Privacy Policy

1. What we collect

• Account: your name, email address, a hashed password (never the password itself), your preferred language, and, if you turn it on, the secret for two-step verification (stored encrypted).
• Providers: business name, category, phone number, home ZIP code (used to work out your service area and local calendar), photographs you upload, package details and prices, availability, and the payment details and QR code you add so customers can pay you.
• Customers: the details you enter for a booking: the event, date, service address, family members' names where a ceremony needs them, the list of items to prepare, messages to the provider, and any review you write.
• Rashifal subscribers: your email address and the rashi you chose.
• Technical: the pages you request and your IP address in short-lived server logs, and the result of Cloudflare's bot check on forms. We do not use advertising or third-party analytics scripts, and we do not track you across other sites.

2. How we use it

• To run bookings: showing your request to the provider you chose, sending quotes, confirmations, reminders and receipts, and keeping a record of each booking's history.
• To keep accounts secure: sign-in links, password resets, two-step verification and rate limiting.
• To send the daily rashifal and occasional updates to people who have that switched on.
• To review providers before their listings go live and to handle complaints.
• To improve the site using aggregate counts (for example how many people opened a shared rashifal link). These counts do not identify you.

We do not sell personal information. When you create an account, the daily rashifal and occasional Booking Sarathi updates are on by default; you can untick the box at signup or unsubscribe with one click in any of those emails. Every other email we send is about your account or a booking.

3. Who sees it

• The provider you book sees the booking details you entered and your messages. Until the booking is paid, phone numbers, email addresses and messaging handles inside messages are hidden from both sides; after payment the provider's phone number is shown to you.
• Customers see a provider's public listing, photographs and, after payment, their phone number. Customers see a provider's payment details only at the payment step, and never the provider's share of a price.
• Service providers that process data for us: Cloudflare (hosting, database, file storage and the bot check on forms), Resend (sending the emails described above) and Zoho Mail (the mailboxes behind contact@ and support@bookingsarathi.com). Each receives only what its task needs.
• Authorities, where the law requires it, and professional advisers under confidentiality.

4. Cookies

We use a small number of first-party cookies: your session, your language choice, and, if you tick "trust this device" at the two-step verification step, a cookie that lets that device skip the code for 30 days. Cloudflare's bot check may set its own cookie on form pages. There are no advertising cookies.

5. How long we keep it

• Booking records, receipts and messages are kept while your account exists and for the period the law requires afterwards for financial records.
• Server logs are kept for a few days.
• Rashifal subscriptions are removed when you unsubscribe; one click in any rashifal email does it.
• Backups of the database are kept for up to a year and are only used to restore the service.

6. Security

Connections are encrypted in transit. Passwords are hashed. Two-step verification is mandatory for platform administrators and available to everyone. Access to the production database is limited to the people who run the service, and automated deployments carry no personal data.

7. Your choices and rights

• You can see and change your account details from your account page, and change or set your password there.
• You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete your account. Write to contact@bookingsarathi.com from the email on your account; we answer within 30 days. Some records must be kept after deletion where the law requires it (for example receipts).
• You can unsubscribe from the rashifal at any time. Booking emails cannot be turned off while a booking is open, because the provider and you both need them.

8. Children

Accounts are for adults (18 and over). A parent or guardian books on behalf of children taking part in a ceremony, and only the names needed for the ritual are recorded.

9. Where the data lives and changes to this policy

The service is operated from and hosted in the United States. If you use it from elsewhere, your information is processed in the United States.

When this policy changes we will post the new version here with a new date and, for material changes, email account holders.

10. Contact

Privacy questions or requests: contact@bookingsarathi.com.