Privacy Policy

Effective date: 13 October 2026

-

This Privacy Policy explains how FirstTrek OPC Private Limited, operating the DevMandir platform, collects and uses personal data when you browse, sign in, book puja or chadhava, or contact us. It is aligned with India's Digital Personal Data Protection Act, 2023 (DPDP Act) to the extent applicable to our operations.

Who we are

DevMandir is operated by FirstTrek OPC Private Limited. Statutory identifiers and the registered office address are published on our Contact and Grievance Redressal pages and in Admin Settings when available.

Personal data we process

We process personal data only for defined purposes, including:

• Account and authentication: mobile number for OTP sign-in; optional name and email on your profile.
• Bookings and Sankalp: names, gotra or other ritual details you submit, chosen date, temple or location, Pandit assignment, booking status and support messages.
• Payments: transaction identifiers, amount, payment status and reconciliation records from PhonePe. We do not receive or store your full card number, UPI PIN or wallet credentials.
• Communications: SMS or in-app notifications about bookings, and responses when you contact Support.
• Security and compliance: logs of staff access to sensitive booking fields, fraud prevention signals, and records needed for tax, accounting or legal obligations.

Purposes and legal bases

We use personal data to provide and improve DevMandir, perform bookings, communicate with you, pay Pandits, comply with law, and protect users and the platform. Where the DPDP Act requires consent, we ask for it clearly (for example before optional marketing). Where another basis applies (such as performance of a contract or compliance with law), we rely on that basis and limit use to what is necessary.

Consent and withdrawal

You may withdraw consent for optional processing where consent is the basis. Withdrawal does not affect processing already completed. Some data is required to maintain an account or complete a booking; if you withdraw required consent we may need to close or limit your account.

How we share personal data

We share personal data only as needed:

• Assigned Pandits receive Sankalp and booking details required to perform your ritual.
• PhonePe receives payment amounts, merchant order references and status callbacks as the payment processor for FirstTrek OPC Private Limited.
• SMS and infrastructure providers that host or deliver our services under contract and confidentiality obligations.
• Authorities when required by applicable law or valid legal process.

We do not sell personal data.

Sankalp and sensitive details

Sankalp fields are encrypted at rest where technically implemented, are not placed in URLs or analytics payloads, and staff access is restricted and logged. Pandits must use devotee details only for the booked ritual.

Retention

We retain personal data only as long as needed for the purposes above, including resolving disputes, enforcing terms, and meeting statutory retention periods. Booking and payment records may be kept for accounting and tax requirements even after account closure, as permitted by law.

Children's data

DevMandir is intended for users who can enter a contract under applicable law. We do not knowingly collect personal data from children without appropriate guardian involvement. If you believe a child has provided data without consent, contact us through Support.

Cross-border processing

Our primary systems are located in India. If we use service providers that process data outside India, we do so with appropriate contractual safeguards and only where permitted under applicable law.

Security

We use administrative, technical and organisational measures appropriate to the risk, including encryption in transit, access controls, and monitoring. No method of transmission or storage is completely secure.

Personal data breach notice

If we become aware of a personal data breach likely to affect your rights, we will take steps to mitigate harm and notify you and the Data Protection Board of India or other authorities as required by the DPDP Act and applicable rules.

Your rights as a data principal

Subject to the DPDP Act and applicable exceptions, you may have the right to access information about processing, correction, erasure, grievance redressal, and nomination of another person to exercise rights on your behalf. To exercise rights, use Account → Support or the contact methods on our Grievance Redressal page.

Grievance officer

Contact details for our Grievance Officer under the DPDP Act are published on the Grievance Redressal page and in Admin Settings when formally appointed. Until then, data-principal requests may be sent through Account → Support with the subject line "Data protection request".

Changes

We may update this policy. The effective date at the top will change when we publish a material revision.

Operator and payment processing

• DevMandir is a devotional booking brand operated by FirstTrek OPC Private Limited ("FirstTrek", "we", "us", "our").
• Our registered office- 6/2 Convent Road, Race Course, Dehradun, Uttarakhand, India - 248001 · CIN: U79110UT2025OPC019560 · Support: helpline@firstrek.in · Phone: 9058846467  .
• You book on www.devmandir.in. PhonePe returns the browser to devmandir.firstrek.in (FirstTrek's PhonePe-approved domain for DevMandir) before you continue to payment status on the customer site. PhonePe processes payments on behalf of FirstTrek OPC Private Limited, which is the merchant of record. The PhonePe page and your bank, card or UPI statement may show FirstTrek or a statement descriptor configured with PhonePe.
• DevMandir does not store your full card number, UPI PIN, or wallet credentials. Payment credentials are entered directly on PhonePe's pages.
• The Pandit named on your listing performs the ritual at the location shown. DevMandir coordinates booking, communication, cancellation and refunds as described in these policies.