Privacy Policy

Mangalyam processes account data, wedding planning records, guest and vendor metadata, uploaded media, and payment workflow references needed to run the platform.

Where payout and compliance flows apply, KYC and banking metadata may be processed with elevated security controls.

Data is used to deliver requested features, operate role-based workflows, secure platform activity, and maintain auditability for financial and governance actions.

We also use limited analytics to improve activation, reliability, and workflow clarity across personas.

Data is segmented by tenant and role. Couples, vendors, agencies, and admins only see data necessary for their permitted tasks.

Payment and KYC data may be shared with regulated payment providers and controlled support workflows only when required for transaction or compliance processing.

Service providers we use to run the platform: Supabase (database and authentication), Vercel (hosting), Cloudflare R2 (photo and file storage), Razorpay (payments and payouts), Resend and WATI (email and WhatsApp notifications), Sentry (error monitoring), and PostHog (product usage analytics). PostHog receives page and feature-usage events; session recording is switched off and form input values are masked, so it never receives your guest lists, budgets, payment details, or KYC documents.

Mangalyam uses cloud storage, role controls, and audit logging for sensitive transitions. Access to high-risk operations is limited to authorized roles.

Retention periods differ by data class. Financial and audit records may be retained longer to satisfy regulatory, fraud-prevention, and reconciliation requirements.

You can request profile corrections, consent updates where applicable, and data handling clarifications through support.

Certain deletion or export requests may be staged where legal, audit, or financial integrity obligations require temporary retention.

If you have an account, you can exercise your data-subject rights directly from Settings → Privacy & data: grant or withdraw consent for non-essential purposes, download a copy of your personal data (right to access and portability), and delete your account (right to erasure).

Erasure anonymizes your personal data. Records we are legally required to keep — payment, invoice, and compliance/KYC records — are retained in anonymized or immutable form as the law requires, and are not hard-deleted.

To raise a grievance or reach our Grievance Redressal Officer, see the Grievance Redressal page or write to grievance@mangalyam.io.