Privacy & Cookie Policy

We collect the following categories of personal data:

• Identity and contact data — your name, gotra, mobile number and email address.
• Delivery data — the address you provide for Prasad delivery.
• Booking data — your booking history, chosen temples and Puja packages, preferred dates, and any special requests you note.
• Payment reference data — a transaction ID and payment status from Razorpay (never your card, UPI or bank details themselves — see "Payment data" below).
• Device and usage data — your IP address, browser type, device identifiers, pages visited and how you interact with the Platform, collected automatically through cookies and similar technologies.
• Push subscription data — if you opt in to notifications, a device-level subscription identifier managed by OneSignal, our push notification provider.

We only collect personal data for a specific purpose, and only what is needed for that purpose:

• Name, gotra and mobile number — to recite an accurate Sankalp on your behalf, and to identify your Booking. Basis: performance of the Booking you requested.
• Delivery address — to ship Prasad to you where your package includes it. Basis: performance of the Booking.
• Email — to send booking confirmations and receipts. Basis: performance of the Booking.
• Booking history — so you can view your past and upcoming Bookings, and so our support team can help you with them. Basis: performance of the Booking and our legitimate interest in providing support.
• Device and usage data — to keep the Platform secure, diagnose issues, and understand how it is used so we can improve it. Basis: our legitimate interest in operating a secure, working Platform.
• Push subscription data — to send you Booking updates and, if you choose, promotional notifications. Basis: your explicit consent, given through the in-app prompt before any notification permission is requested.

All payment processing is handled entirely by Razorpay, our payment gateway partner. When you pay for a Booking, your card, UPI or net-banking details are entered directly into Razorpay's own secure payment interface — NamoNamaha never receives, sees or stores these details.

What we do store against your Booking is limited to a transaction reference (an ID Razorpay generates) and its status (for example, "paid" or "failed"), so we can confirm your Booking and assist you if there is a payment issue.

We do not sell your personal data. We share it only with the following categories of service providers, only to the extent each needs it to help us provide the service you asked for:

• Razorpay — processes your payment; receives your payment details directly (not through us) and shares back a transaction reference and status.
• The assigned Pandit — receives your name, gotra and Sankalp details, and the Puja date, so the ritual can be performed correctly on your behalf.
• Delivery/courier partners — receive your name, delivery address and phone number, so Prasad can be shipped and delivered to you.
• MSG91 and WhatsApp Business messaging providers — receive your mobile number so we can send OTPs, booking confirmations and updates.
• OneSignal — receives a device-level push subscription identifier (not your name or phone number) so we can deliver notifications you've opted in to.
• Hosting and analytics providers — receive device and usage data to keep the Platform running securely and to help us understand aggregate usage.

We use cookies and similar technologies (such as local storage) for the following purposes, and you can control each of them as described:

• Essential cookies — keep you logged in and remember items like your booking-in-progress. These cannot be switched off without breaking core functionality, but you can clear them at any time through your browser settings.
• Preference storage — remembers things like whether you've dismissed a promotional popup, so we don't show it again too soon. Clearable through your browser's site data settings.
• Push notification subscription — created only if you explicitly opt in through our in-app prompt. You can withdraw this at any time from the notification toggle in your account, or by blocking notifications for our site in your browser or device settings.
• Analytics — helps us understand how the Platform is used, in aggregate. Most browsers let you block third-party analytics cookies in their privacy settings.

We retain your Booking records, including the Sankalp details and delivery address associated with them, for as long as needed to provide the service, resolve any dispute, and meet our accounting and tax record-keeping obligations under Indian law — typically for the duration prescribed by applicable tax and consumer-protection legislation.

Device and usage data is retained for a limited period sufficient for security and analytics purposes, after which it is deleted or anonymised. Push subscription data is retained until you opt out, uninstall, or it otherwise expires.

As a Data Principal under the DPDP Act, you have the right to:

• Access — request a summary of the personal data we hold about you and how it is being processed.
• Correction — ask us to correct inaccurate or incomplete personal data (for example, a misspelled name or an out-of-date address).
• Erasure — ask us to delete personal data that is no longer necessary for the purpose it was collected for, subject to our legal obligation to retain certain records.
• Grievance redressal — raise a complaint about how your personal data has been handled, and have it addressed within a reasonable time.
• Withdraw consent — where processing is based on your consent (such as push notifications), withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, or to raise a grievance, write to us at namonamaha.techteam@gmail.com with your registered mobile number and a description of your request. We will verify your identity before acting on the request and respond within a reasonable time as required by the DPDP Act.

The Platform is intended for use by individuals aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please write to us at namonamaha.techteam@gmail.com so we can remove it.

We use reasonable technical and organisational measures — including encrypted connections (HTTPS), access controls, and reliance on PCI-DSS-compliant payment processing through Razorpay — to protect your personal data against unauthorised access, loss or misuse.

In the event of a personal data breach that is likely to affect you, we will notify the Data Protection Board of India and affected Data Principals as required under the DPDP Act, and take reasonable steps to contain and remedy the breach.

Some of our service providers (for example, our hosting, analytics or push-notification infrastructure) may store or process data on servers located outside India. Where this is the case, we require those providers to maintain security and confidentiality standards consistent with this Policy and applicable Indian law. Where a provider is confirmed to store data only within India, that data does not leave the country.

For any question, request or complaint about your personal data, write to Zeebon Technologies Private Limited:

• Email: namonamaha.techteam@gmail.com
• Address: Flat No. 4A, Rajniwas Apartment, Barbari VIP Road, Magazine, Hengrabari, Guwahati, Kamrup, Assam 781036, India

We may update this Policy from time to time to reflect changes in our practices or applicable law. Material changes will be notified on the Platform and, where you have an account, by email. The "Last updated" date at the top always reflects the current version. Questions about this Policy can be sent to namonamaha.techteam@gmail.com.