Privacy Policy

1. Introduction

Omkaarya is a Temple Management System (TMS) operated by Pepulux Pvt Ltd, the parent company. We are committed to protecting the privacy and security of our temple partners, their staff, and the devotees whose data is managed through our platform. This Privacy Policy explains how we collect, use, store, and protect information when you use Omkaarya and its associated services.

This policy applies to all users of the Omkaarya platform — including temple administrators, trustees, priests, cashiers, and any staff member granted access to the system.

2. Information We Collect

To provide our temple management services, we collect information you provide directly to us, including:

• Temple registration and trust details (temple name, address, registration number)
• Administrator and staff account details (name, email, role)
• Devotee CRM records (name, contact, natchathiram / birth star, family details as entered by your team)
• Seva and vazhipadu bookings and billing records
• Hundi collection entries and cash reconciliation logs
• Donation records and receipts
• Prasadam and inventory stock records
• Deity ornament asset register entries
• Finance ledger and trust account data
• Festival calendar configurations
• Uploaded documents, receipts, and images
• Device and browser metadata for security and performance

3. How We Use Data

Your temple's data is used exclusively to power your operations within Omkaarya. Specifically, we use it to:

• Provide all temple management features — POS billing, devotee CRM, hundi tracking, donations, inventory, and reports
• Generate compliant donation receipts and trustee statements
• Send WhatsApp or email notifications to devotees (only with your configuration)
• Maintain role-based access control across your temple staff
• Provide audit trails for trust compliance and charity law requirements
• Prevent fraud and ensure platform integrity
• Maintain automated encrypted backups of your data
• Improve the Omkaarya platform through aggregated, anonymised analytics

We do not sell, rent, or trade your temple's data or your devotees' personal information to any third party.

4. Data Security

We implement enterprise-grade security across every layer of the platform:

• Encrypted transport (TLS 1.3) for all data in transit
• Encrypted storage for data at rest
• Secure authentication with session management and timeout controls
• Role-Based Access Control (RBAC) — every staff role sees only what they need
• Full audit logging of sensitive actions (billing entries, hundi counts, cash reconciliation, user logins)
• Infrastructure managed by leading cloud providers with SOC 2 compliance
• Regular automated backups with point-in-time recovery

5. Third Party Services

Omkaarya integrates with trusted third-party services strictly to operate the platform. These include:

• Cloud hosting and database providers (for secure infrastructure)
• Email delivery services (for welcome emails, receipts, and notifications)
• WhatsApp Business API (for devotee receipts and seva confirmations, if configured)
• Payment processors (for platform subscription billing only — not devotee transactions)
• Analytics tools (anonymised, for platform performance monitoring)

All third-party providers are vetted for security and are bound by data processing agreements. They process your data only as instructed by Omkaarya and may not use it for their own purposes.

6. Cookies & Analytics

We use session cookies and similar technologies to maintain your authenticated state and remember your platform preferences. On our marketing website, we use analytics cookies to understand visitor behaviour and improve the site. You may configure your browser to reject non-essential cookies, though some core platform features require session cookies to function.

7. Account & Billing

Subscription billing information is managed securely. Omkaarya does not store raw card numbers. Your billing history, plan tier, and payment records are maintained to ensure continuous service and to provide you with accurate invoices. All pricing is in USD unless otherwise agreed.

8. Data Retention

We retain your temple's data for as long as your account is active or as reasonably necessary to provide services, comply with legal obligations (including charity law and tax regulations), resolve disputes, and enforce our agreements.

Cancelling a subscription is not the same as an account deletion request and does not start an automatic wipe. If Omkaarya approves a deletion request for a linked temple, portal access ends immediately (no extra grace period), the subdomain is released, and login is blocked. Invoices, tax records, and audit or security logs are retained. Remaining operational data is not erased by a later automated job. Export any reports you need before you submit a closure request.

9. Your Rights

As the data controller for your temple, you have the following rights:

• Access: Request a complete export of your temple's data in a machine-readable format
• Correction: Update inaccurate or incomplete records at any time within the platform
• Portability: Export your devotee, donation, and transaction data at any time
• Deletion: Request closure of your temple account (subject to verification). Approval ends access; invoices, tax records, and audit logs are kept. This is not a one-click wipe of all associated data
• Restriction: Request that we limit how we process your data in specific circumstances

For temples based in the UK, EU, or other GDPR-applicable jurisdictions, these rights are guaranteed under applicable data protection law. To exercise any of these rights, contact us at support@omkaarya.com.

10. Data Deletion

You may request closure of your temple account at any time through the following methods:

• In-platform request: Submit the form on the Data Deletion page. If Omkaarya approves a linked temple, portal access ends immediately and the subdomain is released. Invoices and history are kept.
• Email request: Send a deletion request to support@omkaarya.com with your temple name and registered email address. The same approval rule applies: access ends on approval, and financial records are not wiped.

11. Contact Us

For any privacy-related questions, data export requests, or concerns:

Omkaarya Privacy Team — Pepulux Pvt Ltd
Email: support@omkaarya.com
Phone: +94 77 208 2227