Privacy policy

Account info. When you sign in we receive your name, email address, and (if you sign in with Google) profile picture from your identity provider. You can also add a phone number on your profile.

Profile details. If you set up a customer profile, we store your home address (so we can show you nearby pandits) and your tradition / language preferences. If you set up a pandit profile, we store your service area, the ceremonies you offer, and prices.

Booking details. When you submit a booking request, we store the ceremony date, the address where the ceremony will happen, and any notes you write for the pandit. We do not collect or store payment information — payment between you and the pandit happens directly, in person, on the day of the ceremony.

Operational logs.We keep server logs of requests, errors, and rate-limit events so we can keep the service running. We also keep an audit log of when pandits view a booking's full address and contact info, so that access is accountable.

We use your information to run the service: to authenticate you, to match families with pandits, to deliver booking requests to the pandit you chose, to surface your bookings on your dashboard and calendar, and to maintain a safe, working platform. We do not sell your personal information.

When you submit a booking request, the pandit initially sees only your city, state, and ZIP code — not your specific street address — along with the ceremony name, date, and your notes. Once the pandit accepts the request, your full address, name, email, and phone number are shared with that pandit so they can coordinate with you directly. The same is true in reverse: the pandit's contact details become available to you on acceptance.

We're careful with this access. Pandits only see the bookings they were directly requested for, and we keep an internal audit log of when post-acceptance contact details are viewed.

We rely on a small number of vendors to operate the platform: Supabase (database + authentication), Vercel (hosting), Mapbox (geocoding addresses you enter), and Resend (transactional and waitlist email). These vendors process data on our behalf and are not allowed to use it for their own purposes.

We use a small number of essential cookies to keep you signed in and to remember your sidebar preference. We don't run third-party advertising or analytics trackers.

Connections to MyPujas are encrypted in transit (HTTPS). Authentication is handled by Supabase. We follow the principle of least exposure — for example, a pandit only sees a customer's full address after they accept the booking.

No system is perfectly secure. If you believe your account has been compromised or you've found a security issue, please email founders@mypujas.com and we'll respond promptly.

You can edit your profile and contact details at any time on your dashboard. You can also delete your account from the profile page; this removes your profiles, redacts your name and contact information from past bookings, and signs you out. We may retain a minimal record of past bookings (without your personal details) for the pandit's history and tax records.

If you'd like a copy of the personal information we hold about you, or if you want us to delete data we still hold after self-serve deletion, email founders@mypujas.com.

MyPujas is intended for adults arranging ceremonies. We do not knowingly collect personal information from children under 13.

If we change this policy in a meaningful way, we'll update the “Last updated” date at the top of this page and, for active users, send a notice by email.

Questions about privacy? Email founders@mypujas.com.