Privacy Policy

Summary

We collect only what we need to help you find a match and to keep the site safe. We never sell your data. You can see, correct or delete your data at any time. This policy follows the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000. For any question about your data, write to our Grievance Officer (details below), who also looks after data protection.

Who we are

Mangalya Vivah Consultant, Pune, Maharashtra, India runs mangalyavivah.com and decides how your personal data is used (we are the "data fiduciary").

What we collect

• Account: mobile number, email address and password (stored only in scrambled, one-way form).
• Profile: name, date of birth, gender, religion, caste, height, education, occupation, income, location, photos, family details, and anything else you choose to add (for example horoscope details).
• ID verification: from DigiLocker we receive only your name, date of birth, gender and a one-way reference that stops one ID being used twice. We never store your Aadhaar, PAN or licence number, or a copy of the document.
• Activity: interests sent and received, shortlists, messages, profile views and payment records (order number, amount, date, status).
• Technical: IP address, browser and device type, and pages visited, used for security and to fix problems.

Why we use it

• To create your profile and show it to suitable members.
• To verify that members are real and of legal age to marry.
• To send codes, alerts about matches and interests, and service messages.
• To process payments and keep the records that tax law requires.
• To stop fraud and misuse, and to comply with the law.

Who can see your profile

• Only logged-in members who have verified their ID can see profiles.
• Your income is shown only to verified members.
• Your contact details are shown only to verified members with an active membership.
• You can hide your profile at any time from Settings.

Who we share data with

We do not sell or rent your data. We share it only with service providers who help us run the site, under contracts that require them to protect it: Amazon Web Services (hosting in India, and email), MSG91 (SMS codes), DigiLocker (ID verification) and Zoho Payments (payments). We may also disclose data when the law, a court or a government authority requires it.

Cookies

We use only the cookies the site needs to work: one to keep you logged in and one to remember your language. We do not use advertising cookies.

How long we keep data

We keep your data while your account is open. If you delete your account, we erase your profile, photos and messages within 30 days. Payment records are kept for as long as tax law requires, usually up to 8 years. If you do not log in for 6 months, we email you and then hide your profile. If you do not visit for 2 years, we email you and erase the account 30 days later, unless you log in before then. Deleted data can stay in our encrypted backups for up to 14 more days, after which it is removed automatically. For security, records of visits to the site (IP address, page and time) are kept for 90 days. So that the free premium offer is used only once per person, we keep a scrambled code of your ID reference, mobile number and email after your account is deleted; your real details cannot be read back from it. When you report someone from a chat, our team reads the recent messages between you and that member to look into the report. The record of when and from which IP address an account was created is kept for one year after deletion, as Indian law requires.

Your rights

• See the data we hold about you, and correct it.
• Delete your account and data (Settings, then Delete profile).
• Withdraw your consent at any time. We will then stop using your data, which means closing your account.
• Name another person to exercise these rights if you die or cannot act yourself.
• Complain to our Grievance Officer and, if you are not satisfied, to the Data Protection Board of India.

How we protect data

The site uses HTTPS encryption, passwords are stored in one-way scrambled form, staff access is limited and logged, admin accounts use two-step login, and we test new features in a separate sandbox before they go live. If a security breach affects your personal data, we will tell you without delay — what happened, what it may mean for you and what you can do — and report it to the Data Protection Board of India.

Children

The site is not for anyone under 18. We delete any profile we find of a person under the legal age to marry.

Changes

If we change this policy, we will show the new version on the site and ask you to accept it the next time you log in.

Grievance officer