Privacy Policy

What we collect, and why

Your WhatsApp number, because it is how we verify your identity and how the puja video and updates reach you. Your name and, optionally, your email, for the booking record and receipt.

The names and gotras you enter for the sankalp. These are the heart of the service: the pandit speaks them at the temple. We treat them as personal data belonging to each named person, not just to you.

A delivery address, only if you have asked for temple prasad to be couriered.

Your puja wish, if you write one. It is passed to the pandit and to nobody else.

What we do not collect

We never see or store your card number, UPI PIN or bank credentials. Payments are handled entirely by our payment gateway; we receive only a confirmation and a reference.

We do not ask for your date of birth, birth chart or kundali, and no puja on SevaPuja requires one.

We do not run advertising trackers or sell any data to third parties. Ever.

Who your details are shared with

The temple and the pandit performing your puja receive the sankalp names and gotras — that is the point of the booking. They receive nothing else, not your phone number, address or email.

Our courier partner receives your name, address and phone number, solely to deliver prasad.

Our payment gateway receives what it needs to process the transaction.

We disclose data to a government authority only where a written order compels us to, and we will tell you when that happens unless the order forbids it.

How long we keep it

Booking records, including sankalp names, are kept for eight years, because Indian tax and accounting rules require transaction records to be retained for that period.

One-time passwords are deleted within ten minutes. Login sessions expire after sixty days, and are destroyed immediately when you log out.

If you ask us to delete your account we remove your contact details and sankalp names, retaining only the minimum transaction record the law requires.

Your rights

Under the Digital Personal Data Protection Act, 2023 you may ask us for a copy of the data we hold about you, ask us to correct it, ask us to delete it, or withdraw consent for us to process it. Withdrawing consent for the phone number will end your ability to log in.

Write to support@sevapuja.app from the number or email on your account. We respond within 30 days.

If you entered someone else's name and gotra in a sankalp, you confirmed you had their permission to do so. They may ask us to remove it at any time.

Security

The site is served only over HTTPS. Login uses a one-time password sent to your WhatsApp number; we never store the code itself, only a keyed hash of it, and it expires in ten minutes.

Session cookies are HTTP-only, so no script on the page can read them, and every booking page checks that the session actually owns the booking before showing anything.

No system is perfect. If we discover a breach affecting your data we will notify you and the Data Protection Board without undue delay.

Cookies

We set one essential cookie, which holds your login session. It is not used for tracking, profiling or advertising, and there is no third-party analytics or advertising cookie on the site.

Contact and grievances

Data controller: [LEGAL ENTITY NAME], [REGISTERED ADDRESS], CIN [CIN]. Grievance Officer: [GRIEVANCE OFFICER NAME], [GRIEVANCE EMAIL], as required by the Information Technology Rules, 2011 and the DPDP Act, 2023.