Privacy Policy
What we collect, why, for how long, and how you stay in control.
Draft — pending professional legal review
Last updated: 29 October 2026
1. Who we are
36GunMilan.com is operated by Parmod Rawat (Proprietor), 36GunMilan.com, Super MIG, Express View Apartment, Type 3, Sector 93, Noida, Uttar Pradesh 201301, India. For the purposes of India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), we are the Data Fiduciary for the personal data described in this policy: we decide why and how it is processed.
This policy explains what personal data we collect, why we collect it, how long we keep it, who helps us process it, and the rights you have. We have tried to write it in plain language.
2. Our core commitments
- Guest matching stores no birth data. If you use the free Guna Milan without signing in, your inputs are used to calculate the result and are not saved to a profile. A temporary result link is kept for at most 24 hours and then deleted automatically.
- Saving needs sign-in and your explicit consent. We store birth details only when you are signed in and have clearly agreed to save them.
- We do not sell your data, and we do not use advertising or cross-site tracking cookies.
- Sharing is your choice. Share links are created only when you ask for one; they expire, you can revoke them at any time, and birth details are hidden on shared reports by default.
3. What we collect and why
| Data | When | Purpose |
|---|---|---|
| Names (optional), date, time and place of birth, time accuracy | When you run a match | To calculate the traditional match result you asked for |
| Saved birth profiles, matches, notes and reports | Only after sign-in and consent | To let you revisit, compare, download and share your matches |
| Email address and sign-in data | When you create an account | To create and secure your account, and send service messages |
| Plan, order and payment status, receipts | When you buy a plan or report | To provide what you paid for and meet tax and accounting duties |
| Questions you ask the AI explainer | Only when you use it | To answer your question about a report |
| Messages you send us | When you contact support | To respond and resolve your request |
| Technical logs (e.g. IP address, browser type, error details) | When you use the site | To keep the service secure, prevent abuse and fix problems |
We do not ask for, and you should not enter, sensitive information such as health details, government ID numbers or financial account details in any free-text field.
4. Consent and how to withdraw it
Where we rely on your consent (for example, to save birth profiles), we ask for it with a clear notice before collecting the data. You can withdraw consent at any time from your account settings or by writing to us. Withdrawal does not affect processing already done, but we will stop processing for that purpose and delete the related data unless the law requires us to keep it. Some processing — such as keeping payment records for tax law, or security logs — is done because the law requires it or for legitimate uses permitted under the DPDP Act.
5. How long we keep data
| Data | Retention |
|---|---|
| Guest (not signed-in) results | Up to 24 hours, then deleted automatically |
| AI explainer conversations | 90 days |
| Payment orders, payment events and receipts | 8 years, for tax and accounting (period to be confirmed with our chartered accountant) |
| Security and audit logs | 2 years |
| Saved birth profiles, matches, results, reports and conversations after a verified account-deletion request | Permanently deleted within 30 days |
When you delete your account, payment records that we must keep by law are retained but de-linked from your birth profiles and match data.
6. Who processes data for us
We use a small number of service providers (Data Processors) who process data only on our instructions:
| Provider | Role | Notes |
|---|---|---|
| Supabase | Database and sign-in | Hosted in the Mumbai (India) region |
| Vercel | Website hosting | Served from the Mumbai (India) region |
| Razorpay | Payments | We never see or store your full card number, UPI PIN or bank credentials |
| AI provider | AI explainer answers | Used only when you use the AI explainer. Only structured report results (such as koota scores and dosha flags) are sent — never names, date, time or place of birth |
Some providers may process limited data outside India under their own safeguards, as permitted by law. We may also disclose data if required by law or a lawful order.
7. Your rights
Under the DPDP Act you have the right to:
- Access a summary of the personal data we hold about you and how it is processed;
- Correction and completion of inaccurate or incomplete data;
- Erasure of data that is no longer needed or for which you withdraw consent (subject to legal retention);
- Grievance redressal — to have your complaint heard and resolved by us;
- Nominate a person to exercise your rights in case of death or incapacity.
Signed-in users can export their data and request deletion from the privacy page in their account. You can also email keshavi0526@gmail.com. We may need to verify your identity before acting on a request.
8. Grievance officer
If you have a concern about how your data is handled, please contact our grievance officer:
- Name: Parmod Rawat
- Email: keshavi0526@gmail.com
- Address: Super MIG, Express View Apartment, Type 3, Sector 93, Noida, Uttar Pradesh 201301, India
We aim to acknowledge grievances promptly and resolve them within the time limits set by law. If you are not satisfied with our response, you may approach the Data Protection Board of India.
9. Children
36GunMilan.com is intended for adults aged 18 and above. We do not knowingly process the personal data of children. Families often enter a son's or daughter's birth details to check a match; please do so only for adults and with their knowledge.
10. Security
We use encrypted connections (HTTPS), access controls so that each user can see only their own data, server-side checks on paid features, short-lived signed links for downloads, rate limiting and logging of administrative actions. No system is perfectly secure, but we work to protect your data and will notify you and the authorities of a personal data breach as required by law.
11. Changes to this policy
If we change this policy, we will update the date at the top of this page and, for significant changes, notify signed-in users by email or in the app before the change takes effect.