This policy explains what personal data [Company legal name] Private Limited (“Ourpoint”, “we”) processes, why, who sees it, and your rights under the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000. We are the data fiduciary for your data.
What we collect
- Phone number: collected after your photos, with your consent, so our team can call, text or WhatsApp you about your account, verification and matches. Never shown to other members, never used for marketing, and you can remove it any time. The one exception is your choice: in an open conversation, if one of you offers to swap numbers in the chat and the other agrees, each of you sees the other's number.
- Account: your email address, sign-in records, and the IP address you signed up from. If you sign in with Google or Apple, we receive only your email address (with Apple, possibly a private relay address) and an account identifier from them, never your password or contacts.
- Basics: first name, date of birth, gender, whom you'd like to meet, partner age range, city and language.
- How you live: religion (or that you'd rather not say), diet, smoking, drinking, whether you've been married before, and up to three things you won't compromise on in a partner. We use these only to decide who can be among your five, and to show the people you're paired with how you live. Religion you mark "prefer not to say" is never shown.
- Your interview: your answers to about 40 questions, including your views on faith, children, money, family and where to live. If you answer by voice, the recording is transcribed and not kept.
- Your profile: summaries of your answers, your structured choices, and numeric representations of your answers used to choose introductions.
- Photos you upload, and the result of our automated photo check.
- Verification: a selfie, a photo of a government ID that shows your address, your declaration that you are single, an automated comparison, and the reviewer's decision.
- Your week: who you were introduced to, your answers to shared questions, and your yeses.
- Conversations: messages and voice notes, and their transcripts.
- Payments: what you bought, the amount and payment references. Your card or UPI details are handled by Dodo Payments; we never see them.
- Safety: reports you make or that are made about you, and flags raised by our automated safety check.
- Technical: a sign-in cookie (60 days), a theme cookie (1 year), server logs, and a bot check on the sign-in page. To count visits we keep two first-party cookies (1 year): the last day you visited, and where your first visit came from (a search engine or the site that linked here). We store only daily totals, such as how many people came from Google or which pages were read, never your IP address or a record of what you looked at. We don't use any third-party analytics or advertising trackers.
Your answers about faith, family and similar topics can be sensitive. We use them only to choose your introductions and write your questions, never to filter you by religion, caste or community, and never for advertising.
Why we use it
- To run the service you asked for: your profile, weekly introductions, questions, conversations and payments. We rely on your consent, which you give at sign-up and, for verification, again before you upload your ID.
- To keep members safe: verification, photo checks, scam detection in the first 48 hours of a conversation, and handling reports.
- To meet legal obligations, including tax law and lawful requests from authorities.
- To understand whether Ourpoint works, using usage events such as “a conversation opened”. We don't sell your data or use it for advertising.
The AI assistant and automated decisions
We use AI models run by DeepInfra to: lead your interview, summarise your answers, transcribe voice, check photos, compare your selfie and ID with your profile photo, write questions for each pair, notice when two answers match, write a short note when a conversation opens, and scan messages in the first 48 hours for money requests and pressure. The data needed for each task is sent to DeepInfra for that task. DeepInfra says it processes these requests in memory, does not use them to train models, and may keep inputs and outputs for a limited time for debugging.
Our systems decide whom you're introduced to and in what order. A person, not an automated system, decides whether you're verified and whether an account is suspended or closed.
Who sees your data
- Members you're introduced to: your card (photo, first name, age, city, and three answers you chose) and your other photos. Your answers to a shared question are shown to that person only after you've both answered.
- The person you're in a conversation with, including your phone number if you both choose to swap numbers.
- Our team: reviewers see verification materials and reported conversations. Access is limited to what the task needs.
- Service providers who process data for us under contract: Cloudflare (hosting, database, file storage, email and bot checks), DeepInfra (AI processing), and Dodo Payments (payments, as merchant of record).
- Authorities, when the law requires it.
Nobody else can search for or browse your profile.
Where it's processed
Cloudflare stores and processes data in its data centres, which may be outside India. DeepInfra processes AI requests in the United States. Cross-border transfers are permitted under the DPDP Act unless the Government restricts transfers to a particular country, and we will follow any such restriction.
How long we keep it
| Account, profile, interview answers, card, photos | Until you delete your account |
| Selfie and ID used for verification | 30 days after the verification decision |
| Messages you sent | Until you delete your account. When you leave, your messages are removed from the other person's view. |
| Accounts that never finish sign-up | Deleted after 180 days of inactivity |
| Sign-up IP address | 365 days after your account is deleted, as the Government's advisory for matrimonial websites expects |
| Safety reports and moderation decisions | Up to 3 years after they're resolved, to protect members from repeat offenders and to handle legal claims |
| Purchase records (amounts, dates, payment references) | Up to 8 years, as tax and accounting law requires |
| Usage events (for example “a conversation opened”) | Kept, linked only to a random ID that no longer identifies you once your account is deleted |
Your rights
- Access: download a copy of your data from the Your data page.
- Correction: edit your card and photos yourself; ask us to correct anything else.
- Erasure and withdrawing consent: leave from the Your data page. This deletes your personal data straight away, except what the table above says we keep. Because the service depends on processing your answers, withdrawing consent means closing your account.
- Nomination: you can nominate someone to exercise these rights if you die or become unable to. Write to privacy@ourpoint.in.
- Grievance: contact our Grievance Officer (below). We acknowledge within 24 hours and respond within 15 days. If you're not satisfied, you can complain to the Data Protection Board of India.
Age
Ourpoint is only for people aged 21 and over. If we learn that someone younger has an account, we delete it.
Security
Data is encrypted in transit. Photos and ID documents are stored privately and are only served to people allowed to see them. ID documents are kept separately from profile photos. If a breach affects your data, we will tell you and the Data Protection Board as the law requires.
Changes
We'll tell you before any material change to this policy takes effect. Version 2026-10-21, effective 21 October 2026.
Contact
Privacy questions: privacy@ourpoint.in. Grievance Officer: [Grievance Officer full name], grievance@ourpoint.in, [Registered office address, India].