Privacy Policy
Last updated 8 October 2026
The short version
- We collect what we need to run your account, deliver your orders, pay your earnings and meet our legal duties.
- We don’t sell your information, and we don’t use advertising or tracking cookies.
- Some details go to the companies that help us run the service (payment gateways, couriers, SMS providers) and, inside the network, to your sponsor and upline.
- You can see and correct most of your information in your account, and ask us to delete it, subject to what the law requires us to keep.
- Questions or complaints go to our Grievance Officer, whose details are at the end of this policy.
- 1. Who we are
- 2. What we collect
- 3. How we use your information
- 4. Who can see or receive it
- 5. Where your information is stored
- 6. Cookies and similar technologies
- 7. How long we keep it
- 8. How we protect it
- 9. Your rights and choices
- 10. Children
- 11. Changes to this policy
- 12. Contact and grievances
1. Who we are
Profit Maker is run by Profit Maker (“we”, “us”, “our”). We decide why and how your personal data is processed, which makes us the data fiduciary under the Digital Personal Data Protection Act, 2023. This policy explains what we collect, why we collect it, who we share it with and the choices you have. It covers our website (www.profitmaker.co.in), the member area and any app that connects to them.
By creating an account or placing an order, you consent to us processing your personal data as described here. You can withdraw that consent at any time (see section 9).
2. What we collect
Information you give us
- Account details: your name, email address, mobile number with country code, the sponsor ID you join under, and your password, which we store only as a one-way hash. If you turn on two-factor authentication, we also store the key that links your authenticator app.
- Profile details: date of birth, profile photo, and the name, relationship and date of birth of a nominee if you add one.
- Payout details, depending on how you choose to be paid: bank account holder name, account number, bank name and IFSC.
- Tax and identity numbers: your PAN, which we need to deduct and report tax (TDS) on your earnings, and your Aadhaar number only if you choose to give it. Giving Aadhaar is voluntary; where we ask for proof of identity you may offer another officially valid document instead.
- KYC documents: proof of identity and proof of address with their numbers, a bank statement or cancelled cheque, and any other document you upload for verification.
- Business details, if you operate as a franchisee: GSTIN and business address.
- Messages: support tickets, emails and anything else you send us.
Information created as you use the service
- Your wallet balance and its transactions: deposits, purchases, transfers to and from other members and withdrawals, and the e-pins you buy, receive or use.
- Commissions and earnings, and your rank.
- Your place in the network: who sponsored you, where you are placed, and who joined under you.
Information collected automatically
- Your IP address, browser and device type, and the times you sign in and out. We keep these in a login log to protect your account.
- Your approximate country, worked out from your IP address using a database on our own servers. We use it to show prices in the right currency; no outside service is involved.
- Cookies and similar technologies, described in section 6.
Information from others
- Payment status from the payment gateway you use.
- Your sponsor’s member ID, when you join through their referral link.
3. How we use your information
We use your information only for the purposes below. We rely on the consent you give when you register or use a feature, or, where the law allows us to process data without consent, on that permission (for example to meet tax obligations or comply with a court order).
| Purpose | Information used |
|---|---|
| Create and run your account, and keep it secure (one-time passwords, two-factor authentication, spotting unusual sign-ins) | Account details, login log |
| Calculate commissions and ranks under the compensation plan, and show you your team | Orders, network position, account details |
| Pay your earnings, deduct TDS and report it to the Income Tax Department | Payout details, PAN, earnings and wallet records |
| Verify your identity and bank details, and prevent fraud and money laundering | KYC documents, identity numbers, payout details |
| Send service messages: one-time passwords, order and payout updates, security alerts and changes to our terms, by email, SMS or WhatsApp | Email address, mobile number |
| Answer your questions and complaints | Messages, and whatever else the request concerns |
| Meet our legal duties under tax, accounting and consumer-protection law, and respond to lawful requests from authorities | Whatever the law requires |
| Understand how the service is used and improve it | Figures combined so they no longer identify you |
We send promotional messages only if you agree to receive them, and every such message tells you how to stop them. Commissions are calculated automatically from the compensation plan; if you think a calculation is wrong, ask us and a person will review it.
4. Who can see or receive it
We do not sell or rent your personal information, and we do not share it with advertisers.
Other members
Your sponsor and the members above you (your upline) can see your name, member ID, joining date and whether your account is active. Some team views also show your mobile number. Members who join under you see your name and member ID as their sponsor, and your referral link contains your member ID. Other members never see your earnings, wallet, payout details, PAN, Aadhaar or KYC documents.
Companies that help us run the service
They act on our instructions, receive only what they need for their task and must protect it:
- Payment gateways such as Razorpay, PhonePe, PayPal and SabPaisa, depending on the one you choose. They collect your card, UPI or bank details directly; we never see or store your full card number.
- Payout partners and banks, to send your withdrawals.
- SMS, WhatsApp and email providers, to deliver one-time passwords and updates.
- Hosting, storage and backup providers that keep the platform running.
- Google Translate, through the language switcher in the member area: when you choose another language, the text of the page is sent to it for translation.
Authorities
We share information with the Income Tax Department (TDS returns include your PAN and the tax deducted), GST authorities, regulators, courts and law enforcement when the law requires it, and only as much as the request requires.
A change of ownership
If our business is merged, sold or restructured, your information may pass to the new owner, who must continue to protect it as this policy describes. We will tell you before that happens.
5. Where your information is stored
Your information is stored on servers run by our hosting provider. Some service providers, such as PayPal, may process it outside India. We transfer personal data abroad only as Indian law permits, and never to a country the Government of India has restricted.
6. Cookies and similar technologies
We use only the cookies the service needs to work:
| Cookie | What it does | How long it lasts |
|---|---|---|
| Session | Keeps you signed in while you use the site | Until you sign out or close the browser |
| Security token (XSRF-TOKEN) | Stops other websites from submitting forms in your name | Same as the session |
| Keep me signed in | Set only if you tick that box when signing in; remembers you on that device | 30 days, or until you sign out |
We may also save small preferences, such as interface settings, in your browser’s local storage. We don’t use advertising, analytics or social-media tracking cookies. Fonts and some scripts load from Google Fonts, cdnjs and jsDelivr; those services receive your IP address and browser details when your browser fetches the files. You can block or delete cookies in your browser settings, but you can’t sign in without the session cookie.
7. How long we keep it
| Information | How long |
|---|---|
| Account and profile details | While your account is open, then deleted or anonymised, except as below |
| Orders, invoices, payments, commissions, tax deducted and wallet records | 8 years from the end of the financial year they relate to, as tax, GST and company law require |
| KYC documents | Up to 5 years after your account closes |
| Login log | 1 year |
| Support messages | 3 years after the request is closed |
We keep information longer only where a law, a dispute or an investigation requires it.
8. How we protect it
- The platform is served over an encrypted connection (HTTPS).
- Passwords are stored only as one-way hashes, never in readable form.
- You can turn on two-factor authentication for your account.
- Staff can see only what their role needs, and administrative actions are logged.
- Card payments are handled by the payment gateways, not by us.
If a breach affects your personal data, we will tell you and the Data Protection Board of India as the law requires, along with what we are doing about it and what you can do. Please use a strong password and never share your one-time password or login PIN. We will never ask you for them.
9. Your rights and choices
Under the Digital Personal Data Protection Act, 2023, you can:
- Get a summary of the personal data we hold about you, what we do with it and who we have shared it with.
- Correct or update it. Most details can be changed from your profile; for anything else, ask us.
- Ask us to delete it. We will delete what we no longer need, keep what the law requires (such as tax records), and tell you what we kept and why.
- Withdraw your consent at any time, as easily as you gave it. This doesn’t affect anything we did before, but we may then be unable to provide parts of the service (for example, we can’t pay earnings without payout details).
- Nominate someone to exercise these rights for you if you die or become unable to act.
- Complain to our Grievance Officer, and if you are not satisfied with the answer, to the Data Protection Board of India.
To use any of these rights, write to our Grievance Officer from the email address or mobile number on your account so we can confirm it’s you. It costs nothing. We acknowledge requests within 48 hours and resolve them within 30 days.
10. Children
Profit Maker is for adults aged 18 and over. We do not knowingly collect personal data from anyone younger. If we learn that we have, we delete it. A parent or guardian who believes a child has signed up can contact us.
11. Changes to this policy
When we change this policy, we update the date at the top. If a change is significant, we tell you by email or with a notice in the member area before it takes effect.
12. Contact and grievances
For questions about this policy or your personal data, or to make a complaint, contact:
Members can also raise a ticket from Support in the member area.