Privacy Policy

• Account details: name, mobile number, email address, gotra, city and state, given when you sign up.
• Booking details: the name and gotra used for the sankalp, names of family members you ask us to include, WhatsApp number, email and prasad delivery address with PIN code.
• Order and payment records: what you booked, amounts, coupon used, order status and the Razorpay payment reference. We do not receive or store your card, UPI PIN, net-banking or wallet credentials; these are entered on Razorpay’s secure window and handled by Razorpay.
• Messages: what you send through the Contact form, WhatsApp or email, and your email address if you subscribe to updates.
• Technical data: IP address and basic request information, used for security, fraud and abuse prevention.

• to create and secure your account and log you in with a one-time password (OTP);
• to perform your puja or chadhava in your name and gotra, share the offering video on WhatsApp and deliver prasad;
• to process payments, issue refunds and send booking confirmations and order updates by email, SMS or WhatsApp;
• to answer your questions and resolve complaints;
• to send occasional festival and offer updates if you subscribed (you can opt out any time);
• to keep the service secure, prevent misuse and meet legal, tax and accounting obligations.

We do not sell your personal information. We share only what is needed with:

• Temple priests / pandit ji and temple partners – your name, gotra and family member names for the sankalp;
• Courier and logistics partners – name, phone number and address to deliver prasad;
• Razorpay – our payment gateway, which processes your payment under its own privacy policy;
• Service providers – such as email delivery and hosting providers who process data on our behalf;
• Authorities – where required by law, court order or to protect rights and safety.

We use one essential cookie (ms_sid) to keep you logged in. It is HttpOnly (not readable by scripts) and lasts up to 30 days or until you log out. Your browser’s local storage is used to remember your cart and show your name in the menu. We do not use advertising cookies.

Our pages load fonts, scripts and images from third-party services (for example Google Fonts, image and content-delivery networks) and Razorpay’s checkout script on the payment step. These providers may receive your IP address and browser details when your browser fetches those files. You can block cookies in your browser settings, but you will not be able to log in or check out without the essential cookie.

• OTPs expire in 10 minutes and are deleted after use or expiry; they are stored only in hashed form.
• Login sessions expire after 30 days.
• Unpaid (abandoned) checkouts are deleted automatically after 24 hours.
• Account and booking records are kept while your account exists, and order and payment records for as long as tax, accounting and consumer laws require.
• Contact messages are kept as long as needed to resolve your query and for our records.

We use HTTPS, OTP-based login (no passwords to leak), HttpOnly session cookies, hashed OTPs, rate-limiting against abuse, and server-side price and payment verification. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and will act promptly if a breach affects you.

• Access and correction: you can view your bookings and edit your name, gotra, city and state after logging in; write to us to correct anything else.
• Deletion: ask us to delete your account and personal data. We may retain records we are legally required to keep (for example invoices and payment records).
• Withdraw consent / unsubscribe: use the unsubscribe option in any update email, or write to us.
• Complaints: raise any privacy concern with our Grievance Officer (below).

To exercise these rights, email support@mandirseva.in from your registered email address so we can verify it is you.

Our services are meant for adults. We do not knowingly collect personal information from anyone under 18. Parents or guardians who book for a child should enter their own details. If you believe a child has given us personal data, contact us and we will delete it.

We may update this policy from time to time. The “Last updated” date at the top shows when it was last changed. If a change is significant we will notify you on the site or by email.

In accordance with the Information Technology Act, 2000 and the rules made under it, you may contact our Grievance Officer for any complaint about the handling of your data or content on this site. We acknowledge complaints within 48 hours and aim to resolve them within one month.