Privacy Policy

This Privacy Policy is issued by Dhurandhar Technologies Private Limited ("Dhurandhar", "we", "us", "our"), a company incorporated in India with its registered office in Maharashtra, India, operating the DHURANDHAR platform available at www.dhurandharone.com and related mobile applications (collectively, the "Platform").

This policy explains what personal data we collect, why we collect it, how we use and share it, and the rights you have. It is designed to comply with the Digital Personal Data Protection Act, 2023 (DPDPA), the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and, where applicable, the EU/UK GDPR.

We collect the following categories of personal data:

• Account data: name, email address, mobile number, password (hashed), profile photo.
• Devotional profile: gotra, sampradaya, community preferences, family members you add, and rituals you plan or book. This data is used exclusively to personalise your Dharma Feed and match verified pandits.
• Astrological data (optional): birth date, birth time, birth place - used to compute your Kundli and muhurta. Stored encrypted at rest.
• Transaction data: booking history, order history, invoice details (name, GSTIN, billing address), wallet ledger, loyalty points.
• Payment data: we do not store your full card number, CVV or UPI credentials. Payments are processed by our PCI-DSS certified payment partner (Razorpay). We store only a payment reference ID, method used and the last 4 digits (where applicable).
• Location data: your city (for pandit dispatch and Panchang calculations); precise geolocation is used only when you explicitly enable "live tracking" during a booking.
• Device & log data: IP address, browser type, device model, OS, referrer URL, and pages visited - used for security, fraud detection and analytics.
• Communications: messages you send in Matrimony chat, support tickets, and feedback.

• Service delivery (performance of contract): booking pandits, temples, yatra, commerce fulfilment.
• Personalisation (consent / legitimate interest): Dharma Feed, muhurta recommendations, matrimony matches based on 36-guna milan.
• Payments & invoicing (legal obligation under GST and Income Tax laws).
• Trust & safety (legitimate interest): pandit KYC, fraud detection, abuse prevention in chat.
• Marketing communications (consent): only when you opt in; you can withdraw at any time from Account → Notifications.
• Legal compliance: responding to lawful requests from Indian authorities.

We share personal data strictly on a need-to-know basis with:

• Verified partners (pandits, temples, karyakartas) - only the details required to fulfil your booking (name, address, contact, service details). Partners are contractually bound to confidentiality.
• Payment processors - Razorpay Software Private Limited (PCI-DSS Level 1 certified).
• Infrastructure providers - our data is hosted on secure cloud infrastructure (AWS ap-south-1, Mumbai region) with encryption in transit and at rest.
• Communication providers - WhatsApp Business API, SMS and email vendors for transactional messages.
• Authorities - when required by law, court order, or to protect the rights, property, or safety of any person.

We do not sell your personal data. We do not share your data with advertisers.

We retain personal data only for as long as necessary for the purposes above. Typical retention periods:

• Account data - for the life of your account plus 90 days after deletion request.
• Transaction records - 8 years (as required under Indian GST and Companies Act).
• Matrimony chats - 12 months from last activity or until you delete the profile.
• Server logs - 180 days.

Under the DPDPA and, where applicable, GDPR, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Erase your data ("right to be forgotten"), subject to legal retention.
• Withdraw consent for marketing at any time.
• Port your data to another service.
• Nominate a person to exercise your rights in the event of your death or incapacity (DPDPA §14).
• Lodge a complaint with the Data Protection Board of India.

To exercise any right, email privacy@dhurandharone.com. We respond within 30 days.

We implement the security controls described in our Security Policy, including TLS 1.3 in transit, AES-256 encryption at rest, row-level security on every database table, hashed passwords (bcrypt), and 24×7 monitoring.

We use strictly necessary cookies for session management and authentication. We use first-party analytics cookies to understand aggregate usage. We do not use third-party advertising cookies. You can control cookies through your browser settings.

The Platform is not directed to children under 18. Where a parent creates a profile for a child in relation to a Samskara (e.g., Namakarana, Annaprashana), the parent consents on the child's behalf and warrants they have the legal authority to do so, in accordance with DPDPA §9.

Primary data storage is in India (AWS ap-south-1, Mumbai). Where limited data is processed outside India (e.g., email delivery), we ensure standard contractual clauses and equivalent safeguards.

In accordance with the Information Technology Act, 2000 and DPDPA, 2023:

We may update this policy from time to time. Material changes will be notified via email and an in-app banner at least 15 days before they take effect.

Questions? Email privacy@dhurandharone.com.