Privacy Policy
Last Updated: June 27, 2026
Effective Date: June 27, 2026
1. Introduction
Alpha Vayn ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website and services.
We operate from Kenya and comply with applicable data protection laws, including the Kenya Data Protection Act, 2019.
2. Information We Collect
2.1 Information You Provide Directly
When you use our Service, we collect:
| Information | Purpose | When Collected |
|---|---|---|
| Email address | Payment verification, order confirmation, download links | At checkout |
| Template customization data | Names, messages, color preferences | During customization |
| Payment information | Processed by Paystack; we do NOT store card details | At checkout |
| Uploaded audio files | Embedded in your customized template | During customization |
2.2 Information Collected Automatically
We automatically collect:
- Browser type and version
- Device information (operating system, screen size)
- IP address (anonymized where possible)
- Pages visited and time spent on our site
- Referral source (e.g., TikTok, Google)
This data is collected via Vercel Analytics and helps us improve our Service.
2.3 Cookies and Similar Technologies
We use minimal cookies for:
- Session management (maintaining your customization state)
- Analytics (understanding how users interact with our site)
- Payment verification (tracking your Paystack session)
We do not use cookies for advertising or tracking across other websites.
3. Why We Need Your Email Address
3.1 Payment Verification (Paystack)
Your email is required by Paystack, our payment processor. Paystack uses your email to:
- Verify your identity during M-Pesa or card transactions
- Send payment confirmations and receipts
- Prevent fraudulent transactions
- Comply with financial regulations
3.2 Order Management
We use your email to:
- Send your customized template download link
- Confirm successful payment
- Provide order history and receipts
- Communicate about your purchase (if needed)
3.3 Communication
We may send you:
- Transactional emails (order confirmation, download links)
- Important updates (changes to Terms or Privacy Policy)
- Optional promotional content (only if you opt in)
You can unsubscribe from promotional emails at any time.
4. How We Use Your Information
We use your information for the following purposes:
| Purpose | Legal Basis |
|---|---|
| Processing payments | Contractual necessity |
| Delivering your customized template | Contractual necessity |
| Verifying payment legitimacy | Legitimate interest (fraud prevention) |
| Improving our Service | Legitimate interest (service improvement) |
| Complying with legal obligations | Legal obligation |
| Sending optional marketing (with consent) | Consent |
5. How We Share Your Information
5.1 We Do NOT Sell Your Data
We will never sell, rent, or trade your personal information to third parties for marketing purposes.
5.2 Service Providers
We share limited information with trusted third parties who help us operate our Service:
| Provider | Data Shared | Purpose |
|---|---|---|
| Paystack | Email, transaction amount, payment method | Payment processing |
| Cloudflare R2 | Uploaded audio files (temporary) | Secure file storage |
| Vercel | Anonymous analytics data | Website hosting and analytics |
| Supabase | Order metadata, email | Database storage |
All service providers are contractually bound to protect your data and use it only for the specified purposes.
5.3 Legal Requirements
We may disclose your information if required by:
- Court order or legal process
- Government request
- Investigation of fraud or illegal activity
- Protection of our rights or safety
6. Data Storage and Security
6.1 Where Your Data Is Stored
| Data Type | Storage Location | Retention Period |
|---|---|---|
| Email address | Supabase (EU/US servers) | 2 years after last purchase |
| Order history | Supabase | 2 years |
| Customized template | Your device (download) | Not stored by us |
| Analytics data | Vercel | 90 days |
6.2 Security Measures
We implement industry-standard security measures:
- SSL/TLS encryption for all data transmission
- Secure payment processing via Paystack (PCI-DSS compliant)
- Access controls on database and storage
- Regular security reviews of our infrastructure
However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
7. Your Data Protection Rights
Under the Kenya Data Protection Act, 2019, you have the following rights:
7.1 Right to Access
You can request a copy of the personal information we hold about you.
7.2 Right to Rectification
You can request correction of inaccurate or incomplete information.
7.3 Right to Erasure ("Right to be Forgotten")
You can request deletion of your personal data, subject to legal retention requirements.
7.4 Right to Restrict Processing
You can request that we limit how we use your data.
7.5 Right to Data Portability
You can request your data in a structured, machine-readable format.
7.6 Right to Object
You can object to processing based on legitimate interests or direct marketing.
7.7 How to Exercise Your Rights
To exercise any of these rights, email us at privacy@alpharayn.com with:
- Your full name
- Email address used for purchase
- Specific request and reason
We will respond within 30 days of receiving your request.
8. Children's Privacy
Our Service is not intended for children under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
9. International Data Transfers
Some of our service providers (Vercel, Cloudflare) may process data outside Kenya, including in the United States and European Union. When this occurs, we ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses (SCCs)
- Adequacy decisions by the Kenyan Data Protection Commissioner
- Contractual commitments from service providers
10. Third-Party Links
Our Service may contain links to third-party websites (e.g., Paystack checkout, social media). We are not responsible for the privacy practices of these websites. We encourage you to read their privacy policies.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by:
- Posting the updated policy on our website
- Updating the "Last Updated" date
- Sending an email notification for material changes
Your continued use of the Service after changes constitutes acceptance of the updated policy.
12. Contact Us
For privacy-related questions, data requests, or concerns:
Email: privacy@alpharayn.com
Business Name: Alpha Rayn
Location: Kenya
13. Cookie Policy
13.1 What Are Cookies
Cookies are small text files stored on your device that help websites function properly.
13.2 Cookies We Use
| Cookie Name | Purpose | Duration |
|---|---|---|
session | Maintain your customization state | Session |
paystack_reference | Track payment verification | 24 hours |
vercel_analytics | Anonymous usage analytics | 90 days |
13.3 Managing Cookies
You can disable cookies through your browser settings. However, this may affect the functionality of our Service (e.g., you may not be able to complete customization).
14. Data Breach Notification
In the unlikely event of a data breach affecting your personal information, we will:
- Notify affected users within 72 hours of discovery
- Report to the Office of the Data Protection Commissioner (Kenya) within 72 hours
- Provide guidance on protective measures you can take
15. Consent
By using our Service and providing your email address, you consent to:
- The collection and use of your information as described in this policy
- The transfer of your data to third-party service providers as necessary
- Receiving transactional emails related to your purchase
You may withdraw consent at any time by contacting us, though this may limit your ability to use certain features.