Legal

Privacy Policy

How we collect, use, and protect your information

Last Updated: July 30, 2026
Effective Date: July 30, 2026

At Mero Sanjal, we respect your privacy. We collect only what we need to provide our services, we never sell your data, and we give you control over your information.

1. Introduction

This Privacy Policy explains how Divya Soft Pvt. Ltd. ("we," "us," "our") collects, uses, discloses, and protects information when you use Mero Sanjal(the "Platform," "Service," or "Website") available at merosanjal.com and related services.

By accessing or using Mero Sanjal, you agree to this Privacy Policy. If you do not agree, please do not use our services.

2. Information We Collect

2.1. Account Information

  • Phone Number: Your primary identity key for account creation and authentication
  • Email Address: Used for sign-in codes, notifications, and important communications
  • Name: To personalize your experience and for service delivery
  • Profile Information: Any additional details you choose to provide

2.2. Service Usage Data

  • Family Hub Data: Family members, birthdays, anniversaries, festivals, shraddha dates, and personal reminders you create
  • Care & Concierge: Task requests, delivery addresses, instructions, and communication with agents
  • Gift Orders: Recipient information, delivery addresses, gift preferences, and order history
  • Health & Jyotish: Appointment details, birth information for astrology (never shared with analytics)
  • Payment Information: Transaction records (actual payment data is processed by our payment partners)
  • Community Posts: Forum posts, questions, answers, and comments you publish

2.3. Automatically Collected Information

  • Device Information: Device type, operating system, browser type, and version
  • Usage Data: Pages visited, tools used, time spent, features accessed
  • Technical Logs: IP address (not linked to personal identity), approximate timestamp, referrer
  • Cookies: Authentication tokens, language preferences, theme settings (see Section 8)

2.4. Anonymous Product Analytics

When analytics is enabled, we use a privacy-first approach:

  • Daily-rotating one-way browser pseudonym (no persistent tracking ID)
  • Page views and tool usage counts for product improvement
  • What we DO NOT collect: Your account ID, IP address, query strings, form values, health information, Jyotish birth details, family content, or any personally identifiable information

3. How We Use Your Information

3.1. Core Service Delivery

  • Process account registration and authentication (sign-in codes)
  • Deliver family reminders in your local timezone
  • Match care/concierge tasks with verified agents
  • Process and fulfill gift orders with delivery proof
  • Facilitate health appointments and Jyotish consultations
  • Enable community forum participation
  • Process payments through secure escrow partners

3.2. Communication

  • Send sign-in codes and account security notifications
  • Deliver reminder notifications for family events
  • Send order updates and task completion proof
  • Respond to customer support inquiries
  • Send important service announcements (opt-out available for marketing)

3.3. Security and Fraud Prevention

  • Detect and prevent unauthorized access
  • Investigate suspicious activity and abuse
  • Comply with legal obligations and court orders
  • Enforce our Terms of Service

3.4. Product Improvement

  • Analyze aggregated usage patterns to improve features
  • Fix bugs and optimize performance
  • Develop new tools based on user needs
  • Understand which features are most valuable

4. What We DO NOT Do

Our Privacy Commitments

  • We DO NOT sell your personal data to advertisers, data brokers, or third parties
  • We DO NOT put personal data in URLs or share it with parties you didn't choose
  • We DO NOT send sign-in codes to addresses other than your registered email
  • We DO NOT share health or Jyotish details with analytics or advertising platforms
  • We DO NOT track you across the web or build advertising profiles
  • We DO NOT use dark patterns to trick you into sharing more data

5. How We Share Your Information

5.1. Service Providers (Limited, Necessary Sharing)

  • Verified Agents: Care/concierge agents see only the task details needed to complete your request
  • Delivery Partners: Gift delivery services receive recipient name and address
  • Payment Processors: Escrow and payment partners process transactions securely
  • Email Service: Email delivery providers send sign-in codes and notifications
  • Cloud Infrastructure: Secure servers host our platform (data encrypted at rest and in transit)

5.2. Analytics (When Enabled)

  • Google Analytics: Aggregated, anonymized website usage for reporting (country, device type, traffic sources)
  • No Personal Data: Analytics never receive account IDs, names, emails, health info, or personal content
  • Opt-Out: You can disable analytics in your browser or using Google Analytics Opt-out

5.3. Remittance Providers (You Choose)

Our "Send Money to Nepal" feature is a comparison directory only. When you select a remittance provider, you enter their website and share information directly with them under their privacy policy. We do not transmit your data to remittance providers—you do.

5.4. Legal Requirements

We may disclose information if required by law, court order, government investigation, or to protect our rights, safety, and the safety of users.

5.5. Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you and ensure the new entity honors this Privacy Policy.

6. Data Retention

  • Active Accounts: We retain data while your account is active
  • Completed Tasks: Task proof and order history retained for 2 years for dispute resolution
  • Deleted Accounts: Personal data deleted within 90 days of account deletion request
  • Legal Requirements: Some data may be retained longer to comply with tax, accounting, or legal obligations
  • Anonymized Data: Aggregated, non-identifiable analytics retained indefinitely for research

7. Your Rights and Choices

7.1. Access and Portability

  • View Your Data: Access family events, tasks, orders, and community posts in your account
  • Export Data: Request a copy of your data in machine-readable format

7.2. Correction and Deletion

  • Update Information: Edit profile, family details, and preferences anytime
  • Delete Account: Request permanent account deletion in account settings; you may cancel while the request is pending.
  • Delete Events: Remove family events and reminders individually

7.3. Communication Preferences

  • Reminders: Turn off individual event reminders or adjust frequency
  • Marketing Emails: Unsubscribe link in every promotional email
  • Service Notifications: Critical account and order updates cannot be disabled

7.4. Cookie Controls

  • Essential Cookies: Required for authentication and core functionality (cannot be disabled)
  • Analytics Cookies: Can be blocked via browser settings or analytics opt-out tools
  • Browser Settings: Adjust cookie preferences in your browser (may affect functionality)

8. Cookies and Tracking Technologies

8.1. What We Use

  • Authentication Tokens: Keep you signed in securely
  • Language Preference: Remember your chosen language (English/Nepali)
  • Theme Setting: Store light/dark mode preference
  • Analytics Pseudonym: Daily-rotating ID for usage statistics (if enabled)

8.2. Third-Party Cookies

  • Google Analytics: Tracks page views and site usage (anonymized)
  • Payment Processors: May set cookies during checkout (their privacy policies apply)

8.3. Managing Cookies

Most browsers allow you to control cookies through settings. Note that disabling cookies may affect website functionality (e.g., staying signed in, language preference).

9. Data Security

9.1. Technical Measures

  • Encryption: HTTPS/TLS for data in transit, AES-256 for data at rest
  • Access Controls: Role-based access, multi-factor authentication for staff
  • Regular Audits: Security reviews and vulnerability assessments
  • Secure Hosting: Enterprise-grade cloud infrastructure with DDoS protection

9.2. Organizational Measures

  • Staff Training: All employees trained on data privacy and security
  • Need-to-Know Basis: Access limited to personnel who require it
  • Vendor Agreements: Service providers bound by confidentiality agreements
  • Incident Response: Procedures for breach detection and notification

9.3. Your Responsibility

  • Keep your phone secure (your identity key)
  • Do not share sign-in codes with anyone
  • Use a strong password if you set one
  • Report suspicious activity immediately

10. Children's Privacy

Mero Sanjal is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us immediately for deletion.

11. International Data Transfers

Our servers are located in Southeast Asia (Railway hosting). If you access Mero Sanjal from outside Nepal, your information may be transferred to and processed in regions with different data protection laws. We ensure appropriate safeguards are in place.

12. Third-Party Links and Services

Mero Sanjal links to external websites (NEPSE, MeroShare, CDSC, remittance providers, etc.). We are not responsible for their privacy practices. Please review their privacy policies before sharing information.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Material changes will be communicated via:

  • Email notification to registered users
  • Prominent notice on the website
  • Updated "Last Updated" date at the top of this page

Continued use of Mero Sanjal after changes constitutes acceptance of the updated policy.

14. Contact Us

Questions, concerns, or requests regarding your privacy or this policy:

Data Protection Officer

Divya Soft Pvt. Ltd.
Kathmandu, Nepal

Email: support@merosanjal.com
Phone: +977 9840594442

Contact Form

15. Your Consent

By using Mero Sanjal, you consent to this Privacy Policy and our processing of your information as described. If you do not agree, please discontinue use of our services.

Privacy Policy Summary

  • ✅ We collect minimal data needed for services
  • ✅ We never sell your personal data
  • ✅ You control your data (access, export, delete)
  • ✅ Secure encryption and access controls
  • ✅ Transparent about what we collect and why
  • ✅ Privacy-first analytics (no personal data)
  • ✅ Regular updates with user notification
  • ✅ Responsive support team for privacy concerns

Last Updated: July 30, 2026 | Effective Date: July 30, 2026