Privacy Policy
Last updated: April 2026 · Compliant with DPDP Act 2023
Your rights under DPDP Act 2023
You have the right to access, correct, erase your data, and withdraw consent at any time. Email privacy@pujaseva.com — we respond within 72 hours.
1. Data We Collect
- •Identity: Name, phone number, email (optional), date of birth (for kundali only, with your consent).
- •Booking: Sankalp name, gotra, family names, puja preferences, scheduled dates.
- •Payment: Razorpay order IDs only. Card numbers are handled exclusively by Razorpay (PCI-DSS Level 1). We never store payment credentials.
- •Location: Address for at-home pujas. Precise GPS only when you share for pandit tracking — stored in Redis and auto-deleted within 4 hours.
- •Device: IP address, browser type, pages visited — collected anonymously for analytics.
2. How We Use Your Data
- •Match you with available pandits and schedule pujas.
- •Process payments and send receipts.
- •Send booking confirmations and reminders via WhatsApp and SMS.
- •Personalise recommendations (with your consent).
- •Improve the platform via anonymised usage analytics.
- •Send festival reminders and offers — only with explicit consent.
3. Data Sharing
- •We share your name and phone with your assigned pandit to facilitate the puja only.
- •We do not sell personal data.
- •Service providers bound by DPA: Razorpay (payments), MSG91 (SMS), WATI (WhatsApp), AWS S3 (storage), PostHog (analytics — anonymised).
4. Data Retention
- •Booking records: 7 years (Indian accounting requirement).
- •Personal profile: Until you request deletion.
- •OTPs and session tokens: Deleted within 24 hours.
- •GPS location: Deleted within 4 hours of booking end.
5. Your Rights (DPDP 2023)
- •Access: Request a copy of all data we hold.
- •Correction: Fix inaccurate or incomplete data.
- •Erasure: Delete your account and all personal data (excluding legally required records).
- •Withdraw consent: Via Settings → Privacy or by emailing us.
- •Grievance: Contact our Data Protection Officer within 30 days.
6. Cookies
- •We use one first-party cookie (locale) to remember your language preference.
- •Analytics are collected server-side. No third-party tracking cookies.
- •You can opt out via the consent banner at any time.
7. Security
- •Data encrypted in transit (TLS 1.3) and at rest (AES-256).
- •Production access restricted to essential personnel.
- •Quarterly security reviews. Responsible disclosure: security@pujaseva.com.
Contact
Data Protection Officer: privacy@pujaseva.com
Puja Seva Pvt. Ltd., New Delhi 110001, India
Response: 72 hours for queries · 30 days for erasure requests