How personal data is collected, used, shared, protected, retained and controlled

Production version V 001 | Effective 28 September 2026

Platform	ShaadiProblems Customer Portal and connected Assessment application
Operator	Good People Solutions Private Limited
Registered office	402-A, 4th Floor, Dharam Karan Road, Ameerpet, Hyderabad-500016, Telangana
Support contact	support@nirji.com

1 Who this notice applies to

This Privacy Notice applies to people who visit, register with or use the ShaadiProblems Customer Portal, connected Assessment application and services, including purchasers, invited partners, counselling participants, parents or guardians who join an authorised session, professionals and people who contact support.

The data fiduciary is Good People Solutions Private Limited, with registered office at 402-A, 4th Floor, Dharam Karan Road, Ameerpet, Hyderabad-500016, Telangana (we, us or ShaadiProblems).

2 Our privacy approach

• We collect and use personal data for identified service, safety, security, legal and operational purposes.

• Assessment answers, scores, safety responses and reports receive restricted access and are not used for advertising.

• A partner does not gain access to your individual answers, safety information or individual report merely because accounts are linked.

• We do not sell personal data.

• Payment-card, bank and UPI credentials are entered with the payment provider and are not stored by ShaadiProblems.

• You may exercise the rights described in this Notice, subject to lawful exceptions and records we must preserve.

3 Personal data we collect

Category	Examples
Account and profile	Verified email, name, phone where supplied, country of residence, Indian state or union territory, preferred currency, time zone, age confirmation and account identifiers.
Consents and preferences	Terms and Privacy acceptance, marketing choice, partner-linking and report-sharing consent, withdrawal and consent version history.
Assessment data	Answers, completion status, calculated scores, interpretations, individual and couple reports, version references and integrity checks.
Safety and support data	Private safety-screen answers, safeguarding routing, safe-contact preferences, support messages, complaints and incident records.
Partner and relationship data	Invitation email, relationship between purchaser and invited partner, linking status and report-sharing choices.
Commerce and tax data	Billing name and address, state code, optional GSTIN, quotes, orders, prices, GST calculations, provider references, payment and refund status. We do not store full payment credentials.
Appointments and service delivery	Service rights, bookings, city, delivery mode, time zone, assigned professional, attendance, rescheduling, venue status, customer summaries and restricted professional notes.
Communications	Emails and support, privacy, complaint and safety requests, together with responses and delivery status.
Technical and security data	Network address, device and browser information, session and authentication events, rate-limit counters, request metadata, audit trails and security logs.
Optional marketing data	Marketing consent and engagement with messages. Marketing is off unless you choose it.

4 How we collect data

• Directly from you when you register, answer questions, purchase, book, communicate or exercise a privacy choice.

• From a purchaser when they enter an invited partner’s email. The invitation does not disclose assessment content.

• From authorised professionals and staff when they deliver, schedule, document or support a service.

• From Cashfree and other service providers for payment status, fraud prevention, email delivery, hosting and security.

• Automatically through essential cookies, browser storage, server logs and security controls needed to operate the platform.

5 Why we use personal data

• Create and secure accounts, verify email addresses and prevent duplicate or unauthorised access.

• Provide quotes, accept orders, calculate tax, verify payments, issue service rights, process refunds and maintain financial records.

• Deliver the Personality and Marriage Readiness modules, calculate results and produce permitted reports.

• Link partners and create a couple report only where the required consents are current.

• Schedule and deliver guided sessions, counselling and prenup coordination.

• Respond to support, privacy, complaint and safety requests.

• Operate safeguarding workflows, protect people from serious harm and comply with lawful obligations.

• Maintain security, detect misuse, investigate incidents, preserve evidence and keep an audit history.

• Improve reliability and accessibility using appropriately minimised or de-identified operational information.

• Send marketing only when you have chosen to receive it and provide a simple way to stop.

6 Legal grounds and consent

We process digital personal data in accordance with applicable Indian law, including the Digital Personal Data Protection Act 2023 and rules brought into force under it. Depending on the activity, processing is based on your consent, a voluntary provision of data for a requested purpose, performance of a service you requested, compliance with law, security and fraud prevention, medical-emergency or safety grounds recognised by law, or another permitted legitimate use.

Where consent is required, the platform records the document, version, choice, source and time. You may withdraw consent as easily as you gave it, but withdrawal does not invalidate processing already lawfully completed. Some processing is necessary to provide a service; withdrawing it may stop future access or completion. We do not treat acceptance of Terms or Privacy as consent to marketing.

7 Assessment reports and automated processing

Assessment answers are processed using fixed scoring and interpretation rules to produce scores and reports. These outputs support reflection and guided discussion; they do not make a legally binding decision about you and are not a medical diagnosis, clinical assessment, employment decision, credit decision or guarantee of relationship outcome. We preserve the applicable assessment and rule versions so results remain interpretable and reproducible.

Safety responses are handled separately and are excluded from assessment and couple reports. We do not use assessment answers, scores, reports or safety information to target advertising.

8 Partner privacy

• A purchaser may provide an intended partner’s email solely to issue a personal invitation.

• The invited partner receives their own account and completes their own assessment.

• Partner linking and couple-report sharing require distinct consents. Either person may withdraw a consent for future processing.

• Individual answers, safety responses and individual reports remain private. A couple report includes only information allowed by the approved report design and both partners’ current permissions.

• We do not reveal whether an email has an account or disclose private progress beyond the status needed to manage the joint service.

9 When we share personal data

We share only what is reasonably necessary for the relevant purpose and apply role, contract and security controls. Recipients may include:

• authorised employees and customer-service, finance, safeguarding and operations personnel;

• contracted counsellors and other professionals assigned to deliver a service;

• independent lawyers chosen for prenup work, only under the customer’s separate engagement and instructions;

• Supabase and Lovable infrastructure used to host and operate the applications;

• SMTP2GO and related email infrastructure used to send sign-in and service communications;

• Cashfree for payment processing, reconciliation and refunds;

• accountants, auditors, insurers and professional advisers under appropriate duties;

• courts, regulators, law-enforcement or emergency and safeguarding recipients where disclosure is lawful and necessary;

• a successor organisation in a merger, restructuring or transfer, subject to applicable notice and protection.

We do not share one customer’s data with another customer except through an expressly authorised partner or couple-report feature.

10 International processing

Our primary platform database is hosted in the Mumbai region in India. Some technology providers or authorised support operations may process limited data outside India. Where cross-border processing occurs, we comply with restrictions notified under Indian law, apply appropriate contractual and security protections and limit the data transferred. Material providers include Supabase for the database and authentication, Lovable for application hosting and runtime services, SMTP2GO for transactional email, Cashfree for payment processing, and contracted professionals in India for authorised service delivery.

11 Security

• email-code authentication and server-side access checks;

• role-based and record-level access controls;

• encryption in transit and provider security controls for stored data;

• separation of customer, professional, finance, safeguarding and owner functions;

• append-only consent and audit histories and protected content fingerprints;

• signed payment and Assessment-integration messages, replay controls and duplicate handling;

• rate limiting, monitoring, backups and incident response appropriate to the service.

No system is completely secure. If a personal-data breach occurs, we will investigate, contain and notify affected individuals and the Data Protection Board or other authority where required by applicable law.

12 Retention

We keep personal data only for as long as necessary for the purposes described, the service period, safety and dispute management, security, audit and legal obligations. Retention depends on the record type:

• Account and profile data: while the account is active and for a limited period afterwards for recovery, security and legal purposes.

• Assessment answers, reports and partner records: for the period stated in the service and retention settings, or until valid deletion where permitted.

• Safety and safeguarding records: for a restricted period appropriate to risk, professional duties and legal requirements.

• Orders, invoices, payments, refunds and tax records: for the period required by tax, accounting and consumer law.

• Consent, approval, integrity and audit records: for as long as needed to demonstrate lawful processing, protect records and resolve disputes.

• Support and complaint records: until resolution and for an appropriate limitation and quality-assurance period.

• Sandbox and synthetic test records: segregated and excluded from commercial reporting, retained only as needed for assurance and audit.

Our approved retention schedule is: account and profile data for the life of the account and up to 90 days after verified closure; assessment answers and generated reports for three years after service expiry or completion unless earlier deletion is validly requested; safety and safeguarding records for seven years after closure of the matter; orders, payments, refunds, tax and accounting records for eight financial years; consent, approval and audit records for eight years after the relevant account or transaction closes; support and complaint records for three years after resolution; security and access logs for up to twelve months unless needed for an investigation; marketing records until withdrawal, with a minimal suppression record retained for three years; and sandbox or synthetic assurance records for up to twelve months unless protected history requires longer retention. A longer period applies where law, litigation, fraud prevention, safety or a regulatory direction requires it.

13 Your choices and rights

Subject to applicable law and verification, you may:

• obtain a summary of personal data being processed and information about processing and sharing;

• correct inaccurate or misleading data and complete incomplete data;

• request erasure where retention is no longer necessary or legally required;

• withdraw consent and change marketing preferences;

• request a copy of available account and service data;

• raise a grievance and, where applicable, approach the Data Protection Board of India;

• nominate another individual to exercise applicable rights in the event of death or incapacity;

• withdraw from a service, subject to the service and refund consequences explained at the time.

We may ask for reasonable verification before acting. We may retain information that must be preserved for law, payment, tax, safety, fraud prevention, audit or the establishment, exercise or defence of legal claims. We will explain a refusal where required.

14 Children

ShaadiProblems is intended only for adults aged 18 or over. We do not knowingly offer accounts or assessments to children. If we learn that a child’s personal data has been collected contrary to this rule, we will restrict access and take appropriate deletion or legal steps. Contact us if you believe a child has used the service.

15 Cookies and browser storage

We use only the cookies and browser storage reasonably necessary for sign-in, security, consent, continuity and core functionality unless an additional choice is presented. The Assessment application may use browser storage for its normal authenticated session. Do not use a shared device without signing out. Non-essential analytics or advertising technologies must not be introduced without updating this Notice and obtaining any required choice.

16 Contact and grievances

Privacy requests and questions: support@nirji.com

Grievance officer: JA Khan, Chief Grievance Officer

Grievance email: support@nirji.com

Postal address: 402-A, 4th Floor, Dharam Karan Road, Ameerpet, Hyderabad-500016, Telangana

We will acknowledge and respond within the period required by applicable law and our published grievance process. If you remain dissatisfied after using our grievance process, you may use any remedy available under applicable law, including approaching the Data Protection Board of India where applicable.

17 Changes to this Notice

We may publish a new version when our services, providers, purposes or legal obligations change. The platform shows the current version and effective date. We will provide appropriate notice and request fresh consent where a material change requires it. Earlier notices and consent records remain preserved.

18 Publication details

Effective date: 28 September 2026

Version: V 001

Data fiduciary: Good People Solutions Private Limited

Registered office: 402-A, 4th Floor, Dharam Karan Road, Ameerpet, Hyderabad-500016, Telangana

Privacy and grievance contact: JA Khan, Chief Grievance Officer | support@nirji.com | 402-A, 4th Floor, Dharam Karan Road, Ameerpet, Hyderabad-500016, Telangana

Material service providers and processing locations: Supabase (Mumbai database region), Lovable (application hosting and runtime), SMTP2GO (transactional email), Cashfree (India payment processing), and authorised contracted professionals in India. Limited provider processing may occur outside India subject to applicable restrictions and safeguards.

Approved retention schedule: Privacy Notice V 001, effective 28 September 2026, section 12