Privacy Policy

We never sell your data. Ever. We collect the minimum needed to run a safe marketplace, encrypt the sensitive parts, and delete what we no longer need.

• Identity — phone (account), email (recovery), and for companions the verification records described on the Safety page. Aadhaar verification stores only a DigiLocker reference — never the Aadhaar number itself.
• Profile — the display name, city, bio, and interests companions choose to publish. Legal names stay encrypted and private.
• Bookings and payments — session details and Razorpay payment references. We never see or store card numbers.
• Location — we store only the verified public venue you choose for a booking. We do not track or stream your live location.
• Chat — messages are retained 90 days by default; you can lower this to 7 days in settings. Contact details are redacted from messages automatically.
• Emergency contacts — encrypted at rest, used only if we need to reach someone in a genuine emergency, never shown to other users.

All personally identifying columns are encrypted at rest (AES-256-GCM). Application logs are scrubbed of PII by middleware. Session replay analytics mask every input and PII text node by default. Access to personal data by staff is logged in an audit trail.

• Access & portability — request a JSON export of your data from Settings; delivered within 24 hours.
• Correction — edit your profile and account details at any time.
• Erasure — delete your account from Settings. Soft-delete is immediate; hard-delete of all PII completes after a 30-day grace window, keeping only the hashed audit trail the law requires.
• Consent — cookies and analytics run on granular, opt-in consent. We don't track you before you agree.
• Grievance — our named Grievance Officer is reachable on every page footer and via the Grievance page.

Only processors needed to run the product: Razorpay (payments), MSG91 (SMS), Resend (email), DigiLocker/HyperVerge (verification), Cloudflare R2 (media), and Vercel/Neon (hosting). Each receives the minimum required and is bound by contract. We share data with authorities only under valid legal process.