Privacy Policy

1. Who we are

MandirMay is a service operated by PujaPurohit Bharat Technologies Private Limited (“MandirMay”, “we”, “us”), a company incorporated in India. We are the data fiduciary responsible for the personal data described in this policy.

2. Information we collect

a. Account and identity

We sign you in using your mobile number and a one-time password (OTP). We store your mobile number, and the name and email address you choose to add to your profile. We never see or store your OTP.

b. Booking and traveller details

When you build an itinerary we collect your visit dates, the temple and services you select, the number of devotees, and — if you are booking for someone else — that traveller's name and mobile number. We also store your order IDs, invoices and booking history.

c. Payment information

Payments are processed by Razorpay. Your card, UPI, netbanking and wallet details are entered on Razorpay's secure checkout and are never stored on MandirMay servers. We only retain the payment reference ID, amount, currency and payment status returned to us.

d. Support conversations

If you chat with us, we store the messages you send, the replies you receive, and the name and phone number you share in that conversation, so our team can follow up and improve support quality.

e. Device and usage data

We automatically collect limited technical information, including:

• A randomly generated device identifier and session identifier
• Pages viewed, time on page, and the actions you take while booking
• Browser and operating system type, and the page that referred you
• Approximate location (country/city) derived from your IP address

We do not collect precise GPS location, and we do not ask for your home address for temple bookings.

3. How we use your data

• To create and manage your account and authenticate you securely
• To confirm, arrange and deliver the services you book — including passing the necessary details to temple representatives, hotels, drivers and pandits
• To process payments, issue invoices and handle refunds
• To send booking confirmations, itinerary updates and service-related messages over SMS, WhatsApp, email or in-app notifications
• To provide customer support and resolve complaints
• To understand how our site is used so we can improve the booking experience, measured in aggregate wherever possible
• To detect, prevent and investigate fraud, abuse and violations of our terms
• To comply with tax, accounting and other legal obligations

We rely on your consent, the performance of our contract with you, our legitimate interest in operating and securing the service, and our legal obligations, as applicable.

4. Who we share it with

We do not sell your personal data. We share it only as needed to deliver your booking and run our business:

• On-ground service partners — temple representatives, pandits, hotels and transport providers receive the minimum details needed to serve you.
• Razorpay — to process payments and refunds.
• Google Firebase — for authentication, database and hosting infrastructure.
• Communication providers — to deliver OTPs, SMS and WhatsApp messages.
• Internal operations tooling — our support and operations team receives alerts about new enquiries and bookings so we can respond quickly.
• Authorities — where required by law, court order, or to protect our rights, users or the public.

If our business is merged, acquired or reorganised, personal data may be transferred as part of that transaction, subject to this policy.

5. Cookies and local storage

We use your browser's local and session storage rather than advertising cookies. The main identifiers we set are:

• mm_device_id — a random ID stored on your device so we can recognise a returning browser and keep your chat history together.
• mm_session_id — a random ID that lasts only for the current browsing session.
• mm_support_chat_id — links you to your existing support conversation.

These identifiers are not linked to any advertising network. Clearing your browser storage removes them; you may then appear to us as a new visitor.

6. Arjun, our AI assistant

Arjun is an automated assistant that answers questions about temple darshan, passes, puja and stays. To generate a reply, the messages in your conversation are sent to our AI service.

Conversations may be reviewed by our support team to resolve your query and to improve the quality of our answers. A human agent can join the conversation at any time.

7. How long we keep data

• Booking, invoice and payment records — retained for at least 8 years, as required by Indian tax and accounting law.
• Account details — retained while your account is active.
• Support conversations — typically retained up to 24 months.
• Usage and analytics data — retained in aggregated or de-identified form.

8. Security

We use encryption in transit (HTTPS), access controls, and trusted infrastructure providers to protect your data. Payment details are handled entirely by our PCI-DSS compliant payment gateway. No method of transmission or storage is completely secure, so we cannot guarantee absolute security — but we work continuously to protect your information and will notify you and the relevant authority of a significant breach as required by law.

9. Your rights

Subject to applicable Indian law, you may ask us to:

• Access the personal data we hold about you
• Correct information that is inaccurate or incomplete
• Delete your account and associated data, except records we must keep for legal, tax or fraud-prevention reasons
• Withdraw consent for marketing messages at any time
• Nominate another person to exercise your rights in case of incapacity

To make a request, email support@mandirmay.com from the email or mobile number linked to your account. We respond to verified requests within 30 days.

10. Children

MandirMay is intended for users aged 18 and above. We do not knowingly collect personal data from children. Children may of course travel as part of a booking made by an adult; in that case the booking adult is responsible for the details provided. If you believe a child has provided us data directly, contact us and we will delete it.

11. Changes to this policy

We may update this policy as our services evolve or the law changes. The “last updated” date at the top always reflects the current version. Where changes are significant, we will give you notice through the site or by message before they take effect.

12. Contact & grievances

For any privacy question, request or complaint, please contact our Grievance Officer:

We acknowledge grievances within 48 hours and aim to resolve them within 30 days.