Legal
Privacy policy
Draft: this document is pending legal review and may change before launch.
This policy explains how SmartMilan (legal entity name to be added) (“SmartMilan”, “we”) processes personal data when you use SmartMilan, in line with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000 and its rules.
1. Data we collect
- Account data: mobile number, name, and the device and browser you sign in from.
- Profile data: name, gender, date of birth, height, marital status, religion, community, sub-community, gotra, mother tongue, manglik status, diet, location, education, profession, income range, family details, preferences, photos, and optional birth time and place.
- Contact data: the candidate’s and family members’ phone numbers, email and address.
- Activity data: interests sent and received, shortlists, notes you write, meetings you plan, reports and blocks.
- Consent records: who consented, when, how, and to which version of this policy.
- Verification data (only if you choose to verify): identity documents, stored encrypted and visible only to authorised verification staff.
2. Why we use it
- To create and show your profile to other members, only after the candidate has consented.
- To suggest and search matches using the preferences you set.
- To share contact details between two families, only after both have accepted.
- To keep the platform safe: verify accounts, review photos and reports, and prevent fraud and misuse.
- To send service messages such as login codes, interest alerts and consent requests.
- To meet legal obligations and respond to lawful requests from authorities.
We do not sell personal data. We do not use your profile for third-party advertising.
3. Consent and family-created profiles
When a family member creates a profile for someone else, that profile stays private until the candidate confirms with a code sent to their own mobile. The candidate can withdraw consent at any time by hiding or deleting the profile. Withdrawal does not affect processing done before it.
4. Who can see what
- Signed-in members: profile card details (first name, age, city, height, education, profession, community) and photos you allow.
- Connected families: after mutual acceptance, phone number, email and address.
- Your family members: according to the permissions set by your family admin.
- Our staff: only as needed for support, moderation and verification. All access to contact and identity data is logged.
- Service providers: hosting (India), SMS and WhatsApp delivery, and email, under contracts that limit their use of the data.
5. Storage, security and retention
Data is stored on servers in India. We use encryption in transit, restricted access, private photo links that expire, and audit logs. When you delete your account we remove your profile and photos. We keep consent and audit records for up to 3 years, and anything else the law requires us to keep, after which it is deleted.
6. Your rights
Under the DPDP Act you may:
- access a summary of the personal data we hold about you;
- correct or update inaccurate data (most fields can be edited directly in your profile);
- erase your data by deleting your account;
- withdraw consent at any time;
- nominate a person to exercise your rights in case of death or incapacity;
- raise a grievance with us, and then with the Data Protection Board of India.
7. Children
SmartMilan is only for adults of legal marriageable age in India (21 for men, 18 for women). We do not knowingly list anyone younger. Report any such profile and we will remove it.
8. Cookies
We use essential cookies to keep you signed in securely. If we use analytics, it is to understand how the site is used in aggregate, and it never includes profile contents.
9. Changes and contact
If we change this policy materially, we will tell you and ask for fresh consent where required. Questions or requests: support@smartmilan.in. Grievances: see our grievance redressal page.