Privacy Policy

• Account details: name, email, mobile number and password (stored only in hashed form), your preferred language, and whether your email and mobile are verified. If you sign in with Google, we receive your name and email from Google.
• Addresses: the addresses you save for home pujas, with their map coordinates, so we can find pandits who travel to you.
• Family profile (kul parichay): gotra, kuldevta and family members you choose to add, used for the sankalp.
• Remembrances: names and dates of loved ones whose punyatithi you want to be reminded of.
• Bookings: the puja, pandit, date and time, address or online mode, sankalp details and notes you give.
• Payments: amount, status and the payment and refund reference from Razorpay. Your card, UPI or bank details go directly to Razorpay; we do not receive or store them.
• Reminder settings: the sacred days you follow, how you want to be reminded, and the place used for your panchang.
• Reviews you write after a puja, and notifications we send you.
• For pandits: profile (bio, experience, tradition, city, languages), pujas and dakshina, working hours, home location and travel distance, and KYC details. Of your Aadhaar number we keep only the last 4 digits (masked); the full number is never stored.
• Technical data: IP address, browser and device information, and request logs, used to run and secure the service.

We use your device’s location only when you allow it in your browser — for example to show pandits near you or the panchang for where you are. You can always type or choose a city instead. The place you pick for the panchang is remembered in a cookie (ps_place) with its coordinates rounded to about a kilometre.

• To create and secure your account, and to verify your email and mobile number.
• To find pandits for your address or for online pujas, and to make, manage and complete your bookings.
• To take payments and issue refunds.
• To send booking updates, the reminders you ask for, and service messages by email, in-app notification and (when available) SMS.
• To verify pandits and keep the platform safe from fraud and misuse.
• To answer your questions and complaints.
• To meet our legal, tax and accounting obligations.

We do not sell your personal data, and we do not use it for third-party advertising.

We process your personal data on the basis of your consent, given when you sign up and when you choose to share optional details such as your family profile, remembrances or location — and, where the DPDP Act allows, for legitimate uses such as completing a booking you asked for or meeting a legal obligation.

You can withdraw consent at any time, as easily as you gave it: edit or delete optional details in your account, turn off reminder channels, deny location access in your browser, or write to support@poojasevak.in. Withdrawing consent does not affect processing already done, and we may be unable to provide some services (for example, a booking needs your contact details).

We share only what each party needs:

• The pandit you book — your name, mobile number, the booking address (for home pujas) and sankalp details, so they can perform the puja.
• Razorpay — to process payments and refunds.
• Google — only if you choose to sign in with Google.
• Email and SMS providers — to deliver verification codes, booking updates and reminders.
• Our video meeting provider (currently Jitsi Meet) — hosts the video call for online pujas. The audio and video of the call pass through and are processed by this provider; anyone with the private link can join, so please don’t share it. We do not record online pujas.
• Cloudflare and our hosting providers — to deliver the website securely and store data.
• Government or law-enforcement authorities — when the law requires it.

These service providers act on our instructions and may only use your data to provide their service to us.

We use only what the site needs to work. We do not use advertising or tracking cookies.

• ps_locale (cookie, 1 year) — remembers your language, Hindi or English.
• ps_place (cookie, 1 year) — remembers the place for your panchang.
• Sign-in session (browser local storage) — keeps you signed in on this device until you sign out.
• Your chosen location and a note that you dismissed the "install app" prompt (browser local storage).

Cloudflare may set its own strictly necessary cookies to protect the site from abuse. You can clear cookies and local storage in your browser settings at any time; you will be signed out.

• Account, family profile, address and reminder data: while your account is active. You can delete addresses and remembrances yourself at any time, and deleting your account erases them.
• Booking, payment and refund records: for as long as Indian tax, accounting and other laws require, even after your account is deleted — in anonymised form, without your name, contact details or sankalp.
• Server logs: for a limited period, for security and troubleshooting.

When data is no longer needed for these purposes, or you withdraw consent and no law requires us to keep it, we delete it or make it anonymous.

Under the DPDP Act you have the right to:

• Access a summary of the personal data we hold about you and how we use it.
• Correct, complete or update it — most details can be edited directly in your account, addresses and family profile.
• Erase it — delete your account yourself at any time from Account → Delete account. Upcoming bookings are cancelled and refunded in full, and your name, email, mobile, addresses, family profile, remembrances and notifications are erased at once; booking and payment records the law requires us to keep are retained in anonymised form. If you can’t sign in, write to support@poojasevak.in from your registered email and we will delete it for you.
• Grievance redressal — complain to us, and receive a response.
• Nominate a person to exercise these rights on your behalf in case of death or incapacity.

To use any of these rights, write to support@poojasevak.in from your registered email. We may ask you to confirm your identity first. If you are not satisfied with our response, you may approach the Data Protection Board of India.

Accounts are for adults (18 and over). We do not knowingly collect personal data from children. When a parent or guardian adds a child’s name to their family profile or sankalp, they do so as the child’s guardian and with their consent, and only for the puja. If you believe a child has given us data directly, write to support@poojasevak.in and we will delete it.

Data travels over encrypted connections (HTTPS). Passwords are stored only as secure hashes, Aadhaar numbers are masked to the last 4 digits, and access to personal data is limited to people who need it to run the service. No system is perfectly secure; if a breach affects your personal data, we will inform you and the Data Protection Board as the law requires.

Your data is stored with our hosting providers. Some service providers (such as Cloudflare, Google and Razorpay’s partners) may process data outside India. Any such transfer follows the DPDP Act and the rules made under it.

For any question, complaint or request about your personal data, contact our Grievance Officer. We aim to acknowledge complaints within 48 hours and resolve them as quickly as possible, within the time the law allows.

Email

support@poojasevak.in

If we change this policy, we will update the "Last updated" date above and, for significant changes, tell you by email or in the app before they take effect.