Privacy Policy

Last updated: February 2026 | DPDP Act 2023 Compliant

1. Information We Collect

ShaadiPakki collects the following categories of personal data to provide our matrimonial services:

  • Account Information: Name, email address, phone number, password (encrypted)
  • Profile Information: Date of birth, gender, height, weight, religion, caste, education, occupation, income range, photos, lifestyle preferences
  • Family Information: Parent details, sibling information, family type and values (only if voluntarily provided)
  • Verification Documents: Government ID, selfie photo, education certificates (stored securely, used only for verification)
  • Usage Data: Profile views, interests sent/received, match interactions, feature usage patterns
  • Communication Data: Messages exchanged between matched users (encrypted in transit and at rest)
  • Device Information: IP address, browser type, device type (for security and analytics)

2. How We Use Your Data

  • To create and maintain your matrimonial profile
  • To match you with compatible profiles using our proprietary algorithm
  • To verify your identity and build trust scores
  • To facilitate communication between matched users
  • To send transactional emails (verification, password reset only)
  • To detect and prevent fraud, scams, and abuse
  • To improve our services through anonymized analytics

We do NOT:

  • Sell your personal data to third parties
  • Send marketing or promotional emails
  • Share your chat messages with anyone (including family members)
  • Use your data for AI training purposes
  • Share your verification documents externally

3. Data Storage & Security

Your data is stored on secure servers located in India. We implement industry-standard security measures including:

  • SSL/TLS encryption for all data in transit
  • Bcrypt password hashing (12 salt rounds)
  • EXIF data stripping from all uploaded photos
  • Rate limiting to prevent brute-force attacks
  • Regular security audits and vulnerability assessments

4. Your Rights Under DPDP Act 2023

As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the right to:

  • Access: Request a copy of all personal data we hold about you
  • Correction: Update or correct any inaccurate personal data
  • Erasure: Request deletion of your account and all associated data
  • Data Portability: Export your data in machine-readable format (JSON)
  • Withdraw Consent: Revoke consent for data processing at any time
  • Grievance Redressal: File complaints about data handling

To exercise any of these rights, visit Settings > Data & Account or contact our Data Protection Officer.

5. Data Retention

  • Active accounts: Data retained as long as account is active
  • Deleted accounts: Data permanently deleted within 30 days (recovery period)
  • Verification documents: Deleted after verification is complete
  • Chat messages: Retained for 1 year after last activity, then auto-deleted
  • Analytics data: Anonymized and retained indefinitely

6. Cookies & Tracking

We use essential cookies only for authentication and session management. We do not use tracking cookies, third-party analytics, or advertising pixels.

7. Data Breach Notification

In the unlikely event of a data breach, we will notify affected users within 72 hours via email and in-app notification, as required by the DPDP Act 2023.

8. Contact Us

For privacy concerns or data requests:

Email: shaadipakki.app@gmail.com