RishtaPatraरिश्तापत्रBiodata · Rishta Connect · Kundali
Rishta ConnectRishta ConnectConnect

Privacy Policy

Last updated: 4 October 2026

This policy explains what RishtaPatra does — and does not — do with your information. It is written to match how the product actually works.

1. Your biodata stays on your device

Everything you type into the editor, every photo you upload or edit (including the studio backdrop tool), and every file you import (resume, old biodata) is processed inside your browser or the app and saved in that device’s local storage. Accounts are optional: without one we store nothing about you; with one we store only what the “Accounts (optional)” section below lists. We never upload your biodata to our servers unless you opt in: the paid Web biodata page, a Rishta Connect profile you choose to publish, or a biodata you choose to save to your account (all described below).

Accounts (optional)

You can use the biodata maker and the Janam Kundali without signing in. If you create an account (Google, e-mail + password or phone), the following is stored in our Cloudflare account (D1 database and KV storage):

  • Sign-in details from your provider: e-mail address and whether it is verified, phone number, display name and profile photo URL, the provider used, plus the language and city you set on the account page.
  • Sessions: a SHA-256 hash of each session token (never the token itself) with a random device id, the browser string, and creation / last-seen / expiry times. Sessions expire after 30 days of inactivity; you can end any of them from “Sessions” on the account page.
  • Biodatas you save to the cloud (only when you press “Save to account” or switch on auto-save): the biodata text, photo, design and privacy settings as they are in the editor, up to 5 per account.
  • Purchases made while signed in, linked to the account so they can be restored on any device, and a Kundali Card if you choose to save one.
  • Your Rishta Connect profile id, when you publish or link a profile while signed in (the profile data itself is described under Rishta Connect).

Processors. Sign-in, e-mail verification, password reset and SMS one-time codes are handled by Google Firebase Authentication (Google LLC) under Google’s terms; we receive a signed identity token and never see your password. Cloudflare, Inc. stores the account data above.

Deleting your account. “Delete account” on https://rishtapatra.com/account removes your sessions, your cloud-saved biodatas, your Rishta Connect profile with its photos, interests and entitlements, and your personal details immediately. Payment records are kept for the period required by tax law with the link to your account removed. This is how we honour the right to erasure under India’s Digital Personal Data Protection Act, 2023; you can also write to info@rishtapatra.com.

2. What our server does store

  • Purchases: when you pay, we record the item bought, amount, the e-mail you entered for the receipt, any coupon or referral code used, an anonymous device identifier, and Razorpay’s order and payment IDs. We keep this to issue and verify unlock codes, to honour refunds and to keep accounts.
  • Referrals: an anonymous referral code derived from a random device identifier, and counts of purchases made through it. No names or contacts.
  • Web biodata page (paid, optional): if you buy and publish a page, the biodata content you choose to publish — including the photo — is stored so the page can be shown to people who have the link. You can update or delete it at any time from the Download tab; it is also deleted when the page expires.
  • Technical logs: our host (Cloudflare) keeps short-lived request logs (IP address, URL, user agent) for security and error diagnosis. We do not use advertising trackers or sell data.

Rishta Connect (optional matchmaking)

Nothing below happens unless you press “Publish to Rishta Connect”. When you do, the following is stored on Cloudflare’s D1 database and KV storage in our account so that other members can discover you:

  • Your profile: the biodata text as you entered it in the maker (name, date of birth, height, religion and community, education, work, family, about-me and partner-expectation text, contact details) and the design you chose — but not the original or edited photo file from the maker. From this we derive searchable fields (age, height, religion, community, mother tongue, education, city/state, rashi, nakshatra, manglik), your partner preferences, your privacy switches, who manages the profile, a completeness score and the dates it was created, updated and approved.
  • Photos: if you upload one, a downscaled clear photo and a small pixelated version, both as JPEG. The pixelated version is the only one shown before a match.
  • Activity: interests you send and receive (with the optional note), accepted matches, profiles you block, reports you make or that are made about you, and a daily counter of interests sent.
  • Add-on entitlements (Pass, Spotlight, Super Interests, Who viewed me, Verified badge): the Razorpay payment id, activation and expiry dates or the remaining credits.
  • Profile views: which member viewed which profile, when, and how often, kept for 30 days (not recorded for Incognito members).
  • Verification requests: payment id, status and the reason we give when we cannot verify.
  • Identity: an anonymous device identifier and a SHA-256 hash of your recovery code. We never store the code itself; only the hash is compared when you recover or edit the profile.

Who sees what. Other members see a redacted profile according to your privacy switches: first name only, no phone or e-mail, city and state instead of your address, age instead of date of birth, and the pixelated photo. Birth time, birth place and the contact person are never shown before a match. Your full name, phone, e-mail, WhatsApp and clear photo are revealed only after both sides accept an interest — and then only to that one member. You can pause the profile (it disappears from everyone’s matches) or delete it at any time from “My profile”.

Moderation. A person on our team reviews every profile before it goes live and when it is reported or edited. Moderators see the full profile including contact details and the clear photo; they do not see your recovery code.

Retention. “Delete profile” removes the profile, its photos, interests, blocks and daily counters immediately. Reports keep only the bare profile id for 90 days so abuse can be followed up. Profiles removed by a moderator are kept for 90 days for abuse handling and then deleted. The Connect Pass purchase record follows the retention rule for purchases below.

Janam Kundali (computed on your device)

The Janam Kundali, daily transits and Kundali Milan at https://rishtapatra.com/kundali are computed inside your browser with an open-source astronomy library; no birth detail is sent to our servers to produce them. The birth date, time, place and its coordinates are stored only in your browser’s local storage (with the rest of your biodata) and inside the Kundali Card links you choose to create and share — such a link carries the birth instant and coordinates, so share it only with people you trust. The computed chart summary saved with your biodata (signs, degrees, houses, panchang, dosha, dasha) contains no coordinates.

Rishta Connect receives derived values only. If you use your computed kundali in a Rishta Connect profile, the server receives your Moon sign (rashi), nakshatra, Lagna sign, the house of Mars and the Manglik class together with a “computed” marker — never the birth coordinates, the chart or the birth-time-unknown flag; these are removed on your device before sending and dropped again by the server. Birth time and birth place of the biodata continue to be shown to matched members only, as before. The paid Web biodata page includes the chart summary only when you add the Kundali page to your biodata; the coordinates are always stripped from what is published.

3. Payments

Payments are processed by Razorpay Software Pvt. Ltd. Your card, UPI or bank details are entered on Razorpay’s secure checkout and are never visible to us. Razorpay’s own privacy policy applies to that step.

4. Cookies and local storage

We use browser local storage (not cookies) to autosave your biodata, your language choice and your unlocks on your device. If you sign in, local storage also keeps your session token so you stay signed in on that device; signing out removes it. Dismissing the offer banner uses session storage. The admin panel uses a session token visible only to the site owner.

5. Sharing

We share data only with the processors needed to run the Service (Razorpay for payments, Cloudflare for hosting and storage) and when required by law. We never sell personal data.

6. Retention

Purchase records are kept for as long as needed for tax and accounting law (currently 8 years in India). Published web pages are deleted on expiry or when you remove them. Local data on your device is under your control.

7. Your rights

You may ask us to show, correct or delete the purchase or page data linked to your payment ID or e-mail by writing to info@rishtapatra.com. If you have an account, you can see and edit your details, download or delete your cloud biodatas and delete the whole account yourself at https://rishtapatra.com/account; without an account the maker stores nothing about you, so there is usually nothing else to delete.

8. Children

The Service is for adults arranging their own or a family member’s marriage. We do not knowingly collect data from children under 18.

9. Changes

We will post any changes on this page with a new “last updated” date.