Security & Trust

In short

• The website always uses an encrypted HTTPS connection.
• Payment screenshots and order details are private. Only our team can see them.
• We never ask for your OTP, UPI PIN, card number or passwords.
• If something goes wrong with your data, we will tell you, as the DPDP Act requires.
• You can report a security problem to aimergerindia@gmail.com.

1. A secure connection

• Every page on aimerger.in is served over HTTPS. Browsers are told to always use HTTPS for our site and its subdomains (HSTS), so the connection cannot quietly drop to an unencrypted one.
• Our certificate is issued automatically by a widely trusted certificate authority (Google Trust Services or Let's Encrypt) and renewed before it expires.
• A CAA record in our domain's DNS allows only Google Trust Services and Let's Encrypt to issue certificates for aimerger.in. Any other certificate authority must refuse, so nobody can get a certificate for our domain from a weaker or compromised authority.
• eMudhra incident, October 2026: browsers stopped trusting some certificates issued by eMudhra after their keys were found to be weak. Aimerger does not use eMudhra certificates, so our site was not affected. Read our guide to checking your own website.

2. How the website is protected

• Strict browser rules (Content Security Policy): the site loads code only from our own server and a short list of known libraries, which are pinned with integrity checks.
• No framing: other websites cannot show our pages inside theirs, which protects you from click-jacking.
• Form protection: every form checks that the request really came from our site (CSRF protection).
• Rate limits and attack blocking: repeated abuse, spam and known attack patterns are blocked automatically.
• Analytics only with consent: Google Analytics loads only after you click "Accept" on the cookie banner.

3. How we handle your data

• We collect only what we need. The Privacy Policy lists every item and why.
• Payment screenshots are stored privately. They are never shown on the website and are used only to verify your payment.
• We never receive card numbers, CVV, UPI PIN or banking passwords. Payments go through your UPI app or the payment gateway.
• Admin passwords are stored hashed, and only our team can open the admin panel.
• Partners such as couriers or AI providers get only the data they need for their job.

4. How to recognise the real Aimerger

Scammers sometimes copy the names of real businesses. The real Aimerger:

• uses only the website aimerger.in;
• uses only the phone and WhatsApp number +91 87969 25824 and the email aimergerindia@gmail.com;
• asks you to pay only to the UPI ID or QR code shown at checkout on aimerger.in, or to the details in your written proposal;
• will never ask for your OTP, UPI PIN, card details or passwords, and never asks you to install a screen-sharing app.

If someone claims to be from Aimerger and does any of this, do not pay. Message us on WhatsApp to check.

5. If something goes wrong

No system is completely secure. If a breach affects your personal data, we will inform you without delay and report it to the Data Protection Board of India, as the Digital Personal Data Protection Act, 2023 requires. We will tell you what happened, what data was involved and what you can do.

6. Report a security problem

Found a bug or a weakness on aimerger.in? Please email aimergerindia@gmail.com with the subject "Security", the page or URL, and the steps to reproduce it.

• We reply within 3 working days and keep you updated until it is fixed.
• Please test only your own account and data, do not access or change other people's data, do not run denial-of-service or spam tests, and give us reasonable time to fix the problem before telling others.
• We will not take legal action against anyone who reports a problem in good faith and follows these rules.
• We are a small studio and do not run a paid bug bounty, but we are happy to thank you publicly if you wish.

Our contact details are also published in security.txt.