Legal

Privacy Policy

Last updated: 2 June 2026

Alayaaa (“Alayaaa”, “we”, “us”, “our”) provides software that helps temples, maṭhas, trusts and similar religious or community institutions (each an “Institution”) manage devotee communication, donations and payments, sevā and darśana bookings, events, and accounts. This Privacy Policy explains what information we collect, how we use and protect it, and the choices you have. It applies to alayaaa.com, the Alayaaa web and mobile applications, and our APIs (together, the “Service”).

For most devotee information processed in the Service, the Institution is the data controller and Alayaaa acts as a processor on its behalf. For account and billing information of Institution administrators, Alayaaa is the controller.

1. Information we collect

a. Account & Institution information

Administrator name, phone number, email, and role.
Institution details: name, address, branding, bank/UPI details used to receive donations, and tax identifiers (e.g. 80G) where provided.
Authentication data, such as one-time passwords (OTPs) and session tokens.

b. Devotee & contact data (uploaded or imported by the Institution)

Contact records the Institution adds, uploads via CSV, imports from a device address book, or imports from Google Contacts — typically name, phone, email, and group/membership and payment-status fields.
Messaging records (campaigns, templates, delivery status) for SMS, WhatsApp, email and push.
Donation, sevā, event and accounting records associated with a contact.

c. Payment information

Donations are collected directly into the Institution’s own bank account via UPI. We store payment references (e.g. UPI transaction IDs/UTRs, amount, status) for reconciliation and receipts. We do not store card numbers or UPI PINs.
Platform subscription billing is handled by our payment processor; we store invoice and subscription metadata, not full card details.

d. Technical data

Device and browser information, IP address, approximate location derived from IP, log and diagnostic data, and cookies/local storage used to keep you signed in and remember preferences (such as language).

2. Google user data (Contacts import)

What we access. If you choose to use “Import from Google”, Alayaaa requests read-only access to your Google Contacts using the https://www.googleapis.com/auth/contacts.readonly scope. We use this solely to let you select and import contacts (name, phone number, email) into your Institution’s contact list inside Alayaaa.

How we use it. Google Contacts data is used only to perform the import you request, at the moment you request it. We do not use it for advertising, we do not sell it, and we do not use it to train any generalized artificial-intelligence or machine-learning models.

Limited Use. Alayaaa’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Retention. We do not retain a copy of your Google account’s contact list. Only the specific contacts you import become contact records in your Institution’s account, and you can delete them at any time. Our access token is short-lived and is not stored long-term; you can revoke Alayaaa’s access at any time at myaccount.google.com/permissions.

3. How we use information

To provide, operate, secure and improve the Service.
To send messages and notifications that an Institution initiates to its devotees, and to deliver receipts and reminders.
To process donations and reconcile payments into the Institution’s account.
To authenticate users, prevent fraud and abuse, and meter usage for billing.
To provide support and communicate about the Service.
To comply with legal obligations.

4. Messaging & consent

Institutions are responsible for obtaining the consent required to message their devotees and for complying with applicable rules (for example, WhatsApp Business Policy opt-in requirements and, for SMS in India, TRAI/DLT requirements). Alayaaa provides tools to honour opt-outs and records delivery status.

5. How we share information

We do not sell personal information. We share it only:

With the Institution whose account the data belongs to, and its authorized administrators.
With service providers (sub-processors) that operate the Service on our behalf — for example hosting and database (Supabase, Vercel), messaging delivery (e.g. Twilio, Meta/WhatsApp), email/push delivery, and payment processing. These providers are bound to use the data only to provide their service to us.
For legal reasons, where required by law or to protect rights, safety and security.
In a business transfer, subject to this Policy.

6. Data retention

We keep information for as long as an Institution’s account is active or as needed to provide the Service, then delete or anonymize it within a reasonable period, unless a longer retention is required by law (for example, financial records). Institutions and devotees can request deletion as described below.

7. Security

We use encryption in transit (HTTPS), access controls, tenant isolation and other safeguards designed to protect information. No method of transmission or storage is completely secure, but we work to protect your data and to notify affected parties of incidents where required.

8. Your rights & choices

Access, correct, export or delete your information, subject to applicable law. Devotees should contact the relevant Institution; Institution administrators can contact us.
Revoke Google Contacts access at any time via your Google Account permissions.
Opt out of an Institution’s messages by following the opt-out instructions in those messages.

9. Children

The Service is intended for use by Institutions and adults acting on their behalf. It is not directed to children, and we do not knowingly collect personal information directly from children.

10. International users

Alayaaa is operated from India and information may be processed in India and in other countries where our service providers operate. By using the Service you consent to such processing.

11. Changes to this Policy

We may update this Policy from time to time. We will revise the “Last updated” date above and, for material changes, provide additional notice where appropriate.

12. Contact us

Questions or requests about this Policy or your data:
Email: sk@yaaraa.ai
Web: alayaaa.com