Privacy Policy

1. Information We Collect

1.1 Information You Provide

When you register or subscribe to our services, we collect:

• Personal Information: Name, email address, phone number (optional)
• Preferences: Festival preferences, language choice (Marathi/English), notification preferences
• Account Information: Username, password (encrypted), subscription status
• Payment Information: Processed securely through Razorpay/Paytm (we do not store credit card details)

1.2 Automatically Collected Information

When you use our website, we may automatically collect:

• Device Information: IP address, browser type, device type, operating system
• Usage Data: Pages visited, time spent, links clicked, festival pages viewed
• Cookies: Small data files to improve your experience (see Cookie Policy below)

2. How We Use Your Information

We use your information to:

• Provide Services: Send festival reminders via email, SMS, and WhatsApp based on your preferences
• Account Management: Create and manage your account, process subscriptions, handle payments
• Communication: Send service updates, respond to inquiries, provide customer support
• Personalization: Customize festival calendar based on your preferences and location
• Improvement: Analyze usage patterns to improve our services and user experience
• Transactions: Process tour bookings, event ticket purchases, and e-commerce orders
• Legal Compliance: Comply with applicable laws and regulations

3. How We Share Your Information

We DO NOT sell, rent, or trade your personal information to third parties.

We may share your information only in these limited circumstances:

• Service Providers: Third-party services that help us operate (email providers like MailerSend, SMS providers like MSG91, payment processors like Razorpay) - they are contractually obligated to protect your data
• Tour Operators & Partners: Only when you make a booking - we share necessary details (name, contact) to fulfill your reservation
• Legal Requirements: When required by law, court order, or government regulation
• Business Transfers: In the event of a merger, acquisition, or sale of assets

4. Your Rights and Choices

4.1 Email Communications

• Unsubscribe: Click the unsubscribe link in any email or manage preferences in your account
• Frequency Control: Choose which festivals you want reminders for
• Channel Selection: Choose email, SMS, or WhatsApp notifications

4.2 Data Access and Control

You have the right to:

• Access: Request a copy of your personal data we hold
• Update: Correct or update your information through your account settings
• Delete: Request deletion of your account and associated data
• Export: Receive your data in a portable format
• Object: Opt-out of certain data processing activities

To exercise these rights, contact us at privacy@myganapati.com

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All data transmitted is encrypted using SSL/TLS protocols
• Secure Storage: Data stored on secure servers with encryption at rest
• Access Controls: Limited employee access on a need-to-know basis
• Regular Audits: Periodic security assessments and updates
• Password Protection: Passwords are hashed and never stored in plain text

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as:

• Your account is active
• Needed to provide you services
• Required for legal, tax, or accounting purposes

When you delete your account, we remove your personal data within 30 days, except where retention is required by law.

7. Cookies and Tracking Technologies

We use cookies to enhance your experience:

• Essential Cookies: Required for website functionality (login, preferences)
• Analytics Cookies: Help us understand how users interact with our site (Google Analytics)
• Preference Cookies: Remember your settings and language choice

You can control cookies through your browser settings. Note that disabling cookies may affect site functionality.

8. Third-Party Services

Our website may contain links to third-party websites or services:

• Payment processors (Razorpay, Paytm)
• Social media platforms
• Temple websites and tour operator sites

We are not responsible for the privacy practices of these third parties. Please review their privacy policies separately.

9. Children's Privacy

Our services are not directed to children under 13 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Users

MyGanapati.com operates primarily in India and our servers are located in India (AWS Mumbai region). If you access our services from outside India, your information may be transferred to and processed in India. By using our services, you consent to this transfer.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will:

• Post the updated policy on this page with a new "Last Updated" date
• Notify you via email of significant changes
• Provide 30 days notice before implementing material changes

Your continued use of our services after changes constitutes acceptance of the updated policy.

12. Legal Basis for Processing (GDPR Compliance)

For users in the European Union, we process your data based on:

• Consent: You have given explicit consent (e.g., subscribing to newsletters)
• Contract: Processing is necessary to fulfill our services
• Legitimate Interest: We have legitimate business interests (e.g., fraud prevention)
• Legal Obligation: Required to comply with laws

13. California Privacy Rights (CCPA)

California residents have additional rights:

• Right to know what personal information we collect
• Right to delete personal information
• Right to opt-out of sale of personal information (we don't sell data)
• Right to non-discrimination for exercising privacy rights