Privacy Policy

Effective Date: March 14, 2026

Last Updated: March 14, 2026

1. Introduction

MotherShepherd Private Limited ("we," "us," "our," "Company") operates the Maanchitra website and mobile application ("Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using Maanchitra, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use our Service.

2. Information We Collect

2.1 Personal Information

We collect the following personal information when you register or use our Service:

Data Type	Purpose	Retention Period
Username	Account identification and personalization	Until account deletion
Email Address	Communication, account recovery, notifications	Until account deletion
Password (encrypted)	Account security	Until account deletion
Payment Information	Subscription processing (stored by payment gateway)	As per payment gateway policy
Profile Information	Service personalization	Until account deletion

2.2 Sensitive Personal Data or Information (SPDI)

As per Rule 3 of the SPDI Rules, 2011, we collect the following sensitive information:

• Passwords: Stored in encrypted format using industry-standard bcrypt hashing
• Financial Information: Payment card details, UPI IDs, bank account information (processed and stored by our payment gateway partner Razorpay, which is PCI-DSS compliant)

Note: We do NOT collect or store biometric information, sexual orientation, medical records, or official identifiers (Aadhaar, PAN, etc.).

2.3 Automatically Collected Information

• Usage Data: Pages visited, time spent, features used
• Device Information: IP address, browser type, operating system, device identifiers
• Cookies and Tracking: Session cookies for authentication and analytics (see Cookie Policy below)
• Location Data: Approximate location based on IP address (not GPS location)

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: Provide access to historical maps, timelines, and premium content
• Account Management: Create and manage user accounts, authentication, password recovery
• Payment Processing: Process subscription payments and manage billing
• Communication: Send service updates, renewal reminders, security alerts, and promotional emails (with opt-out option)
• Personalization: Customize content based on user preferences and usage patterns
• Analytics: Understand user behavior to improve our Service
• Security: Detect and prevent fraud, unauthorized access, and security threats
• Legal Compliance: Comply with applicable laws, regulations, and legal processes

4. Legal Basis for Processing (DPDP Act Compliance)

We process your personal data based on:

• Consent: You have provided explicit consent when creating an account
• Contract Performance: Processing is necessary to provide the Service you subscribed to
• Legal Obligation: Compliance with tax laws, financial regulations, and court orders
• Legitimate Interests: Fraud prevention, security, and service improvement (where not overridden by your rights)

5. Data Sharing and Disclosure

5.1 Third-Party Service Providers

We share your information with the following categories of service providers:

Provider Type	Purpose	Data Shared
Payment Gateway (Razorpay)	Process subscription payments	Email, payment details
Cloud Hosting (AWS/Render)	Host application and database	All account data
Email Service Provider	Send notifications and updates	Email address, username
Analytics Service	Understand usage patterns	Anonymized usage data

5.2 We Do NOT Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

5.3 Legal Disclosures

We may disclose your information if required by law or in response to:

• Valid legal processes (court orders, subpoenas)
• Government or law enforcement requests
• Protection of our rights, property, or safety
• Prevention of fraud or illegal activities

6. Data Security

We implement reasonable security practices as required by Rule 8 of the SPDI Rules, 2011:

6.1 Technical Measures

• Encryption: HTTPS/TLS encryption for data in transit
• Password Hashing: Bcrypt hashing with salt for password storage
• Database Security: Encrypted databases with access controls
• Authentication: JWT tokens with expiration for session management
• Firewall Protection: Server-level firewall to prevent unauthorized access

6.2 Organizational Measures

• Access control: Only authorized personnel can access user data
• Regular security audits and vulnerability assessments
• Employee training on data protection
• Data breach response plan

6.3 Data Breach Notification

In the event of a data breach affecting your personal information, we will notify you within 72 hours via email and through our website, as required by applicable laws.

7. Data Retention

We retain your personal data for the following periods:

• Active Accounts: As long as your account is active
• Deleted Accounts: 30 days after deletion (for recovery purposes), then permanently deleted
• Payment Records: 7 years as required by Indian tax and accounting laws
• Legal Disputes: Until resolution of any disputes or legal proceedings

8. Your Rights Under Indian Law

Under the Digital Personal Data Protection Act, 2023, you have the following rights:

8.1 Right to Access

You can request a copy of all personal data we hold about you. Contact us at privacy@maanchitra.in.

8.2 Right to Correction

You can update your profile information anytime through your account settings or by contacting us.

8.3 Right to Erasure

You can request deletion of your account and all associated data:

• Log in to your account and go to Settings → Delete Account
• Or email us at privacy@maanchitra.in
• We will delete your data within 30 days (except data required for legal/tax purposes)

8.4 Right to Data Portability

You can request a machine-readable export of your data in JSON format.

8.5 Right to Withdraw Consent

You can withdraw consent for processing your data by deleting your account. Note that this will terminate your access to the Service.

8.6 Right to Grievance Redressal

If you have complaints about how we handle your data, contact our Grievance Officer (details in Section 13).

9. Cookies and Tracking Technologies

9.1 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Authentication, session management	Session (deleted on logout)
Functional Cookies	Remember preferences (language, dark mode)	12 months
Analytics Cookies	Understand usage patterns	12 months

9.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling essential cookies may affect Service functionality.

10. Children's Privacy

Our Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you are a parent/guardian and believe your child has provided us with personal information, contact us immediately at privacy@maanchitra.in and we will delete it.

11. International Data Transfers

Your data is primarily stored on servers located in India. If data is transferred outside India (e.g., cloud backup services), we ensure adequate safeguards are in place through:

• Standard Contractual Clauses (SCCs)
• Data Processing Agreements with service providers
• Compliance with cross-border data transfer requirements

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. We will notify you of significant changes via email or prominent notice on our Service. Your continued use after changes constitutes acceptance of the updated policy.

13. Grievance Officer

As required by the Information Technology Act, 2000 and SPDI Rules, 2011, we have appointed a Grievance Officer to address your privacy concerns:

14. Governing Law and Jurisdiction

This Privacy Policy is governed by the laws of India. Any disputes arising from this policy will be subject to the exclusive jurisdiction of courts in Bangalore, Karnataka, India.

15. Contact Information