1. Declaration of Matrimonial Purpose & Scope

This Privacy Policy is a legally binding document that outlines how Poornata Technologies Private Limited collects, processes, stores, and safeguards your digital personal data. This Platform functions strictly as a matrimonial intermediary and not as a dating platform.

By registering an account, completing our onboarding wizard, or accessing our services, you ("User" or "Data Principal") provide your free, specific, informed, unconditional, and unambiguous consent to the processing of your personal data in the manner described herein. If you do not consent to this processing, you must immediately cease using the Platform.

2. Categories of Personal Data Collected

To facilitate matrimonial alliances, we collect and process the following categories of personal data:

A. Registration & Contact Details

Username, E.164-formatted phone numbers (primary, alternate, and parents' contact numbers), and email addresses.
IP addresses and device identifiers logged during registration, deactivation, or deletion requests.

B. Profile & Cultural Matchmaking Details

Full name, gender, date of birth, physical attributes (height, weight), mother tongue, and lifestyle details.
Caste, sub-caste, Gothra, and ancestral lineage preferences.
Vedic/Astrological Coordinates: Precise time of birth, date of birth, and latitude/longitude coordinates of your birth place. This data is collected solely to automatically compute Ashtkoot Kundali Milan Guna scores.

C. Identity & Education Verification Documents

Government-issued identity cards (e.g., masked Aadhaar, Passport, or Driving License) for identity verification.
Degree certificates and professional documents used to award verification badges.

3. Data Processors, AI Systems & Third-Party Processing Systems

In accordance with Section 8(2) of the DPDP Act, 2023, the Platform engages verified third-party Data Processors under strict data-protection contracts to support platform operations, security, communications, and intelligence:

A. Cloud Infrastructure & Database Hosting

Our primary application servers, databases, and media storage are hosted on secure, enterprise-grade cloud infrastructure with primary data residency in India.

B. Artificial Intelligence & Automated Processing Systems

We employ both internally developed algorithms and contracted external AI systems to deliver matrimonial services:

Internally Developed Algorithms: Proprietary algorithms calculate Vedic compatibility (Ashtkoot Kundali Milan, Guna scores, and Manglik dosha analysis), rank discovery profiles based on mutual preferences, apply dynamic photo watermarks, and auto-detect image positioning to protect member privacy.
External AI & Machine Learning Processors: We may utilize third-party AI services and APIs for automated safety checks, profanity and spam detection, profile biography enhancement assistance, and document authenticity screening.
Data Minimization & AI Terms Disclosure: Where external AI services are used, processing is subject to the respective provider's terms and privacy practices, which may include service improvement or algorithmic training under standard or free tiers. To safeguard your privacy, we follow strict data minimization practices and endeavor to strip direct personal identifiers (such as phone numbers, email addresses, and government ID numbers) before submitting content for AI assistance. Final matrimonial contact decisions remain entirely human and member-driven.

C. Transactional Communications & Messaging

Meta WhatsApp Business API: For users who opt in to WhatsApp updates, transactional notification templates, match alerts, and verification codes are transmitted securely via Meta's WhatsApp infrastructure.
SMS & Email Gateways: High-priority OTPs, account activation links, and security alerts are delivered via trusted transactional gateway providers.

D. Payment Processing Gateways

Subscription payments are processed through RBI-authorized payment aggregators (e.g., Razorpay). The Platform adheres to PCI-DSS standards and never captures or stores debit/credit card numbers, CVVs, or NetBanking passwords on its servers.

E. Web Analytics

First-party and Google Analytics cookies track site telemetry in aggregate form. Non-essential analytics cookies require your explicit consent via our Cookie Policy and remain disabled by default.

4. Protection of Children & Minors (DPDP Act Section 9)

Strict Adult-Only Service & Child Protection Policy:

Under Section 9 of the DPDP Act, 2023 and Indian matrimonial law, this Platform is exclusively available to individuals of legal marriageable age (18 years or older for females, 21 years or older for males).

We do not knowingly collect, process, track, or direct targeted advertising toward children (any individual under 18 years of age). If we become aware that personal data of a minor has been inadvertently submitted, the account will be immediately terminated and all associated personal data permanently deleted.

5. Immediate Deletion of Verification Documents

🛡️ Strict Identity Document Protection Policy:

Under the DPDP Act 2023 minimisation principles, government-issued identity documents uploaded by users are processed solely for the manual review of identity and fraud prevention.

Once our administrative verification team reviews and approves a user's verification status (setting is_verified_id = True), the uploaded ID card file is **permanently and irreversibly deleted from our servers within 24 hours**. We retain only the boolean verification status flag to keep our community safe.

6. Data Retention & Preservation Policy

We retain personal data only as long as your profile remains active. However, to comply with the MeitY Matrimonial Advisory dated 06.06.2016 and other law enforcement requirements:

Deactivation Retention: When you temporarily deactivate or schedule your account for deletion, the Platform is legally advised to and will store the IP address of the profile creator along with registration metadata for a period of at least one year (365 days) from the date of deactivation.
Deletion Retention Window: Profiles scheduled for permanent deletion are deactivated and immediately hidden. The physical database record is permanently purged after 365 days, while audit logs are retained for the statutory period to comply with Indian cybercrime reporting mandates.

7. Data Residency & Cross-Border Transfers (DPDP Act Section 16)

User profile records, identity verification hashes, and contact databases reside on secure cloud infrastructure located within India. To the extent that external data processors (such as global CDN edge nodes or international communication gateways) route data internationally, such transfers comply with Section 16 of the DPDP Act, 2023, ensuring contractual safety safeguards no less stringent than Indian law.

8. Rights of the Data Principal (User Rights)

Under the DPDP Act, 2023, you have the following rights which can be exercised through your Settings control hub:

Right to Access & Summary: You have the right to receive a summary of your personal data processed by the Platform.
Right to Correction & Erasure: You can edit, correct, or request deletion of incomplete or inaccurate profile fields.
Right of Grievance Redressal: You have the right to register complaints regarding any data breach or compliance failure.
Right to Nominate (Section 14): You have the right to nominate any other individual who, in the event of your death or incapacity, shall exercise your rights as a Data Principal under the Act.
Right to Withdraw Consent: You can withdraw your consent for data processing by requesting account deletion, which triggers the statutory deactivation-retention flow.

9. Security Measures

We implement stringent technical and organizational safety features to protect your data:

Dynamic Photo Watermarking: All profile photos are watermarked dynamically on rendering to prevent unauthorized screenshot leaks or duplication.
Verified Member Contact Access: Phone numbers are shown only within the authenticated, verified member experience so interested families can contact each other directly.
Role-Based Administrative Access: Verification documents and sensitive logs can only be viewed by authorized compliance personnel.

10. Grievance Redressal & Escalation to Data Protection Board of India

In compliance with the DPDP Act, 2023 and Rule 3(2) of the Information Technology (Intermediary Guidelines) Rules, 2021, you may address any privacy concerns, consent withdrawal requests, or data grievances to our designated Grievance Officer:

Grievance Redressal Officer

Poornata Technologies Private Limited

Registered Office: Karnataka, India

Email: [email protected]

Phone: +91-9380474327 | +91-7259201303

Response Timelines: Grievances are acknowledged within 48 hours and resolved within 30 days of receipt.

⚖️ Statutory Right to Complain to the Data Protection Board of India (DPBI):

Under Section 13(3) of the Digital Personal Data Protection (DPDP) Act, 2023, if you are not satisfied with the resolution provided by our Grievance Redressal Officer, or if you do not receive a response within the statutory period, you have the right to register a complaint directly with the Data Protection Board of India (DPBI) in the manner prescribed under the Act.

Privacy Policy & Consent Notice