Privacy Policy

Updated Jul 11, 2026 · Effective Jul 11, 2026

This Privacy Policy is Yagyanam's notice to you as a Data Principal under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the rules made under it. It applies across the ecosystem — the Yagyanam website, the Yagyanam app for seekers and the Yagyanam Expert app. Yagyanam, a GST-registered sole proprietorship concern, Gurugram, Haryana, India, is the Data Fiduciary; its Grievance Officer (also the contact for all data-protection matters) is reachable at hello@yagyanam.com.

1. What we collect

Category	What it includes	Where it comes from
Identity	Name, profile photograph (optional), preferred language	You, at sign-up and on the Account page
Contact	Mobile number (your sign-in), email address	You, verified by one-time codes
Birth details	Date, time and place of birth; gotra and sankalpa details	You, only if you choose astrological or ritual services
Transactions	Bookings, fees paid, invoices, refund history, payment method reference (never full card numbers — those stay with the licensed payment aggregator)	Generated when you pay
Conversations	Messages, calls metadata and files you exchange with experts — sealed to the participants; we cannot read the contents	Generated as you use the service
Usage & device	App version, device type, crash logs, coarse diagnostics; platform-improvement analytics you can switch off	Generated as you use the service

2. Why we process it

Purpose	Data used	Basis under the DPDP Act
Creating and securing your account	Identity, contact	Consent at sign-up
Rendering consultations and rituals you book	Identity, birth details, transactions, conversations (participants only)	Consent; performance of the service you asked for
Payments, invoices, refunds and settlements	Transactions	Consent; legal obligation (tax and accounting law)
Support and grievance redressal	Identity, contact, transactions, what you choose to share	Consent; legal obligation (IT Rules 2021, E-Commerce Rules 2020)
Service and security notifications	Contact	Consent, with per-channel switches on the Notifications page
Platform improvement analytics	Usage & device	Consent — on by default, and yours to withdraw on the Privacy & security page
Compliance with law and lawful orders	The minimum the order lawfully requires	Legitimate uses under Section 7, DPDP Act

Notice comes before consent — and the notice stands alone: the Consent Notice on this Legal page is the separate, plain-language notice the DPDP Rules require, understandable without reading anything else, and it is linked wherever consent is taken.
Consent given, managed, reviewed or withdrawn through a Consent Manager registered with the Data Protection Board (an India-incorporated company under the DPDP framework) is honoured equally as that system operationalises.
Every optional processing — analytics, notification channels, photo visibility, disappearing messages — has its own switch inside the app, and withdrawal is as simple as the consent was: one toggle, effective immediately, no questions asked.
Withdrawing consent does not affect the lawfulness of processing already done, and does not remove processing the law itself requires (for example, preserved tax invoices).
We do not process personal data for behavioural advertising, and we do not sell or rent personal data to anyone.

4. The chat lock

Conversations are sealed to their participants. Yagyanam's systems store and route messages as sealed payloads; no console, dashboard or administrative tool exists that displays a seeker's conversation to Yagyanam. If you seek help with a dispute, you may share excerpts yourself — that act of sharing, by you, is the only way conversation content reaches the Care Team. Where a court or authority empowered by law directs production, we can produce only what the architecture holds, to the extent the law compels.

5. Birth details and the kundli

Birth details occupy a special place in this service and in your privacy. They are collected only if you choose services that need them, are visible only to you and to the experts you actually consult, never appear in any public area, and are excluded from analytics entirely. Delete them any time from the Account page; erasure of the account removes them with everything else.

6. Who receives personal data

Recipient	What they receive	Why
The expert you consult	Your name, and the birth or sankalpa details you provide for the service	They cannot serve you without it; they are bound to confidentiality by the Expert Code of Conduct
Licensed payment aggregator	Payment particulars they themselves collect on their secured pages	Processing payments under RBI regulation; Yagyanam never holds full card data
Cloud infrastructure and SMS/notification providers	The data they must carry to function, under contract as Data Processors	Hosting, delivery of one-time codes and notifications
Courier partners (only when an expert offers prasad and you accept)	Name, delivery address and phone for that consignment — collected from you by the Care Team for this purpose alone, and never shared with the expert	Coordinating an expert-offered delivery without breaching the privacy wall
Authorities empowered by law	The minimum a lawful order specifies	Legal obligation

There is no other category of recipient. Processors act on our written instructions, are bound to security equivalent to ours, and may not use your data for their own purposes.

7. Storage, security and breach

Personal data is stored on infrastructure located in India. Cross-border transfer, if ever needed, will observe Section 16 of the DPDP Act and any government notification restricting destinations.
Security measures include encryption in transit and at rest, sealed conversation storage, scoped internal access on the need-to-operate principle, audit trails, and the responsible-disclosure programme described in its own policy.
In the event of a personal data breach, every affected Data Principal is informed WITHOUT DELAY, in plain language, with: what happened, its possible impact on you, the measures we have taken, the steps you yourself can take to stay safe, and a contact for help. The Data Protection Board of India is notified in the form and time the DPDP Rules, 2025 prescribe.
If Yagyanam is ever designated a Significant Data Fiduciary, it will additionally conduct annual independent audits and Data Protection Impact Assessments, observe algorithmic due-diligence duties, and follow any government direction on restricted categories of data, including local storage where directed.

8. How long we keep it

Record	Kept for	Then
Account profile	While your account lives	Erased on deletion, subject to the rows below
Conversations	While your account lives, or less if you set disappearing messages (24 hours, 7 days or 90 days)	Removed by the schedule you chose, or with the account
Birth details	While you keep them on your profile	Erased the moment you delete them
Transaction and tax records	8 years, as accounting and GST law requires	Destroyed
Grievance records	3 years from closure	Destroyed
Security and access logs	1 year, as the DPDP Rules' safeguards contemplate	Destroyed
Analytics events	24 months, then aggregated	Anonymised beyond re-identification

9. Your rights

Access — a plain summary of what we hold, and a machine-readable export (the Privacy & security page produces it as a CSV, on the spot).
Correction and completion — edit your details on the Account page, or ask us in writing.
Updating — when your details change (a new address, a new number), change them on the Account page and they take effect immediately.
Erasure — delete your account from the Privacy & security page; erasure completes within 30 days except records the law obliges us to keep, and is confirmed in writing.
Nomination — appoint someone to exercise these rights for you if you are unable to: record, change or remove your nominee on the Privacy & security page, on the spot. Where a person with a disability cannot act independently even with support, their lawful guardian — verified as the law provides — may give consent and exercise these rights on their behalf.
Grievance — the Grievance Redressal Policy applies; if unsatisfied, you may approach the Data Protection Board of India.
Withdrawal — every consent switch is on the Privacy & security and Notifications pages, effective immediately.

Collectedwith notice, on consentUsedonly for the purposes itemised aboveStoredin India, sealed and access-scopedErasedby your schedule, your deletion, or retention expiry

10. Children

The Platform is for adults. We do not offer accounts to persons under 18 and do not knowingly process children's data; verifiable parental consent flows under Section 9 of the DPDP Act are therefore not operated. If you believe a child's data has reached us, write to the Grievance Officer and it will be erased.

11. Cookies and similar technologies

The web platform uses strictly-necessary cookies for sign-in and security, and, only with the platform-improvement switch on, first-party analytics cookies. We do not run third-party advertising cookies or trackers. Browser-level refusal of necessary cookies may prevent sign-in from working.

12. Changes and contact

Material changes to this Policy are announced in the app at least 7 days before their effective date. Questions, requests and grievances go to the Grievance Officer, Yagyanam, at hello@yagyanam.com or +91 99997 00117 — the designated contact for personal-data queries the DPDP Rules require us to display, published prominently here and inside the app, and included in every reply we send about your data. The Grievance Redressal Policy states the timelines we are bound to.