Privacy Policy

1. Introduction

Om Puja Arpan is an end-to-end puja arrangement and conducting service. When you book a puja through our mobile application, we collect and process certain personal data to fulfil your booking, coordinate with assigned Pandits and vendors, and deliver the service at your chosen location.

This Privacy Policy is consistent with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules). By using the Arpan app, you consent to the practices described herein.

2. Data We Collect

2.1 Data You Provide Directly

• Name — to identify you and to share with the assigned Pandit for the booking
• Phone number — for booking confirmations, service coordination, and Pandit contact
• Home / office / venue address — the location at which the puja is to be conducted
• Puja preferences and booking details — the type of ceremony, preferred date, time, and any special instructions you provide

2.2 Payment Information

Payments are processed by our third-party payment provider, Razorpay. Om Puja Arpan does not store, process, or have access to your full card number, CVV, or banking credentials. Payment data is governed by Razorpay's own privacy policy and PCI-DSS compliance. We receive only a transaction reference and payment status.

2.3 Device and Usage Data

• Device identifiers (device model, OS version, unique device ID)
• App usage analytics (screens viewed, features used, session duration)
• IP address and network type
• Crash reports and performance diagnostics (collected via analytics tools — see Section 5)

We collect device and usage data to maintain app performance, diagnose issues, and improve our service. This data is typically aggregated or anonymised where possible.

3. Why We Collect Your Data (Purpose & Legal Basis)

4. How We Use Your Data

• To create and manage your booking
• To coordinate with the assigned Pandit and vendors for samagri procurement and decoration setup
• To send booking confirmations, reminders, and service updates via SMS or push notification
• To process payment and issue receipts (via Razorpay)
• To resolve disputes, handle grievances, and respond to support requests
• To detect and prevent fraud, unauthorised access, or misuse of our platform
• To improve our app, services, and user experience through aggregated analytics
• To comply with legal obligations and respond to lawful requests from authorities

We do not use your personal data for unsolicited marketing without your consent, nor do we build profiles for the purpose of selling data to third parties.

5. Who We Share Your Data With

We share your personal data only to the extent necessary to deliver the service you have booked. We do not sell your personal data to any third party.

5.1 Assigned Pandits

We share your name, phone number, venue address, and booking details with the Pandit assigned to your booking, solely so they can arrive at your location and perform the ceremony.

5.2 Samagri Vendors and Decoration Teams

We share your venue address and booking details (puja type, date, time) with vendors we engage to procure samagri and set up decoration, solely for service delivery.

5.3 Payment Processor

Payments are processed by Razorpay Software Pvt. Ltd. who act as an independent data controller for payment data. Please refer to Razorpay's Privacy Policy for details.

5.4 Hosting and Analytics Providers

We use cloud hosting and analytics service providers to operate the Arpan platform. . These providers process data only on our instructions and are subject to confidentiality obligations.

5.5 Legal and Regulatory Disclosure

We may disclose your data if required to do so by law, court order, or lawful authority, or to protect the rights, property, or safety of Om Puja Arpan, its users, or the public.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law.

• Active account data — retained for the lifetime of your account.
• Post-account deletion — retained for 12 months to satisfy legal, tax, and audit obligations, then securely deleted or anonymised.
• Booking and transaction records — retained for 3 years as required under applicable Indian accounting and tax laws.
• Device and usage data — retained in aggregated or anonymised form indefinitely; identifiable device data retained for 12 months.

7. Security Measures

We implement reasonable technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction, including:

• Encryption of data in transit (TLS/HTTPS) and at rest
• Access controls and role-based permissions
• Regular security reviews and vulnerability assessments
• Payment processing delegated entirely to PCI-DSS compliant provider (Razorpay)
• Confidentiality obligations imposed on Pandits and vendors who receive your data

No transmission of data over the internet is 100% secure. If you believe your data has been compromised, please contact us immediately using the details in Section 11.

8. Your Rights as a Data Principal

Under the DPDP Act, 2023, you have the following rights with respect to your personal data:

• Right to information — you may request a summary of the personal data we hold about you and the manner in which it has been processed.
• Right to correction and erasure — you may request correction of inaccurate or incomplete data, or erasure of data we no longer need for the stated purposes.
• Right to withdraw consent — where processing is based on your consent, you may withdraw consent at any time. Withdrawal does not affect lawful processing before withdrawal and may affect our ability to deliver services.
• Right to grievance redressal — you may raise a grievance with our Grievance Officer (Section 11). If unresolved, you may approach the Data Protection Board of India once operational.
• Right to nominate — you may nominate another person to exercise your rights on your behalf in the event of your death or incapacity.

To exercise any of the above rights, contact us at support@ayvik.ai. We will respond within 30 days of receiving your request.

9. Children's Privacy

The Arpan service is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe a child under 18 has provided us with personal data, please contact us immediately and we will take steps to delete such information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. We will notify you of material changes by posting the updated policy within the app and updating the "Last updated" date above. Your continued use of the Arpan app after such changes constitutes your acknowledgement of the updated policy.

11. Grievance Officer & Contact

In accordance with the DPDP Act, 2023, and the IT Act, 2000, we have designated a Grievance Officer to address privacy-related concerns. You may contact us for any privacy request, data correction, or grievance:

We will acknowledge your grievance within 48 hours and endeavour to resolve it within 30 days.