The short version: We collect only what is needed to send you the daily morning message you signed up for. We never sell, rent, or share your data with advertisers. You can ask us to delete everything at any time, and we will — within 7 days.
This Privacy Policy describes how Mahajan Ventures (operating the service "Sumeeran" at sumeeran.com) collects, uses, stores, and protects personal information. It is written to comply with India's Digital Personal Data Protection Act, 2023 (DPDPA), the Information Technology Act, 2000, and applicable Rules thereunder.
By signing up for Sumeeran, you consent to the practices described here. If you do not agree with any part of this policy, please do not use the service.
01Who We Are
Sumeeran is operated by Mahajan Ventures, a sole proprietorship registered in Mumbai, Maharashtra, India, with Kundan Vijaykumar Mahajan as proprietor. For the purposes of the DPDPA, Mahajan Ventures is the Data Fiduciary; you (the subscriber) are the Data Principal.
Throughout this policy, "we", "us", "our", and "Sumeeran" refer to Mahajan Ventures operating the Sumeeran service.
02What Information We Collect
We collect only the information you provide directly when you sign up. We do not use tracking pixels, advertising cookies, or third-party analytics that profile you.
| Information | Why We Need It |
|---|---|
| Your name | To personalize each morning's greeting |
| Country | To calculate panchang correctly for your timezone and select region-relevant festivals |
| WhatsApp number | The channel on which we deliver your daily message — this is the core of the service |
| Chosen deity / tradition | To send content tailored to your sampradaya — not a generic version |
| Preferred language | To deliver the message in English, Hindi, or Marathi as you chose |
| Streak & sumiran counts | If you reply with your count, we store it to maintain your streak — this is optional |
| Payment metadata | If you pay a yogdaan, transaction reference, amount, and timestamp — handled by our payment processor (Razorpay), not stored by us in full |
We do not collect: your date of birth, gender, caste, address (beyond country), payment card numbers, location data, browsing history, or any sensitive personal information beyond what is listed above.
03Where Your Information Is Stored
Your information is stored in the following systems, each of which provides industry-standard security:
- Google Sheets (owned by Google LLC) — primary subscriber database, stored on Google Workspace under our account, accessible only to authorized Sumeeran personnel
- AiSensy (a WhatsApp Business Solution Provider authorized by Meta) — for WhatsApp message delivery; AiSensy holds your name and phone number to send messages on our behalf
- Meta / WhatsApp — Meta operates the WhatsApp Business API. Your name and phone number pass through Meta's infrastructure to deliver messages, per WhatsApp's own privacy terms
- Razorpay — when you pay a yogdaan, Razorpay processes the payment per their own privacy policy. We see only transaction reference, amount, and status, not your card or bank details
- Cloudflare — our website host. Cloudflare receives standard server logs (IP address, user agent, timestamps) per their privacy policy. We do not access these logs for marketing
We do not transfer your personal data outside the systems above. We do not sell, rent, lease, or share your information with advertisers, marketers, data brokers, or any third party not listed here.
04How Long We Retain Your Information
- While you are an active subscriber: for as long as you continue to receive the service
- After you cancel: all your personal information is deleted from our active systems within 7 days, except payment records which we retain for 7 years as required by Indian tax law (Section 44AA of the Income Tax Act, 1961)
- Payment records retained are limited to transaction reference, amount, and date — not your contact details
05Your Rights Under DPDPA, 2023
As a Data Principal under the DPDPA, you have the following rights, which you may exercise by writing to us:
- Right to access — request a copy of the personal information we hold about you
- Right to correction — request that we correct any inaccurate information
- Right to erasure — request deletion of your personal information (with the legal-retention exception noted above)
- Right to withdraw consent — you may withdraw your consent to processing at any time; this will result in cancellation of the service
- Right to grievance redressal — to escalate any concern about our handling of your data
- Right to nominate — to nominate someone to exercise your rights in case of death or incapacity
To exercise any of these rights, write to us at hello@sumeeran.com. We will respond within 30 days as required by law.
06Security
We take reasonable physical, technical, and administrative measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Access to our subscriber database is limited to authorized personnel and protected by strong passwords and two-factor authentication
- Data in transit between our systems and yours is encrypted via HTTPS / TLS
- Third-party processors (Google, AiSensy, Razorpay, Cloudflare) are contractually bound to maintain industry-standard security
However, no system is perfectly secure. While we work hard to protect your information, we cannot guarantee absolute security. In the unlikely event of a personal data breach, we will notify the Data Protection Board of India and affected users in accordance with the DPDPA.
07Children
Sumeeran is not directed at children under 18. We do not knowingly collect personal information from anyone under 18. If we learn that we have inadvertently collected information from a minor, we will delete it promptly. If you believe we have collected information from a child, please write to us.
08Cookies
Our website (sumeeran.com) does not use any tracking cookies, advertising cookies, or third-party analytics cookies. The only cookies that may be set are essential cookies by our hosting provider (Cloudflare) for security and performance — these do not identify you personally.
09Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in law, our practices, or our services. When we do, we will update the "Last Updated" date at the top of this page. Material changes will be communicated to active subscribers via WhatsApp.
10Grievance Redressal
Grievance Officer
For any concerns regarding the processing of your personal information, or to exercise any of your DPDPA rights, please contact:
Email: hello@sumeeran.com
Subject Line: "Grievance — Privacy"
Address: Mahajan Ventures, Mumbai, Maharashtra, India
We will acknowledge your grievance within 48 hours and aim to resolve it within 30 days.
11Governing Law
This Privacy Policy is governed by the laws of the Republic of India. Any disputes arising out of or related to this policy shall be subject to the exclusive jurisdiction of the courts in Mumbai, Maharashtra.