Effective date: 4 October 2026

This Privacy Policy explains how Codifta Labs Inc ("Codifta Labs", "we", "us"), a corporation incorporated in the State of Wyoming, United States of America, collects, uses, shares and protects personal data when you use ShaadiGram at myshaadigram.com and in our mobile apps (the "Service"). Codifta Labs is responsible for your personal data (the "data fiduciary" under India's Digital Personal Data Protection Act, 2023, and the "controller" under the EU and UK GDPR).

ShaadiGram is a matrimonial service for adults. Because finding a partner involves sharing personal details with other members, please read this policy carefully, particularly section 4 on what other members can see.

1. Information we collect

Information you give us

• Account details: name, username, email address, phone number, password (stored only in encrypted, hashed form), gender, date of birth, and who created the profile (yourself or a family member).
• Profile details: photographs; location (country, city); height, weight, body type and physical status; marital status and children; education, profession, employer, income and assets; family details; languages and mother tongue; diet, smoking and drinking habits; partner preferences; and your own description.
• Sensitive details, only if you choose to add them: religion, caste, sub-caste, gothra, community or ethnicity, and horoscope details (time and place of birth, star sign, manglik status). These help members find compatible matches. You can leave them blank or remove them at any time.
• Verification: where you choose to verify your profile, a verification photo (selfie) and confirmation of your email address or phone number.
• Communications: messages, interests, likes, photo requests, video or voice calls you make through the Service, reports you submit, and anything you send to our support team.
• Payments: the plan you buy, amount, currency, dates and transaction references. Card details are entered directly with Stripe (or Apple/Google in the apps); we never receive or store your full card number.

Information collected automatically

• Device and log data: IP address, browser and device type, operating system, pages visited, and dates and times of access, used for security, fraud prevention and to keep the Service working.
• Location: if you allow it in your browser or app, your approximate location (latitude/longitude) to show nearby matches. You can turn this off in your device settings.
• Activity: profiles you view, like, block or report, and your settings, used to run features such as "who viewed me", match suggestions and the free-message limit.
• Cookies: see section 9.

2. How we use your information

• To create and run your account and show your profile to other members (performance of our contract with you).
• To suggest matches and power search, messaging, calls, notifications and Premium features (contract).
• To verify profiles, detect fake accounts, fraud, spam and abuse, and keep members safe (our legitimate interest in a safe service, and legal obligations).
• To process payments, renewals, refunds and keep financial records (contract and legal obligations).
• To send service messages such as security codes, payment receipts and important changes (contract), and, if you opt in, notifications and offers, which you can switch off in Settings (consent).
• To answer your questions and complaints (contract and legitimate interest).
• To comply with law and respond to valid requests from authorities (legal obligation).

Where we rely on your consent (including for the sensitive details you choose to add), you may withdraw it at any time by removing that information or contacting us; this does not affect processing already carried out. We do not sell your personal data, and we do not use it for third-party advertising.

3. Automated matching

We use your profile and preferences to rank and suggest matches automatically. This affects only which profiles you are shown; it does not produce legal or similarly significant decisions about you.

4. What other members can see

• Your profile (photos and the profile details you add) is visible to other registered members. You control parts of this in Settings → Privacy, including whether your profile appears in search engines, in suggestions and in match lists, and whether your photos are shown openly or only after you accept a photo request.
• Your phone number and email address are not shown on your profile. They are shown only to Premium members whose interest you have accepted (or who accepted yours).
• Messages are seen only by you and the members you exchange them with.
• Information you share with another member is outside our control once they have it. Please share personal contact details only when you are comfortable doing so.

5. Who we share information with

We share personal data only with the service providers we need to run the Service, under contracts that limit their use of it to our instructions:

• Hosting: our servers are hosted by Hostinger in the European Union (Germany).
• Network and security: Cloudflare (content delivery, protection against attacks).
• Payments: Stripe (website), Apple App Store and Google Play (in-app purchases).
• Email: our email delivery provider (Zoho ZeptoMail), for account and notification emails.
• Push notifications: OneSignal.
• Calls and SMS: Twilio, where video calls or SMS verification are used.
• Chat GIFs: Giphy, which receives your GIF search terms when you use GIF search.
• Fonts: Google Fonts, which receives your IP address when our pages load fonts.

We may also disclose information: to comply with law, court orders or lawful requests from authorities; to protect the safety, rights or property of members, the public or Codifta Labs; and to a buyer or successor if our business is sold or reorganised, in which case this policy will continue to protect your data.

6. International transfers

Codifta Labs is based in the United States, our servers are in the European Union, and some providers process data in other countries, including the United States and India. When data leaves your country we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, and we do not transfer personal data of Indian users to any country restricted by the Government of India.

7. How long we keep information

• Your profile and account data are kept while your account is active.
• When you delete your account, your profile is removed from the Service immediately, and your personal data is deleted within 30 days, except where we must keep it longer.
• Payment and tax records are kept for as long as tax and accounting law requires (usually up to 8 years).
• Information about accounts removed for fraud or abuse may be kept for up to 3 years to prevent the same person returning.
• Server logs are kept for up to 180 days for security purposes.
• Deleted data may remain in encrypted backups for up to 90 days before being overwritten.

8. Your rights

Depending on where you live, you have the right to:

• access your personal data and get a summary of how it is processed;
• correct or update it, much of which you can do yourself in Settings;
• delete it: delete your account at any time in Settings → Delete account;
• withdraw consent and switch off optional notifications;
• receive a copy of your data in a portable format;
• object to or restrict certain processing (EU/UK);
• nominate another person to exercise your rights if you die or become incapacitated (India);
• complain to us (section 12) and, if unresolved, to a regulator: in India the Data Protection Board of India; in the EU/UK your local data protection authority.

To make a request, email [email protected] from the email address on your account. We may need to confirm your identity. We respond within 30 days, and within the shorter time the law requires where it applies. If you live in a US state with a consumer privacy law, you have equivalent rights; we do not sell or "share" personal data for targeted advertising.

9. Cookies and similar technologies

We use only the cookies needed to run the Service:

• Sign-in and session cookies (for example JWT and the session cookie) to keep you logged in and secure;
• Preference cookies (for example mode for day/night mode, and language);
• Security cookies set by Cloudflare to protect the site from attacks, and by Stripe on the payment form to prevent fraud.

We do not use advertising or cross-site tracking cookies. Push notifications are used only if you allow them in your browser or device. You can block or delete cookies in your browser, but you will not be able to stay signed in.

10. Security

We protect your data with encrypted connections (HTTPS), hashed passwords, optional two-factor authentication, access controls and monitoring. No system is completely secure, so please use a strong, unique password. If a personal data breach affects you, we will notify you and the relevant authorities as the law requires.

11. Children

The Service is only for adults of legal marriageable age and is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a minor has created a profile, report it to [email protected] and we will remove it.

12. Grievance Officer and contact

For questions, requests or complaints about your personal data, contact our Grievance Officer, who also acts as our data protection contact:

Grievance Officer, Codifta Labs Inc
Email: [email protected]

We acknowledge complaints within 24 hours and resolve them within 15 days.

13. Changes to this policy

We may update this policy. If we make material changes we will notify you by email or on the Service before they take effect, and the effective date above will change.