Privacy Policy

Effective date: 1 January 2026  ·  Last updated: 15 June 2026

1. Who we are

Sarafamandi ("we", "our", "us") is a mobile application operated in India that provides a social media platform exclusively for verified jewellery businesses ("Sellers") and their customers ("Buyers"). Our registered business contact is support@sarafamandi.com.

2. Information we collect

2.1 Information you provide

• Account details: mobile number (verified via SMS OTP), name, hashed password, and optionally email.
• Seller business details: business name, owner name, WhatsApp number, address, city, state, pincode, business category, GST/PAN number (optional), profile photo, cover photo and logo.
• User-generated content: photos, videos (up to 5 minutes), 24-hour stories, captions, hashtags, comments and in-app messages sent between users.
• Payment references: Razorpay order/payment identifiers and GST invoice numbers for the ₹6,000 + 18% GST (₹7,080 total) yearly seller membership. We do not receive or store your card, UPI or netbanking credentials.

2.2 Information collected automatically

• App activity: likes, comments, follows, saves, search history and post views used to personalise your feed.
• Approximate location: city and state you enter during seller registration. We do not collect precise GPS coordinates unless you optionally add a shop map pin.
• Device information: a random device identifier for security and abuse prevention (does not include IMEI or serial numbers).

3. How we use your information

• Create and secure your account, verify your mobile via OTP, and prevent fraud.
• Display your profile, posts and stories to other users of the platform.
• Process seller membership payments (via Razorpay) and issue GST invoices.
• Enable buyer-to-seller contact via WhatsApp deep link and in-app chat.
• Personalise your home feed and recommend relevant sellers.
• Send transactional communications (OTP, payment receipts, moderation actions).
• Respond to your support queries and enforce our Terms of Service.

4. Sharing of information

We do not sell your personal data. We share information only with:

5. Data retention

We retain account data for as long as your account is active. On deletion request:

• Personal profile, posts, stories, media and chat messages are permanently deleted within 30 days.
• Payment/invoice records are retained for 8 years as required under the Indian Income Tax Act and GST regulations.
• Anonymised analytics data may be retained indefinitely.

6. Your rights

You may at any time:

• Access the personal data we hold about you.
• Correct inaccurate information via the in-app Edit Profile screen.
• Delete your account and personal data — see Account Deletion instructions.
• Export a copy of your data by writing to support@sarafamandi.com.
• Withdraw consent by uninstalling the app and requesting deletion.

7. Security

• All traffic between the app and our servers uses TLS 1.2+ encryption.
• Passwords are hashed with bcrypt — we never store plain-text passwords.
• Payment card data is handled solely by Razorpay's PCI-DSS certified gateway.
• Admin actions (approvals, suspensions, deletions) are logged and reviewed.
• Media uploads are stored on Cloudinary's HTTPS-only infrastructure.

8. Children

Sarafamandi is intended for users aged 18 and above. We do not knowingly collect personal data from children. If you believe a minor has registered, please email support@sarafamandi.com and we will remove the account.

9. International transfers

Our servers are hosted in India. Some sub-processors (Cloudinary) may store media on globally distributed CDN nodes — all under equivalent security safeguards.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced inside the app and, where possible, by SMS to your registered mobile number.

11. Contact us

Questions, complaints or data requests?

• Email: support@sarafamandi.com
• Grievance officer: Sarafamandi Support Team
• Response time: within 7 business days