Privacy Policy · Alive Rituals

We collect as little as we can, we never sell it, and the things you tell this room are treated with care.

Template, for the owner to review. This page is a starting draft written for Alive Rituals. Please fill every [to fill] item and have it checked by a qualified professional before payments go live.

1. Who is responsible for your data

[to fill: registered business name], [to fill: registered address], is the Data Fiduciary for personal data collected through aliverituals.com, under India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and applicable rules.

2. What we collect, and why

Orders: your name, phone, email and delivery address, so we can make, ship and support your order, send invoices and meet tax and legal obligations.
Payments: handled by our payment partner [to fill: payment gateway]. We receive a payment confirmation and reference, never your full card, UPI PIN or bank login.
Waitlist and emails: your email, only if you ask to be told when something opens. You can unsubscribe in one click.
Memberships: your plan, billing dates and delivery details, so we can send boxes and manage renewals.
Basic technical data: standard server logs (IP address, browser, pages requested) kept for security and kept for a short time only.

3. The quiz and your conversations with Diya

In the current version of the site, the quiz and your conversations with Diya happen entirely in your browser. Chats are not sent to us or stored on our servers; they disappear when you close the tab. Your quiz result is kept in your browser's session storage for that visit only, and waitlist emails entered here are currently saved on your device only.

Talking with Diya by voice (optional). Diya's voice is off until you switch it on. Reading replies aloud and listening through the microphone both use your own browser's or device's built-in speech features; we don't use a paid voice service. When you use the microphone, some browsers (for example Google Chrome, and Safari through Apple's speech recognition) may send the audio to their own speech service to turn it into text, and some online voices may send the reply text to be spoken, under that company's privacy terms. Alive Rituals never receives or stores recordings. Your on/off choice for Diya's voice is remembered in your browser's local storage.

If we later connect Diya to an AI service or start saving journals to an account, we will update this policy first, tell you clearly what is stored, where and for how long, ask for your consent before collecting it, and let you delete it at any time. Messages that mention self-harm are never used for marketing, and safety resources are always shown.

4. Consent

We process your data with your consent, or for legitimate uses allowed by the DPDP Act (such as fulfilling an order you placed). You can withdraw consent at any time by writing to us; this won't affect anything done before you withdrew it, and some data (such as invoices) must be kept by law.

5. Who we share it with

Only with the partners who help us serve you, and only what they need: courier and logistics partners (delivery details), our payment gateway, our email provider and our hosting provider. We do not sell your data or share it with advertisers. The site loads fonts from Google Fonts, which means your browser connects to Google's servers.

6. Your rights

Under the DPDP Act you can ask us to: see a summary of the personal data we hold about you and how we use it; correct, complete or update it; erase it (where we don't need to keep it by law); and nominate someone to exercise these rights on your behalf. You also have the right to grievance redressal.

7. How long we keep it

Order and invoice records: as long as tax and accounting laws require ([to fill: e.g. 8 years]). Waitlist emails: until you unsubscribe or the list closes. Server logs: up to [to fill: e.g. 30 days]. Everything else: only as long as needed for the purpose you gave it to us for.

8. Children

Our products are meant for adults. We don't knowingly collect personal data from anyone under 18 without verifiable consent from a parent or guardian, and we don't track or target children.

9. Security

The site is served over HTTPS, access to customer data is limited to the people who need it, and we work with reputable providers. If a breach affects your data, we will inform you and the Data Protection Board of India as the law requires.

10. Grievance Officer

Name: [to fill: name]
Email: [to fill: email]
Address: [to fill: address]
We aim to reply within [to fill: e.g. 7] days. If you're not satisfied, you may approach the Data Protection Board of India.