Privacy Policy

Shree Dharniputra Dharmik Samajik Shod Sansthan Ujjain ("we," "our," or "us") is committed to protecting the privacy of devotees and visitors who use our online pooja booking platform at mangalnath.org ("Platform"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Platform.

By using our Platform, you consent to the practices described in this policy. If you do not agree, please do not use the Platform.

1. Information We Collect

1.1 Personal Information

When you register or book a pooja, we collect:

• Full name (as entered for Sankalp / ritual invocation)
• Email address
• Phone number
• Gotra (ancestral lineage), if provided
• City of residence
• Number of devotees attending
• Special instructions or Sankalp notes

1.2 Payment Information

We do not collect, store, or process your credit/debit card details, UPI PINs, or bank account information on our servers. All payment processing is handled securely by Razorpay, a PCI-DSS compliant payment gateway. Razorpay may collect and process your payment data in accordance with Razorpay's Privacy Policy.

1.3 Booking Records

We maintain records of your bookings, including:

• Pooja/havan selected and slot time
• Booking reference number (e.g., MNG-XXXXXX)
• Payment status and transaction details (payment ID, order ID)
• Digital receipts and confirmation emails

1.4 Device & Usage Information

When you visit the Platform, we may automatically collect:

• IP address and approximate geographic location
• Browser type, version, and operating system
• Pages visited, time spent, and navigation patterns
• Referring URL and device identifiers

2. How We Use Your Information

We use the information we collect to:

• Process and confirm pooja and havan bookings
• Send booking confirmations, digital receipts, and reminders via email
• Generate Sankalp details for priests to use during rituals
• Process payments and issue refunds when applicable
• Communicate important updates about your booking or the temple
• Improve our Platform, services, and user experience
• Prevent fraudulent transactions and ensure platform security
• Comply with applicable legal and regulatory requirements

3. Payment Processing

All payments on the Platform are processed through Razorpay Software Private Limited. Razorpay is certified under PCI-DSS (Payment Card Industry Data Security Standard) and complies with RBI guidelines for digital payment processing in India.

When you make a payment, you are redirected to Razorpay's secure payment page. We receive only a payment confirmation and transaction ID from Razorpay — we never see or store your card number, CVV, UPI PIN, or net banking credentials.

4. Third-Party Services

We use the following third-party services that may collect or process your data:

• Clerk — Handles user authentication (sign-up, sign-in, password management). Your email and authentication credentials are managed by Clerk in accordance with their privacy practices.
• Razorpay — Processes all payments. Card data and payment credentials are handled solely by Razorpay.
• Amazon Web Services (AWS SES) — Sends transactional emails (booking confirmations, receipts, notifications) on our behalf.
• Google OAuth — Optional sign-in via Google account. We receive only your name and email from Google.

Each third-party provider operates under their own privacy policy. We encourage you to review their policies.

5. Data Storage & Security

Your data is stored on secure servers hosted in India. We implement industry-standard security measures including:

• Encrypted data transmission (HTTPS/TLS)
• Password hashing and secure authentication via Clerk
• Role-based access controls for administrative functions
• Regular security updates and dependency patching
• Database access restricted to authorized personnel only

While we take reasonable measures to protect your data, no system is completely secure. We cannot guarantee absolute security against unauthorized access, hacking, or data loss.

6. Cookies & Tracking

We use essential cookies to maintain your session and authentication state. These cookies are necessary for the Platform to function properly and cannot be disabled.

We may also use analytics tools to understand how visitors use the Platform. These tools may use cookies or similar technologies to collect usage data. You can manage cookie preferences through your browser settings.

7. Data Retention

We retain your personal data for as long as necessary to:

• Fulfill the purpose for which it was collected (booking and ritual records)
• Comply with legal, tax, and regulatory obligations (financial records retained for 7 years per Indian law)
• Resolve disputes and enforce our agreements

Booking and payment records are retained for a minimum of 7 years to comply with Indian tax regulations. You may request account deletion, after which your personal information will be removed except where retention is required by law.

8. Your Rights

Under applicable Indian data protection laws, you have the right to:

• Access a copy of the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your data (subject to legal retention requirements)
• Withdraw consent for data processing (which may affect your ability to use the Platform)
• Lodge a complaint with the relevant data protection authority

To exercise any of these rights, please contact us using the details provided below.

9. Data Sharing

We do not sell, rent, trade, or otherwise share your personal information with third parties for marketing purposes. We share data only with:

• Service providers listed in Section 4 (payment processing, authentication, email delivery)
• Law enforcement or government authorities when required by law or legal process
• Professional advisors (auditors, legal counsel) under confidentiality obligations

10. Children's Privacy

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a child under 18 has provided personal data, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Significant changes will be communicated via email or a notice on the Platform. Continued use of the Platform after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us: