Ritva Life — Privacy Policy

Version: 1.0 Effective date: 13 July 2026 Last updated: 13 July 2026

1. Who we are

Ritva Life is a platform that connects users with verified pandits (Hindu priests) for pujas and religious ceremonies. It is operated by RITVALIFE TECHNOLOGIES PRIVATE LIMITED, a company registered in India (CIN: U63120UP2026PTC245494), with its registered office at T1-5B, 5th Floor, Godhana, Chandauli, Chandauli - 232104, Uttar Pradesh, India.

In this policy, "we", "us", "our" and "Ritva" mean the company named above. "You" means any person who uses the Ritva Life app or website (ritvalife.com).

This policy explains what personal data we collect, why we collect it, who we share it with, and the rights you have over it. It is written to comply with India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Information Technology Act, 2000 and the rules made under it, including the SPDI Rules, 2011.

Under the DPDP Act, you are a Data Principal (the person the data is about) and we are the Data Fiduciary (the entity that decides why and how your data is processed).

2. Scope

This policy applies to:

• Users — people who book a puja through Ritva Life.
• Pandits — priests who register on Ritva Life to perform pujas.

Some data is collected only from pandits and never from users. Where that is the case, we say so clearly. Section 5 (Pandit KYC) is the most important example: we never ask a user for Aadhaar or PAN.

3. Personal data we collect from Users

Providing a name and phone number is necessary to create an account. Date of birth and gender are optional.

4. Personal data we collect from Pandits

5. Pandit KYC and payout data (sensitive personal data)

To operate as a marketplace that pays money to priests, Indian law requires us to verify who those priests are. This section applies only to pandits.

5.1 What we collect

• Aadhaar-based verification. A pandit completes an Aadhaar OTP verification through our KYC partner. We do not store the full Aadhaar number. We store only a masked Aadhaar reference (last four digits, e.g. XXXXXXXX1298), together with the name, date of birth, gender, address and photograph returned by the verification, and a status flag.
• PAN. PAN number, the name registered against that PAN, verification status and verification date.
• Bank / payout details. Account holder name, bank account number, IFSC code and/or UPI ID, and the verification status returned by our payout partner.

5.2 What we use it for — and what we never use it for

• Aadhaar and PAN are used solely to verify the identity of a pandit and to meet our tax and anti-fraud obligations. They are never used for advertising, profiling, or any purpose unrelated to verification and payouts.
• We never collect Aadhaar or PAN from users. If anyone claiming to represent Ritva Life asks a user for an Aadhaar number, PAN, OTP, bank details, card number or password, it is not us. Do not share it, and report it to our Grievance Officer (Section 14).
• A pandit's Aadhaar and PAN details are never shown to users and are never published on a pandit's public profile.

5.3 Who it is shared with

These details are shared only with the regulated partners that perform the verification and the payout:

• Cashfree Payments — Aadhaar (offline/OTP) verification, PAN verification, bank account verification, and payouts to pandits.

We share the minimum necessary for each check. These partners process the data under contract, for our specified purposes only.

5.4 Sensitive personal data

Under the SPDI Rules, the following are treated as sensitive personal data and given the strongest protection we apply: Aadhaar details, PAN, bank account and payout details, and biometric or photographic identity data collected during KYC. Access is restricted to authorised personnel who need it to perform verification, payouts, tax or fraud-investigation duties, and access is logged.

6. Payment data

Payments are processed by our payment gateway partners, Razorpay and Cashfree Payments.

• We store a record of each payment and refund — the amount, status, timestamp, and the gateway's reference ID.
• We do not collect or store your card number, CVV, UPI PIN, or net-banking password. Those are captured directly by the payment gateway on its own infrastructure and never reach our servers.

7. Google Calendar (pandits only)

A pandit may connect a Google Calendar so that we can tell whether they are free at the time of a requested puja.

• We store the calendar ID, calendar name, time zone and sync status, and we create and delete calendar events that correspond to Ritva bookings.
• We read availability only for the time windows around a booking. We do not read, store or analyse the content of a pandit's unrelated personal calendar events.
• A pandit can disconnect the calendar at any time from the pandit app. Our use of Google user data complies with the Google API Services User Data Policy, including its Limited Use requirements.

8. Device and technical data

We collect, from both users and pandits:

• Push notification device tokens (Firebase Cloud Messaging) so we can send booking updates.
• App version, device model, operating system and platform.
• IP address and server logs, including timestamps and the actions performed.

This data is used to deliver notifications, to keep the app working across versions, to diagnose faults, and to detect fraud and abuse.

9. Why we process your data, and our lawful basis

Under the DPDP Act we process personal data on the basis of your consent, which you give when you create an account and tick the box accepting this policy, and — where the law allows — for certain legitimate uses, such as complying with a legal obligation or responding to an emergency.

We do not sell your personal data. We do not use your personal data to serve third-party advertising.

10. Chat, reviews and content

• Chat. Messages between a user and a pandit are stored so that both sides have a record and so we can investigate disputes. Do not share Aadhaar numbers, PAN, OTPs, card numbers or bank details in chat. Ritva staff may access chat content only to investigate a support ticket, a safety concern, or a suspected breach of our terms.
• Reviews. A review you write, and the rating you give, are shown publicly on the pandit's profile alongside your first name. Do not include personal details in a review that you do not want to be public.

11. Who we share data with

We share personal data only as follows:

1. Between a user and their pandit. Once a booking is accepted, the assigned pandit is given the user's name, phone number and the address of the event, because they must travel there and perform the ceremony. The user is shown the pandit's name, photo, languages, qualifications and rating. Neither side is given the other's KYC, PAN, bank or payment details.
2. Service providers who work for us under contract: payment gateways (Razorpay, Cashfree), KYC and payout providers (Cashfree), cloud hosting (Amazon Web Services), push notifications (Google Firebase), and communications providers.
3. Legal and regulatory disclosure, where we are required by law, by a court, or by a lawful order of a government or enforcement agency, or where disclosure is necessary to protect the safety of a person.
4. On a business transfer — if our business is merged, acquired or reorganised, personal data may transfer to the acquiring entity, which will remain bound by protections at least as strong as those in this policy.

We do not share your personal data with anyone else without your consent.

12. Cross-border transfer of data

Our servers and those of our service providers are primarily located in India. Some of our service providers may process or store personal data on servers outside India.

Where personal data is transferred outside India, we do so in accordance with Section 16 of the DPDP Act, and we will not transfer personal data to any country or territory that the Central Government restricts by notification. We require any recipient outside India to protect the data to a standard at least equivalent to this policy, under contract.

13. Your rights as a Data Principal

Under the DPDP Act you have the following rights. You can exercise all of them by writing to our Grievance Officer (Section 14), or from within the app where the feature is available.

1. Right to access. You can ask us for a summary of the personal data we hold about you, what we are doing with it, and which other entities we have shared it with.
2. Right to correction and completion. You can ask us to correct data that is wrong, complete data that is incomplete, and update data that is out of date. You can edit most of your profile directly in the app.
3. Right to erasure. You can ask us to delete your personal data, and you can request account deletion from within the app. We will delete it unless we are required by law to keep it (see Section 15).
4. Right to withdraw consent. You can withdraw your consent at any time. Withdrawing consent is as easy as giving it. If you withdraw consent, we will stop processing your data and delete it, unless a law requires us to keep it. Withdrawing consent does not make our earlier processing unlawful, and it may mean you can no longer use the service — for example, a pandit who withdraws KYC consent cannot continue to receive bookings or payouts.
5. Right to grievance redressal. You have the right to a readily available means of raising a complaint with us, and we must respond. See Section 14.
6. Right to nominate. You may nominate another individual who, in the event of your death or incapacity, may exercise your rights under the DPDP Act on your behalf. To register a nominee, write to our Grievance Officer with the nominee's name and contact details.

We will respond to any request under this section within the period prescribed by law, and in any event without undue delay. We may need to verify your identity before we act on a request.

14. Grievance Officer

If you have any question, concern or complaint about how we handle your personal data, contact our Grievance Officer. This is the first place to raise a complaint, and we must respond.

• Grievance Officer: Mitesh Chaturvedi
• Email: mitesh@ritvalife.com
• Phone: +91 7028371982
• Postal address: T1-5B, 5th Floor, Godhana, Chandauli, Chandauli - 232104, Uttar Pradesh, India

For general support, you can also write to support@ritvalife.com.

We will acknowledge your complaint and respond within the timelines required by the DPDP Act and the IT Act.

If you are not satisfied with our response, you have the right to complain to the Data Protection Board of India.

15. How long we keep your data

We keep personal data only for as long as it is needed for the purpose it was collected for, or for as long as a law requires.

When we no longer need personal data, we delete it or irreversibly anonymise it.

16. How we protect your data

We take reasonable security safeguards to prevent personal data breaches, including encryption of data in transit, access controls that limit who can see sensitive data, restricted and logged access to KYC and payout records, and secure, regulated third-party processors for payments and KYC.

No system is perfectly secure. If a personal data breach occurs, we will notify the Data Protection Board of India and every affected Data Principal, as required by the DPDP Act.

17. Children

Our service is not intended for children under 18. We do not knowingly create an account for a child. We do not process a child's personal data in any way that is likely to cause a detrimental effect on their well-being, and we do not track, profile or serve targeted advertising to children. If we learn that we hold a child's personal data without verifiable parental consent, we will delete it.

18. Changes to this policy

We may update this policy. If we make a significant change, we will notify you in the app or by email before it takes effect, and — where the law requires it — ask for your consent again. The "Last updated" date at the top shows when this policy was last changed.

19. Contact

RITVALIFE TECHNOLOGIES PRIVATE LIMITED T1-5B, 5th Floor, Godhana, Chandauli, Chandauli - 232104, Uttar Pradesh, India CIN: U63120UP2026PTC245494 Support: support@ritvalife.com Grievance Officer: mitesh@ritvalife.com