Privacy Policy

Updated on

Version 1

1. User Security

Mahasya is committed to protecting the privacy and personal data of its users. We implement appropriate technical, administrative, and organizational safeguards to ensure that your information is secure, confidential, and protected against unauthorized access, misuse, or disclosure.

2. User Consent & Communication Preferences

You have full control over the communications you receive from Mahasya. You may opt out of marketing messages, including emails, SMS, or promotional notifications, at any time.

Service-related and transactional communications necessary for consultations, orders, subscriptions, or support may still be sent.

3. Cookies & Tracking Technologies

Mahasya uses cookies and similar technologies to enhance user experience, improve platform functionality, and understand usage patterns.

  • Cookies do not store sensitive personal or financial information
  • You may disable cookies through your browser or device settings, though some features may be limited

4. Collection & Use of Personal Data

To deliver personalized wellness services, Mahasya may collect and process the following information:

  • Identity and contact details
  • Account and transaction information
  • Health and wellness inputs shared voluntarily by you during assessments or consultations
  • Device and usage data for app performance and security

All data is collected lawfully, transparently, and only for specified purposes, in compliance with the Digital Personal Data Protection Act, 2023 (India).

5. Data Sharing & Disclosure

Mahasya does not sell, rent, or trade your personal data.

We may share limited data with trusted service providers or partners (including technology, logistics, or communication partners) strictly for operational purposes. All such entities are bound by confidentiality and data protection obligations.

6. User Rights (DPDP Act Compliance)

As a user, you have the right to:

  • Access your personal data
  • Request correction or updating of your data
  • Withdraw consent for non-essential data processing
  • Request deletion of your personal data, subject to legal and operational requirements

Requests can be raised through Mahasya's official support channels.

7. Data Retention

Personal data is retained only for as long as required to fulfill service obligations, comply with legal requirements, or resolve disputes, after which it is securely deleted or anonymized.

8. Policy Updates

Mahasya may update this Privacy Policy periodically. Any changes will be published on this page and will take effect immediately upon posting. We will not materially reduce user privacy protections without appropriate notice. Continued use of the platform indicates acceptance of the revised policy.