Privacy Policy

1. Personal Information We Collect

We only collect personal information that is strictly necessary to authenticate devotees, process sacred orders, and deliver consecrated articles safely:

• Account & Profile Information: When you create an account or authenticate, we record your name, email address, and optional contact phone number. If you choose to log in using Google OAuth, we receive your basic verified profile name and email address through Supabase Auth.
• Email & Ephemeral OTP Credentials: For passwordless login, you provide your email address to receive a 6-digit One-Time Password (OTP). These authentication codes are strictly time-bound (valid for 10 minutes) and are verified securely through our server infrastructure.
• Shipping & Delivery Details: When placing an order, we collect the recipient's full name, phone number, alternate phone number (if provided), physical street address, landmark, city, state, and postal PIN code to coordinate courier delivery.
• Vedic Consecration Details (Optional): For articles requiring personalized Pran Pratishtha or temple Sankalp (such as Nepali Rudrakshas, Ratnas, or Puja Kits), you may voluntarily share devotee names and Gotra details. This spiritual information is used solely by our Vedic priests for ritual consecration.
• Order & Transaction Records: We maintain records of items purchased, order totals, order timestamps, unique order numbers, and chosen payment modes (such as Cash On Delivery or Prepaid). We do not collect, store, or process raw credit/debit card numbers or net banking passwords on our servers.

2. Purpose of Data Collection

Your data is processed strictly for legitimate operational and spiritual fulfillment purposes:

• Fulfillment & Delivery: Packing, Ganga purification packaging, dispatching, and tracking shipments from Varanasi to your designated address.
• Sacred Rituals & Consecration: Enabling Kashi priests to conduct authentic Pran Pratishtha rituals under your specific Sankalp.
• Account Access & Authentication: Verifying identity via OTP or Google OAuth and maintaining your order history.
• Order Communications: Dispatching transactional OTP verification emails, order status confirmations, and transit notifications.
• Customer Support: Assisting you via our dedicated WhatsApp helpline regarding order inquiries, shipment tracking, or transit replacements.

3. Technical Infrastructure & Third-Party Service Providers

We operate a streamlined technical architecture with verified, specialized service providers:

4. Essential Cookies & Local Storage Practices

Divya Rituals utilizes standard browser storage technologies solely to deliver essential e-commerce functionality:

• divya-rituals-user: Local storage key preserving your active devotee profile and contact preferences on your device.
• divya-rituals-orders: Local storage key caching your recent order history for rapid offline and account review.
• divya-rituals-cart: Local storage key retaining items added to your sacred shopping cart across page refreshes.
• divya_devotee_wishlist_v1: Local storage key holding articles saved to your personal spiritual wishlist.
• divya-rituals-pincode: Local storage key preserving your verified delivery postal pincode for instant shipping estimation.
• divya_preferred_currency: Local storage key retaining your preferred global currency display preference.
• Essential Session Cookies: Encrypted authentication cookies issued by Supabase Auth and Divya Rituals to recognize your session state across protected storefront pages.

You may clear your browser cookies and local storage at any time through your web browser settings or by clicking "Sign Out" in your Devotee Profile.

5. Data Security & Retention

• Encryption in Transit: All communications between your browser and Divya Rituals are protected using Transport Layer Security (HTTPS/TLS).
• Ephemeral Verification Tokens: OTP codes expire automatically within 10 minutes, preventing persistent exposure of login credentials.
• Retention Horizon: Order data and invoice records are retained for the period necessary to fulfill deliveries, support transit damage replacements, and satisfy statutory accounting requirements under Indian commercial laws.

6. Devotee Rights & Privacy Requests

You retain direct control over your personal data:

• Access & Modification: You can view and update your name, contact phone number, and saved shipping addresses anytime in your Devotee Account.
• Local Data Clearance: Logging out removes cached user and session tokens from your device storage immediately.
• Account & Data Deletion Requests: You may request the deletion or rectification of your account and order history by reaching out to our support team with your registered email address.

7. Contact Channels & Legal Jurisdiction

For privacy inquiries, order support, or verification questions, please connect through our verified channels:

Any disputes regarding this policy shall be subject to the exclusive jurisdiction of the competent courts in Mumbai, Maharashtra, India.