Privacy Policy

For the purposes of the DPDP Act the Data Fiduciary is Benagon Technologies Private Limited (CIN U72200KL2022PTC077476), the company that operates marriageproposal.in — it decides why and how your personal data is processed — and you are the Data Principal. We also follow the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 made under section 43A of the IT Act, 2000.

Data you give us:

• Identity and contact: name, mobile number, email address, date of birth, gender, and your password (stored only as a one-way hash).
• Matrimonial profile: religion, caste and community, mother tongue, marital status and children, height, education, occupation, income, family details, preferences about a partner, your "about" text, and the state and district you live in.
• Photographs you upload.
• Horoscope details (jathakam): date, time and place of birth, if you choose to use that feature.
• Verification data: for the paid ID Verified badge, a selfie for liveness and face match and an identity document such as offline Aadhaar or PAN. This is captured and matched by our verification partner; we receive the result and limited identifiers, not your full document.
• Assurance checks: where you order a blood test, asset or background check, the report from the partner who performed it.
• Anything you write in chat, and reports or complaints you send us.

Data we collect as you use the Service:

• Precise location, only at the moment you tap "verify my current location", and only to derive and confirm your state and district. We do not track your location in the background.
• Call and chat metadata: who called whom, when, and for how long — used for billing, safety and dispute resolution.
• Payment records: what you bought, when, the amount and the gateway reference. We never receive or store your card, UPI or net-banking credentials.
• Device and usage data: device model, operating system, app version, IP address, notification token, and logs of errors and key actions.

Some of this — religion, caste, and any health information in an assurance report — is sensitive. We collect it only because a matrimonial service needs it or because you ordered a check, we use it only for the purpose you gave it for, and an assurance report is shared with another member only when you consent to that specific share.

• To create and show your profile to other members, and to find, rank and suggest matches for you.
• To verify that you are a real person: mobile OTP, optional ID verification, and photo checks.
• To let members send interests, chat and call, and to bill calls per minute from your wallet.
• To operate paid plans, profile views and contact unlocks, and to issue invoices.
• To keep the platform safe: detecting fake and duplicate profiles, blocking contact details in free text so paid unlocks cannot be bypassed, acting on reports, and preventing fraud and abuse.
• To send you service messages and notifications about interests, messages, calls and your plan.
• To provide customer support and handle grievances.
• To comply with law, and to respond to lawful requests from courts and authorised government agencies.

We do not use your data for advertising, and we do not sell or rent it to anyone.

We process your personal data on the basis of the consent you give when you register and when you use a particular feature. Your consent is free, specific, informed, unconditional and unambiguous, given by a clear affirmative action, and is limited to the purposes described in this notice.

We also rely on the "certain legitimate uses" permitted by section 7 of the DPDP Act — for example, complying with a legal obligation or a court order, and responding to a medical or safety emergency.

• Other members: your profile is visible to members according to your privacy settings. Your phone number and email are never shown by default. They become visible to another member only when that member has an active plan, uses a profile view to unlock them, and you have consented to share your contact details.
• Data Processors who work for us under contract, and only on our instructions: our cloud hosting and database provider, our payment gateway, our identity-verification partner, our real-time calling provider, and our push-notification provider.
• Assurance and vendor partners: only the details needed to fulfil an order you placed, and only when you place it.
• Law enforcement, courts and government agencies, where we are required to disclose under a lawful order or under the IT Act, 2000 and the rules made under it.
• A successor entity, if the business is merged or acquired — in which case this policy continues to apply to your data, and you will be told.

We never sell your personal data, and we do not share it with data brokers or advertisers.

Your data is stored on servers operated by our cloud providers. Some of our processors may store or process data outside India. Where that happens, the transfer is limited to countries not restricted by the Central Government under section 16 of the DPDP Act, and is covered by contractual safeguards requiring the processor to protect your data to the standard described in this policy.

• Profile and account data: for as long as your account is active.
• After you delete your account or withdraw consent: erased, except where we must retain it.
• Payment, invoice and tax records: retained for the periods required under Indian tax and company law.
• Safety records: reports, blocks and moderation decisions may be kept for a limited period so that a banned member cannot simply re-register, and to defend legal claims.
• Chat messages: retained while both accounts exist, and deleted when either account is deleted.

We also erase personal data we no longer need for the purpose it was collected for, as required by section 8(7) of the DPDP Act.

As a Data Principal under the DPDP Act you have the right to:

• Access — get a summary of the personal data we process about you and the processing activities we carry out, and the identities of anyone we have shared it with.
• Correction and erasure — have inaccurate or misleading data corrected, incomplete data completed, data updated, and data erased when it is no longer needed.
• Grievance redressal — a readily available means of raising a grievance with us, which we must respond to.
• Nomination — nominate another individual to exercise your rights on your behalf in the event of your death or incapacity.

Most of these you can do yourself: edit or clear fields in Profile → Edit, manage what is visible in your privacy settings, and delete everything from Profile → Account → Delete all my data. For anything else, write to privacy@marriageproposal.in from your registered email address or contact the Grievance Officer below. We respond within the timelines prescribed under the DPDP Act, and in any case within 30 days.

You also have duties under section 15 of the DPDP Act: not to impersonate anyone else when providing your data, not to suppress material information, not to register a false or frivolous grievance or complaint, and to furnish only authentic information when seeking correction or erasure.

The Service is not for children. We do not knowingly collect the personal data of anyone under 18. If we learn that an account belongs to a child, we will close it and erase the data. We do not carry out behavioural monitoring or targeted advertising directed at children.

Where a member has children of their own and chooses to record that in their profile, we collect only the relationship and age they enter — no name, photograph or contact detail of the child.

• All traffic between the app and our servers is encrypted in transit (HTTPS/TLS).
• Passwords are stored only as salted one-way hashes; we cannot read them.
• Photographs are served through our own proxy rather than from public URLs, and are watermarked for accounts on the free tier.
• Screenshots are blocked on profile and photo screens on Android. iOS does not allow apps to block screenshots.
• Access to production data is restricted to authorised staff, and administrative actions are logged.
• Optional two-factor authentication, and rate limits on OTP requests and password changes.

No system is perfectly secure. If a personal data breach occurs, we will notify each affected Data Principal and the Data Protection Board of India in the form and within the time required by the DPDP Act and the rules made under it.

The mobile app does not use advertising cookies or third-party advertising trackers. Our website uses cookies that are necessary to keep you signed in and to keep the site secure, and may use privacy-respecting analytics to understand which pages are used. You can clear or block cookies in your browser, though the site may then not work properly.

For anything about your personal data — a question, a request to exercise your rights, or a complaint — contact our Grievance Officer, who is also our contact point under section 13 of the DPDP Act.

We acknowledge every request within 24 hours and respond within 15 days, or sooner where the law requires. If you are not satisfied with our response, you may complain to the Data Protection Board of India constituted under the DPDP Act.

This policy is published in English. If you would like it explained in your language, write to us or call support and we will help. Where a translation is provided and there is any conflict, the English version prevails.

Operated by Benagon Technologies Private Limited (marriageproposal.in) CIN: U72200KL2022PTC077476 · GSTIN: 32AALCB0089Q1Z9 Elanjimattom Road, Amaravathy PO Kumily, Kerala 685509 Support: support@marriageproposal.in

If we change how we use your personal data, we will publish the updated policy here and, where the change is material, ask for your consent again or notify you in the app before it takes effect.