Privacy Policy - Srikaram Pooja

1. Scope and your choices

You can browse much of the devotional content without creating an account. A mobile-number account is required for features such as profile management, pooja booking, payment, booking history, and account deletion. Information marked as required is needed to provide the requested feature. If you do not provide it, that feature may not work. Optional fields such as remarks may be left blank.

2. Information we collect

Account and contact information: country calling code, mobile number, account identifier, full name, delivery address, account verification status, and account creation or last-login dates.
Authentication and security information: one-time-password records and status, login token, IP address, login date, platform source, operating platform, app version, and security or error logs. We do not ask you to give us your OTP outside the login flow.
Pooja and booking information: selected pooja and package, schedule, gotram, names of family members supplied for the pooja, remarks, prasad-delivery choice, booking number, booking status, cancellation, and refund details.
Payment and transaction information: transaction and gateway identifiers, order number, amount, currency, payment status, verification signature, refund status, and related audit records. Card, bank-account, UPI credential, and wallet details entered in checkout are handled by Razorpay; Srikaram Pooja does not intentionally receive or store your complete payment-instrument credentials.
Astrology information: birth date, birth time, and the city you select, including that city's coordinates and time zone, when you request a Jataka or Jyotishyam calculation. The Android app does not request GPS permission; city coordinates are based on your selection rather than the device's live location.
Support and communications: information you include when contacting support and delivery records for OTPs, booking confirmations, payment updates, refund updates, and pooja media notifications.
Website, device, and usage information: browser and device type, IP address, pages viewed, referring page, approximate location inferred from IP, advertising or cookie identifiers, campaign attribution, and interactions with the website.
Cookies and local storage: the website uses security and antiforgery cookies, authentication cookies containing a protected login token and account display information, a campaign-attribution cookie, and cookies or similar technologies used by Google and Meta. The Android app stores its login token in encrypted local preferences and excludes that secure session file from cloud backup and device transfer.

We collect information directly from you, automatically from your device or browser, from our service providers, and from payment or communication partners when they report the outcome of a transaction or message.

3. How we use information

create and authenticate your account and protect it from abuse;
provide profiles, pooja bookings, prasad delivery, booking history, cancellations, refunds, and customer support;
create, verify, reconcile, and audit payments and prevent fraud;
send OTPs and transactional service messages through SMS or WhatsApp;
calculate astrology results using the birth and selected-city information you submit;
deliver images, audio, video, Panchangam, Bhagavad Gita, horoscope, and other devotional content;
measure website performance, campaign effectiveness, and conversions, and improve the Services;
maintain security, diagnose failures, enforce our terms, resolve disputes, and comply with law; and
carry out another purpose that we clearly explain when requesting the information and, where required, obtain your consent.

We share only the information reasonably needed for the following purposes:

Razorpay: payment checkout, processing, verification, reconciliation, refunds, fraud prevention, and dispute support. Checkout may receive your name, phone number, booking reference, order identifier, amount, and currency. See Razorpay's Privacy Policy.
MSG91 and telecommunications or WhatsApp delivery partners: delivery of OTPs and transactional service messages using your phone number and message details. See MSG91's Privacy Policy.
AshriTech content and astrology services: Panchangam and Bhagavad Gita requests, city searches, and astrology calculations. Astrology requests contain the birth date, birth time, selected-city coordinates, and time zone that you submit. Like other internet services, the provider also receives network information such as your IP address.
Varasol and content-delivery or hosting providers: delivery of devotional feeds, horoscope data, images, audio, and video. These providers ordinarily receive request and device/network information needed to deliver content.
Google Tag Manager and Google Ads on the website: website measurement, attribution, conversion reporting, security, and advertising. See Google's Privacy Policy.
Meta Pixel on the website: page-view measurement, campaign attribution, conversion reporting, and advertising. See Meta's Privacy Policy.
Professional advisers, authorities, and other parties: when reasonably necessary for legal compliance, tax and accounting obligations, fraud or security investigations, protection of rights and safety, legal claims, or a business restructuring or transfer with appropriate safeguards.

Google and Meta technologies described above are currently used on the website, not as analytics SDKs embedded in the Android app. Third-party websites, checkout pages, and services are also governed by their own privacy policies.

We do not sell personal information for money. Website advertising and measurement disclosures to Google or Meta may be treated as "sharing", targeted advertising, or a sale under some privacy laws. You may use browser controls to block or delete cookies and may contact us to exercise any applicable opt-out right.

5. Cookies and similar technologies

Strictly necessary cookies support login, security, fraud prevention, request validation, and your selected session. Campaign cookies remember how a visit was referred. Google and Meta tags may set or read identifiers to measure page views, advertising campaigns, and conversions. Browser settings can block or remove cookies, but disabling necessary cookies can prevent login, booking, payment, or account-management functions. Your browser or the relevant provider also may offer advertising and privacy controls.

6. Retention

Account contact and profile information is generally kept while the account is active and is removed or anonymized when account deletion is completed.
OTPs expire after their configured validity window. Delivery and authentication audit records may remain longer for security and abuse prevention; matching OTP records and stored login IP addresses are removed or anonymized through the account-deletion workflow.
Booking, payment, refund, tax, accounting, fraud-prevention, dispute, notification, and service-delivery records may be retained for the period required by applicable law or reasonably needed to complete the service, maintain financial records, handle disputes, and protect users and the business.
Astrology inputs sent from the Android app are used to return the requested calculation and are not intentionally added to your Srikaram Pooja account database. The external astrology provider may process request logs under its own practices.
Residual copies may remain temporarily in protected backups or logs until their normal overwrite or deletion cycle. We may retain de-identified information that can no longer reasonably identify you.

We assess retention using the type and sensitivity of the information, the purpose for which it was collected, security needs, dispute periods, and legal or regulatory obligations.

7. Security and international processing

We use reasonable technical and organisational safeguards appropriate to the information, including HTTPS transmission, access controls, server-side payment verification, protected authentication cookies, and encrypted Android session storage. No internet transmission or storage system can be guaranteed completely secure. Providers may process information in India or other countries where they or their infrastructure operate, subject to applicable legal requirements and safeguards.

8. Your privacy rights and consent choices

Depending on applicable law, you may ask to access a summary of your personal information and its processing, correct or update inaccurate information, erase information, withdraw consent, object to or restrict certain processing, receive a portable copy, nominate another person to exercise rights where recognised, or raise a grievance. You may update your name and address in Profile. Withdrawal does not affect processing already lawfully completed and may prevent us from providing a requested feature. We may need to verify your identity before acting on a request.

Send a request to support@srikarampooja.com. If you are not satisfied with our response, you may complain to the competent data-protection or consumer authority where applicable.

9. Account and data deletion

In the Android app, open Profile and select the account-deletion option (నా ఖాతాను తొలగించండి). You can also use our public account-deletion page, sign in with the mobile number associated with the account, and confirm deletion. The process deactivates the account, removes the mobile-number login, name and address, deletes matching OTP records, anonymizes stored login IP addresses, signs you out, and prevents previously issued login tokens from accessing the account.

Records that must be retained for an unfinished service, payment, refund, accounting, fraud prevention, dispute, or legal obligation are not necessarily deleted at the same time. They are restricted to those purposes and removed or anonymized when the applicable need ends. Contact support before deletion if you have an upcoming pooja, pending refund, or payment dispute.

10. Children

The Services are intended for a general audience and are not designed or marketed specifically to children. A child must use the Services only with the involvement and consent of a parent or lawful guardian where required by applicable law. If you believe a child provided personal information without valid authorisation, contact us so we can review and delete it where appropriate.

11. Changes to this policy

We may update this policy when our practices, providers, features, or legal obligations change. We will post the updated version here and revise the date above. We will provide additional notice or obtain consent when required for a material change.