within 48 hours and resolve them within 30 days.

11. Changes

We may update this policy. The “Last updated” date above shows when it last changed. For significant changes we will notify signed-in customers by email.