Privacy Policy & Data Security

2Information We Collect & Why

We collect information that you voluntarily provide when creating or editing your matrimonial profile. Because marriage biodatas in India serve as cultural introductions between families, this information includes:

3Lawful Purpose & Legal Basis for Processing

Under Section 4 and Section 6 of the DPDP Act 2023, we process your data based on your explicit affirmative consent given when you create an account, submit your biodata, or choose to publish your profile link.

We process your information solely for the following purposes:

• To generate your customized mobile biodata web link (e.g., myshadiprofile.in/p/your-slug).
• To generate print-ready, publication-grade vector A4 PDF documents.
• To verify your account identity via secure SMS One-Time Passwords (OTP).
• To facilitate 1-click bilingual translation into Indian regional languages when selected by you or profile viewers.
• To prevent fraud, automated scraping, account takeover, or platform misuse.

4Where & How Your Data is Stored

We utilize world-class, ISO 27001 and SOC 2 certified cloud infrastructure provided by Google Cloud Platform & Firebase:

• Database Storage: Profile records are stored in Google Cloud Firestore databases located in secured multi-region data centers with automated failover and daily encrypted backups.
• Encryption at Rest: All data stored in our databases and cloud buckets is encrypted using 256-bit Advanced Encryption Standard (AES-256).
• Encryption in Transit: All communications between your device, our Next.js edge servers, and our databases use Transport Layer Security (TLS 1.3 / HTTPS) with strict HSTS headers.
• Granular Security Rules: Database read/write rules enforce that only verified user session tokens can modify, update, or delete account biodata.

5PIN Protection & Sensitive Field Masking

To protect candidates from unwanted calls or unsolicited inquiries, our platform incorporates a server-side PIN Privacy feature:

• When Privacy Protection (PIN Mode) is enabled, sensitive fields (contact number, WhatsApp number, email, and address) are stripped on the server before transmitting public profile data.
• The visitor must request the 4-digit PIN directly from the candidate or family.
• PIN verification occurs strictly on our backend API endpoint (/api/profile/verify-pin). The private PIN is never exposed to the client browser source code.

6Google Search Blocking & Anti-Scraping Policy

Unlike public social networks or classified sites, we deliberately block search engine indexers from listing user profiles:

• Robots Exclusion: Our root robots.txt file explicitly disallows Googlebot, Bingbot, and all automated crawlers from accessing /p/ and /p/*.
• No-Index Meta Headers: Every individual profile page serves HTTP and HTML headers: <meta name="robots" content="noindex, nofollow, nocache" />.
• Sitemap Exclusion: User profile URLs are never submitted in sitemap.xml.
• Legal Prohibition of AI Scraping: As articulated in our /llms.txt policy, automated scraping, data harvesting, and model training on personal records hosted on this platform is strictly forbidden and constitutes a violation of the DPDP Act 2023 and the IT Act 2000.

7Third-Party Processors & Data Disclosure

We only share minimal necessary data with vetted infrastructure providers under strict data processing agreements:

• Cloud & Database Hosting: Google Cloud Platform & Firebase (USA / India server clusters).
• SMS OTP Gateways: Telecommunications partners solely for sending authentication codes to your mobile device.
• Translation APIs: When bilingual translation is triggered, non-confidential textual snippets (e.g. occupation terms, education titles) are securely passed to translation endpoints. Private contact numbers and addresses are strictly excluded from translation payloads.
• Legal Compliance: We will only disclose personal records if strictly compelled by a verified court order or statutory Indian law enforcement warrant under the Code of Criminal Procedure, 1973.

8Lifecycle: Married, Paused & Deactivated Profiles

We recognize that marriage profiles are temporary and should be retired once a marriage is finalized:

• Married Status: When you mark your profile as “Married” in the dashboard, the public link immediately ceases displaying your biodata, photos, horoscope, or contact details. Instead, visitors see a celebratory celebratory badge honoring the union.
• Non-Active / Paused Status: If you wish to take a break from matchmaking, setting status to “Non-active” replaces the live link with a private paused notice.

9Data Retention & Right to Permanent Deletion

Under the DPDP Act 2023, you have an unqualified Right to Erasure (Right to be Forgotten):

• You can delete individual photos, bio text, or your entire account directly from your Dashboard settings.
• Alternatively, you can email privacy@myshadiprofile.in with your registered mobile number, and our team will permanently purge your data within 72 hours.
• Once deleted, profile data and associated photo files are permanently purged from active databases and cannot be restored.

10Your Statutory Rights as a Data Principal

As a citizen and user under Indian and global data privacy legislation, you possess the following rights:

11Cookies & Local Storage

We do not use invasive third-party tracking cookies or advertising beacons. We strictly use essential first-party browser local storage (localStorage) to maintain your login session token, profile drafting state, and preferred interface language.

12Grievance Officer & Statutory Contact Details

In compliance with Section 13 of the Digital Personal Data Protection Act, 2023, and Rule 5(9) of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the contact details of our Grievance Officer are: