Privacy policy

1. Who we are

Saath ("we", "us") is a prepaid marriage-support membership delivering counselling and capped legal-support services in India. This policy is aligned with the principles of India's Digital Personal Data Protection Act (DPDP). It is reviewed with qualified counsel and updated as needed.

2. What we collect

• Account data: name, email, phone, password (hashed), verification status.
• Member details: spouse name, marriage date, preferred language, city, and (if a family member buys) buyer details.
• Membership & payment data: tier, cadence, renewal dates, and payment records processed via Razorpay (we do not store full card details).
• Case & session metadata: case stage, status, timestamps and session bookings.
• Counselling & legal notes: stored separately, encrypted, and accessible only to the assigned professional — see the confidentiality wall below.
• Professional data: for counsellors and lawyers — credentials, registration numbers and verification documents.

3. The confidentiality wall

This is the most important protection in Saath. Counselling notes and legal notes live in separate, encrypted data stores with role-scoped access. Only the assigned counsellor can read counselling notes; only the assigned lawyer can read legal notes. Even our administrators see case metadata only — never the contents of what was said. No system path returns counselling content to a legal context, or vice versa. What you say in counselling can never be used against you in a legal matter.

4. How we use your data

• To deliver the membership: matching counsellors, scheduling sessions, processing escalations.
• To process payments and manage renewals.
• To run the mandatory safety screen and route safety cases to protection.
• To send essential notifications (you may opt out of non-essential messages).
• To verify professionals against issuing bodies.

5. Consent & purpose limitation

We collect explicit, timestamped consent at sign-up and process data only for the purposes stated here (purpose limitation and data minimisation). The non-member spouse accepts confidentiality terms before participating in any joint session.

6. Data residency & security

Sensitive data and documents are stored in India (Mumbai region). We use TLS in transit and encryption at rest for notes and documents. Documents live in private storage with signed, expiring access links — never public. Access is least-privilege and fully audited (the audit log records metadata only, never note contents).

7. Sharing

We do not sell your data. We share data only with the assigned professional for your case, and with service providers strictly necessary to operate (payments, communications, video sessions), under contract. Safety cases may be signposted to appropriate authorities or shelters.

8. Your rights

You may request access to, correction of, or deletion of your personal data, subject to legal retention requirements. We honour opt-outs for non-essential communications. To exercise any right, contact us.

9. Retention

We retain data for defined windows aligned to legal and operational needs, then delete or anonymise it. Abuse-case data is treated as the highest sensitivity with tight access controls.

10. Changes

We may update this policy and will post the revised date above. Material changes will be notified to members.

This summary is for general information and is not legal advice.