YOUR DATA IS SAFE

Privacy Policy

Effective date: August 2, 2026

About This Policy

This policy explains how UmasDoPuja (also operating as "DoPuja" and "Jyotish.life", hereafter "we"/"us") collects, uses, and protects your information across all our products:

Vedic Astrology Website
umasdopuja.com and jyotish.life — kundali, panchang, matching, reports
DoPuja
Android app com.umasdopuja.user — for booking pandits and pujas
DoPuja Purohit
Android app com.umasdopuja.pundit — companion app for onboarded priests

For any privacy question, write to support@umasdopuja.com.

Information We Collect

Website (Astrology)

Birth Details
Name, date/time/place of birth for kundali generation
Account Info
Email, phone number, and password
Payment Data
Handled by Razorpay; we do not store cards
Usage Data
Pages visited, features used, device info

DoPuja

Account
Name, phone number, email, gender
Address
Home / booking address for puja location
GPS Location
To dispatch the nearest purohit and show live tracking
Booking History
Puja details, samagri notes, timestamps, chat with purohit
Payment Data
Razorpay + wallet + COD; card/bank details handled by Razorpay
Device / Push
Firebase push token, app version, Android version

DoPuja Purohit

Profile
Name, phone, email, gender, languages, capabilities
KYC Documents
PAN, Aadhaar, address proof, profile photo (for onboarding)
Bank Details
Account number + IFSC for RazorpayX payouts (encrypted)
Live Location
Foreground GPS while en route to customer (visible only for that booking)
Booking Activity
Accepted / completed pujas, ratings, wallet balance
Device / Push
Firebase push token, app version, Android version

How We Use Your Information

Create and manage your account, and authenticate you via OTP
Fulfill puja bookings — match the right purohit, share your address with them, and show real-time status
Generate Vedic astrology charts, reports, and panchang / muhurat data
Process payments (Razorpay Checkout), payouts to purohits (RazorpayX), and refunds
Send booking confirmations, reminders, live-status updates, and report deliveries via push, SMS, or WhatsApp
Provide customer support and resolve disputes
Improve our service, detect fraud, and comply with legal obligations

Payments

All payments and payouts run through Razorpay (and Razorpay's payout arm RazorpayX). Card numbers, CVVs, UPI PINs, and bank credentials are entered directly into Razorpay's PCI-DSS-compliant checkout — DoPuja never sees, receives, or stores these details. We keep only the transaction reference, amount, timestamp, and payment method label (e.g., "UPI" or "Card") needed for receipts and support.

Third-Party Services

We do not sell your data. We share only what each partner needs to make the service work:

Firebase (Google) — Authentication token verification, push notifications (FCM)
Google Maps Platform — Address geocoding, routing, and distance for purohit dispatch
Razorpay & RazorpayX — Customer payments, wallet, refunds, and purohit payouts
AiSensy / WhatsApp Business — OTP delivery over WhatsApp (message contents = your OTP code only)
Exotel — Masked calling between customer and purohit — actual phone numbers stay hidden (where enabled)
Legal / law-enforcement — Only when required by valid Indian legal process

Data Security

All traffic is transported over HTTPS/TLS. Passwords and OTP codes are hashed and never stored in plain text. KYC documents (PAN, Aadhaar, address proof) and bank details are kept in access-restricted object storage and are visible only to authorized admin personnel for verification and payout. Access to production systems is limited to a small operations team.

Data Retention & Account Deletion

We keep your account and booking data while your account is active. Transaction records (payments, invoices, GST) are retained for at least 8 years to satisfy Indian tax and accounting law. Booking chat and live-location data are auto-deleted 90 days after a puja completes.

You can request account deletion any time via the Delete Account page or by emailing support@umasdopuja.com from your registered phone/email. We will remove your profile, addresses, booking chat, and push token within 30 days. Records that must be preserved for legal/tax reasons will be anonymised where possible.

Your Rights

Access
Request a copy of your personal data
Correct
Fix inaccurate or outdated information
Delete
Remove your account, address, and profile
Opt Out
Unsubscribe from promotional messages

Cookies

The website uses essential cookies for login sessions and CSRF protection. The mobile apps do not use browser cookies. You can control cookie preferences through your browser settings.

Children

Our services are not directed at children under 18. We do not knowingly collect personal information from anyone below that age. If you believe a minor has provided us data, please email us and we will delete it.

Changes to This Policy

We may update this policy as our services evolve. The "Effective date" at the top will always show the latest version. Material changes will be highlighted in the app or emailed to you.

Questions about this policy? Contact us or email support@umasdopuja.com.