Version 1, published 3 Oct 2026
This policy explains what personal data Vivahswapn collects, why we collect it, who can see it, how long we keep it and what your rights are. It covers the website https://vivahswapn.com and the Vivahswapn app. 1. Who we are Vivahswapn is run by BitMask LLP, Pune, Maharashtra, India. Under the Digital Personal Data Protection Act, 2023, we are the Data Fiduciary for your personal data. You can reach us at support@vivahswapn.com. 2. What we collect We collect what you give us, what you do on Vivahswapn, and a little technical data. • Account: your name, email address, mobile number, password and preferred language. The password is stored only in a form that cannot be turned back into it. We check your email address with a code. If you sign in with Google, Google gives us your name, email address and profile picture. • Profile: who the profile is for; the person's name, gender, date of birth, marital status and children; religion, community, sub-community, gotra, mother tongue and languages; horoscope details (birth time and place, manglik, rashi, nakshatra, charan, gan, nadi and notes); education, colleges, occupation, employer, income band and place of work; where they live and their native place; family details (family type, values, income band, parents' occupations, brothers and sisters); height, weight, body type, complexion, diet, smoking, drinking, and home and car ownership; what you write about the person and their family; and partner preferences. • Health, only if you choose to answer: physical status, disability, thalassemia and HIV. • Contact details for the profile: phone numbers, WhatsApp number, email address and the best time to call. • Location: places you choose from a list or type in. We never read your device's location. • Photos and files: profile photos, horoscope files, photos you send in messages or with a success story, and the identity document you upload if you ask us to verify a profile. • Activity: interests, messages and their attachments, shortlists, blocks, reports, profiles you view, saved searches, the plan features you use, and the day you were last active. • Calls: who called whom, when and for how long, and the call recording. • Payments: orders, payments, invoices and refunds. An invoice carries your name, email address and mobile number. Razorpay collects your card, UPI or bank details. We never see your full card number. • Referral programme, if you join it: your PAN, a bank account and IFSC or a UPI ID, and any KYC document you upload. If you invite a friend by email, we send that one invitation and keep only a masked form of the address. • Devices and security: push notification tokens for your phone or browser; your IP address and browser or device type when you sign in and when you accept these documents; and the bot and rate-limit checks that stop abuse. • Support: what you write to us and any files you attach. • Family managers: if you are invited to help manage a profile, we hold your account details, your relationship to the person and the permissions the owner gave you. 3. How we use it • To run your account, show your profile to members, suggest matches, and let members send interests, message and call each other. • To review profiles, photos and documents, and to verify identities and phone numbers. • To keep members safe: to investigate reports, stop fake profiles, fraud and abuse, and enforce our terms. • To translate what you type between Marathi and English. Names and places are written in the other script, and your own descriptions are translated. • To take payments, issue GST invoices, pay referral rewards and deduct tax. • To send you codes, and alerts about interests, messages, calls and your plan, by email, push notification, in the app or on WhatsApp, as you choose in your notification settings. We send promotional messages only if you agree to them, and you can turn them off at any time. • To meet our legal duties and answer lawful requests. We use your data on the basis of the consent you give when you sign up and when you add information, and where the law requires us to (for example, tax records). We do not sell your data. We do not show advertising, and we do not use third-party analytics or advertising trackers. 4. Who can see your profile • Only signed-in members, and only after our staff approve the profile. Visitors who are not signed in, and search engines, cannot see profiles. • A paused or deactivated profile does not appear in search or suggested matches. • Members you block cannot see your profile, and you cannot see theirs. • Photos: all members, or only members whose interest you accepted or whose photo request you approve. You choose in settings. • Contact details: only members whose plan includes contact details. You can narrow this to members whose interest you accepted, or to nobody. • Never shown to other members: your answers on physical status, thalassemia and HIV, your identity document, your notification email and your Telegram number. Disability status, if you give it, does appear on your profile. • A member whose plan includes it can see who viewed or shortlisted their profile. Other members can see the day you were last active, unless you switch that off; if you do, you will not see theirs either. • Family members you invite can see and act on the profile within the permissions you give them. • A success story is published on the website and in the app only when both of you agree. It shows your first names, your story and the photo you chose. • Our authorised staff can see your data when they need it for support, moderation, verification or payments. Every time staff read a conversation or contact details, it is logged. 5. Who we share it with We use these service providers to run Vivahswapn. They handle your data only to provide their service to us: • Cloudflare: hosting, storage of files and recordings, voice and video calls (RealtimeKit) and bot checks (Turnstile). • Our database hosting provider. • Upstash: short-lived data, such as sign-in codes and cached results. • Google: Google sign-in, and Firebase Cloud Messaging for push notifications. • Meta: WhatsApp messages and number verification. • Telegram: number verification, if you choose it. • Razorpay: payments and refunds. Referral rewards are paid by bank transfer or UPI, through Razorpay or our bank. • Resend: email delivery. • OpenAI: translation of the text you type in your profile. Some of these providers process data outside India. We also disclose data when the law requires it, for example to a court or the police under a lawful order, and when it is needed to protect someone from harm or fraud. We do not share your data with anyone else. 6. How long we keep it • Messages and their attachments: deleted for both sides 60 days after they are sent. • Call recordings: 30 days. A recording named in a report is kept until the report is closed. • In-app notifications: about 180 days. • Records of who viewed which profile: 12 months. Daily suggested matches: 3 months. Use of plan features: 13 months. Logs of staff actions: 24 months. • Everything else on your account and profiles: until you delete it. • When you delete a profile or your account, it is hidden at once and erased after 30 days. Erasing an account removes its profiles, photos, documents, messages, calls and their recordings, interests, settings, devices, consent records and support requests. • What stays after deletion: orders, payments, invoices and refunds, and referral tax records (PAN, payout details, KYC documents and payouts), for as long as tax and accounting law requires. A report you made about another member stays on their record, without your name. If we banned the account, we keep a coded fingerprint of its email address and mobile number, not the details themselves, so that it cannot sign up again. 7. How we protect it • Every connection to Vivahswapn is encrypted (HTTPS). • Passwords are stored only as hashes. Identity documents are opened only by staff, through links that expire. • Staff get only the access their role needs, and access to sensitive data is logged. • No system is perfectly secure. If a breach affects your data, we will tell you and the Data Protection Board of India, as the law requires. 8. Your rights Under the Digital Personal Data Protection Act, 2023, you can: • ask for a summary of the personal data we hold about you, what we do with it and who we have shared it with; • correct or update your data. You can edit most details yourself; some changes to an approved profile are checked by our staff before they show; • erase your data: delete a profile or your whole account from Settings in the app or on the website, or follow the steps on the Delete account page on our website; • withdraw your consent at any time, by deleting your account or switching off the messages you no longer want. This does not affect what we did before; • nominate a person to use these rights for you if you die or cannot act yourself; • complain to our Grievance Officer and, if you are not satisfied with our answer, to the Data Protection Board of India. For anything you cannot do in the app, write to support@vivahswapn.com. We may need to confirm who you are before we act. 9. Children Vivahswapn is not for children. You must be 18 or older to open an account, and a profile can be made only for a person who has reached the legal age to marry in India (21 for a man, 18 for a woman). We do not knowingly collect data about anyone under 18. If we learn that we have, we delete it. 10. App permissions The app asks for the camera (video calls and profile photos), the microphone (calls), your photos (only the ones you pick) and notifications. It does not read your contacts, your location or your SMS messages. 11. Changes to this policy We publish each new version in the app and on the website, with its date. If a change is significant, we ask you to accept the new version before you continue. 12. Contact and Grievance Officer Grievance Officer, BitMask LLP, Pune, Maharashtra, India Email: support@vivahswapn.com We acknowledge a complaint within 24 hours and resolve it within 15 days.