Privacy Policy
JainSansar (“we”, “us”, “the Platform”), operated by Kratux LLP, a Limited Liability Partnership registered in India, having its registered office at 401, Kratux LLP, 8-3-833/47&58, Hyderabad-73, Telangana, India, is a community platform for the Jain community (family/Parivar records, Sanghs, events, media, messaging and related features). We are the Data Fiduciary for the personal data you provide. This policy explains what personal data we collect, why, how we protect it, and the rights you have over it.
1. Scope
This policy applies to your use of the Platform through our website and apps. It does not cover third-party services you may reach through links we do not control. By creating an account you confirm you are 18 years or older (see “Children” below).
2. Personal data we collect
Data you give us
- Account data: mobile number, email address, date of birth, password (stored only as a secure hash), and a username.
- Profile & family (Parivar) data: names, relationships, gotra, photos, education, work, interests, community affiliations, and other details you or your family choose to add.
- Community data: Sangh memberships, events, posts, messages, media you upload, and similar activity.
- Verification data: one-time passwords and the contact points you verify.
Data collected automatically
- Device & usage: IP address, browser/user-agent, device fingerprint, pages viewed, and security/audit logs (including login attempts).
- Cookies: essential cookies for sign-in and security, and — with your consent — non-essential cookies. See our Cookie Policy.
3. Why we use your data, and our legal basis
We process personal data for these purposes, each limited to what that purpose needs:
- To provide the Platform — create and secure your account, show your Parivar/Sangh features, deliver messages and notifications. Basis: performance of the service you request / your consent at sign-up.
- To keep the Platform safe — prevent fraud, abuse, and unauthorised access (rate-limiting, IP checks, CAPTCHA, audit logs). Basis: legitimate use for security as permitted by law.
- To communicate with you — verification codes, service notices, grievance responses. Basis: performance of service.
- Personalised advertising — only if you separately consent; you can withdraw at any time. Basis: your consent.
- Legal compliance — to meet obligations and respond to lawful requests. Basis: compliance with law.
We do not use your data for a new, incompatible purpose without telling you and, where required, obtaining fresh consent.
4. Consent and how to withdraw it
Where we rely on consent, it is specific, informed and freely given, and you may withdraw it as easily as you gave it. Manage or withdraw consents at Settings → Consents. Withdrawing consent does not affect processing already done, and some features may stop working if the data they need is withdrawn.
5. How your data is shared
- With other users, per your visibility settings. Parivar/profile data is shown to others only according to the per-item audiences, whitelists and blacklists you control in your privacy settings.
- With Sanghs you join, to the extent needed for membership and governance.
- With service providers (e.g. SMS/email delivery) strictly to run the Platform, under confidentiality obligations. Our current key processors are MSG91 (SMS and one-time-password delivery) and our email/SMTP hosting provider (transactional email such as verification and notification messages). We do not use a third-party payment gateway — where payments apply, they are handled manually.
- For legal reasons — when required by law, court, or a government agency acting under law.
We do not sell your personal data.
6. Data retention
We keep personal data only as long as needed for the purposes above or as the law requires. Security records (e.g. login attempts) are kept for a limited window and then deleted. When you delete your account, we deactivate it and purge your personal identifiers after a short retention window kept for dispute-resolution and legal reasons. In general: account and profile data are retained while your account is active; security and audit records (e.g. login attempts and IP logs) are retained for up to 180 days and then deleted; and after you delete your account we deactivate it immediately and purge or irreversibly anonymise your personal identifiers within 90 days — except where a longer period is required to comply with law, resolve disputes, or enforce our agreements.
7. Your rights
As a Data Principal under the DPDP Act, you have the right to:
- Access a summary of your personal data — download it at Settings → Your Data.
- Correction and updating — edit your profile and account details in Settings.
- Erasure — request deletion of your account and personal data (subject to legal retention).
- Grievance redressal — raise a complaint and receive a timely response (see below).
- Nominate another person to exercise your rights in the event of death or incapacity. To register a nominee, write to our Grievance Officer (details below); we record the nomination and, on receipt of satisfactory proof of death or incapacity, allow the nominee to exercise your rights in accordance with the DPDP Act.
8. Children
The Platform is intended for adults. We do not knowingly create accounts for anyone under 18, and registration is age-gated accordingly. If you believe a minor has registered, contact our Grievance Officer and we will act promptly.
9. How we protect your data
We apply reasonable security safeguards, including encrypted transport (HTTPS/TLS), password hashing, CSRF and cross-site-scripting protections, parameterised database queries, rate-limiting, IP access controls, CAPTCHA, optional two-factor authentication, and audit logging. No system is perfectly secure, but we maintain a breach-response process and will notify the Data Protection Board and affected users of a personal-data breach as required by law.
10. Grievance Officer & Data Protection contact
For any privacy question, request, or complaint, contact our Grievance Officer:
- Name: Piyush Gandhi
- Email: grievance@jainsansar.com
- Phone: +91 86789 11177
- Address: 401, Kratux LLP, 8-3-833/47&58, Hyderabad-73, Telangana, India
You may raise a complaint by contacting the Grievance Officer at the email, phone, or address above. We acknowledge complaints within 24 hours and aim to resolve them within 15 days.
11. Changes to this policy
We may update this policy. We will post the revised version here with a new “Last updated” date and, for material changes, give notice through the Platform.