Security, Privacy & Compliance

• Email + password and Telegram-based sign-in.
• Passwords are hashed by our auth provider — never stored in plaintext.
• Email verification required before purchases on linked accounts.
• One-time login codes (OTP) expire after 30 minutes.
• Admin role is stored in a separate, server-only table to prevent privilege escalation.

• All traffic is served over HTTPS / TLS.
• Row-Level Security (RLS) is enabled on user-facing tables so you can only read and modify your own records.
• Privileged server-side actions (transfers, escrow, refunds) run inside audited database functions with row-level locking.
• Reseller cost prices and other sensitive fields are hidden from anonymous visitors.
• Backups are managed by our cloud provider.

• Account details: name, email, optional avatar, optional Telegram ID.
• Wallet & order history needed to fulfil purchases and show your records.
• Basic device / browser metadata for fraud prevention and analytics.
• We do not sell your personal data to third parties.

• Card / UPI payments are processed by Razorpay; we never see or store full card numbers.
• Crypto payments are verified via Binance Pay webhooks with idempotent server-side checks.
• Wallet operations use row-level locking to prevent race conditions and double-spend.
• Escrow deals are mediated by admins, with a 2% fee deducted on release.

If you believe you've found a security issue, please email us immediately. Do not publish details publicly until we've had a chance to investigate and ship a fix. We aim to acknowledge reports within 72 hours.

• Use a strong, unique password for your account.
• Never share your OTP, login code, or password with anyone — including support.
• Verify the domain is www.cheapest-premiums.com before logging in.
• Report suspicious messages claiming to be from us.

• The only official Telegram support account is @cheapest_premiums — anyone else claiming to be us is a scam.
• We will never DM you first asking for payment, a code or your password.
• Payment screens always show the exact amount in ₹; we never ask you to pay a "different" account.
• Resale links must follow published anti-abuse terms; links used for self-dealing or fake purchases are cancelled and profits reversed.
• Report impersonators and fake accounts to official support so we can act and warn other buyers.

• Every deposit, purchase, transfer and refund is written to a tamper-evident ledger you can review in your transaction history.
• Money movements run inside locked database transactions, so transfers and purchases can never double-spend a balance.
• Peer-to-peer transfers, escrow releases and withdrawals are server-side operations — the browser can never invent an amount.
• Checkout totals, fees and discounts are computed entirely on the server from your saved settings, not from anything your browser sends.
• Audit functions reconcile wallet balances against the ledger so discrepancies surface before they matter.

• You control avatar visibility from your profile — keep it public or fall back to your initials.
• Physical-delivery details (name, phone, address) are used only to ship your order and are visible to our fulfilment admins only.
• We never sell personal data, and marketing messages are limited to order and transaction updates.
• Want your account or data removed? Message official support or email us and we will delete it on request.

• Faulty-account claims need one continuous screen recording from payment/delivery through the login attempt, per the store terms.
• Physical items that arrive damaged or wrong need an unboxing video with the order ID.
• Verified claims are handled with a replacement or a wallet refund — approved refunds are credited automatically.
• Every order keeps a status history, so both sides can see exactly when it was confirmed, shipped and delivered.

• Every completed order and payout is auto-posted to our public proofs channel @Air1Reviews — check it before buying from anyone.
• Stock levels shown on listings are live counts; the admin dashboard tracks low-stock health so items are restocked fast.
• Refunds, replacements and resale profit credits follow published rules — no hidden exceptions, no "manager specials".