Privacy Policy

Zomyra is a matrimony platform built around trust. This policy explains what we collect through our waitlist, why, who can see it, how long we keep it, and exactly how you can get it back or have it deleted. It is written in plain English, and it describes what the site actually does — not what we hope to do later.

1. Who we are

This website at https://zomyra.com is operated by Zomyra LLP ("we"), registered in India.

For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), we are the Data Fiduciary for the personal data described below, and you are the Data Principal.

We are currently in pre-launch. This policy covers the waitlist website only. When the Zomyra app launches it will have its own, separate privacy policy covering your account, and we will ask for fresh consent at that point — joining the waitlist does not commit you to anything.

2. What we collect

Everything in this list is information you type into the waitlist form yourself:

• First name and last name — so we can address you personally.
• Age — to confirm you are eligible (21+) and to understand our early-access demographic.
• Gender — to manage the gender balance of each cohort we open.
• State / Union Territory — to understand where interest is concentrated, so we can open cohorts city by city.
• Email address — to tell you when your early access opens. This is the only way we contact you.
• Your feedback (optional) — what frustrates you about existing platforms, used only to decide what to build.
• Consent record — the date and time you agreed and the version of this policy you agreed to, so that if your consent is ever questioned we can show what you were shown and when.
• Age confirmation — your tick confirming you are 21 or older.

What we do not collect

No payment details. No Aadhaar, PAN or any other government identifier. No phone number. No photographs. No caste, religion, horoscope or health information. No contact list, no location beyond the state you choose, and no tracking of you across other websites.

Server logs

Our hosting provider records standard technical logs for each request (IP address, request path, response status, timestamp, user-agent). These exist for security and debugging, are not combined with your waitlist entry, and are retained by our host on a rolling short-term basis — currently no more than 30 days.

3. Cookies

We use only a small number of strictly necessary cookies so the form works and stays secure — for example, protecting against cross-site request forgery. They are not used for tracking, analytics or advertising, they expire within a couple of hours, and they cannot be read by other sites. Because they are strictly necessary, no cookie banner is required. If we ever introduce analytics or advertising cookies, we will ask for your consent first.

4. Why we are allowed to use it

Our lawful basis is your consent, given freely, specifically and unambiguously when you tick the consent box and submit the form (DPDP Act, s.6). You can withdraw it at any time, as easily as you gave it — see section 8. Withdrawing does not affect anything we did lawfully beforehand.

5. How we use it

• To email you when your early-access cohort opens, and to send you occasional updates about the launch.
• To understand, in aggregate, who is on the waitlist — how many people, which states, which age bands.
• To decide what to build, using the feedback you choose to give us.
• To stop duplicate sign-ups and abuse of the form.

We do not use your data for advertising, for automated decision-making, or to build a profile of you. We do not run your details through any third-party enrichment or scoring service.

6. Who else can see it

We never sell, rent or trade your personal data. We share the minimum necessary with the service providers who run this site for us (Data Processors, contractually bound to use it only as we instruct):

• Hosting and database — a reputable third-party cloud infrastructure provider that runs this website and stores the waitlist database on our behalf.
• Email delivery — the provider configured to send the notification of your signup to our own inbox, and to email you when your cohort opens.

Beyond this, we disclose personal data only where we are legally compelled to — for example a binding order from a court or a lawful request from a government authority — and only to the extent required.

7. Where your data is stored

Our hosting provider's infrastructure may hold and process your data on servers outside India, including in the United States and the European Union. The DPDP Act permits such transfers except to countries specifically restricted by the Central Government, and we will stop using any provider that falls under such a restriction. Data in transit is encrypted (TLS), and we rely on our providers' contractual data-protection commitments.

8. Your rights, and how to use them

Under the DPDP Act you have the right to:

• Access — get a copy of the personal data we hold about you, and know who we have shared it with.
• Correction and completion — have anything inaccurate or incomplete fixed.
• Erasure — have your data permanently deleted.
• Withdraw consent — at any time, which removes you from the waitlist.
• Nominate — appoint someone to exercise these rights on your behalf if you die or become incapacitated.
• Grievance redressal — complain to us, and escalate if we fall short (section 9).

To exercise any other right — access, correction, or nomination — email contact@zomyra.com from the address you signed up with. We will verify it is you and respond within 30 days, usually far sooner. These rights are free to exercise.

9. Grievance redressal

If you are unhappy with how we have handled your data or your request, contact our Grievance Officer:

The Grievance Officer
Zomyra LLP
contact@zomyra.com

We will acknowledge your complaint within 7 days and resolve it within 30 days. If you remain dissatisfied, you may escalate to the Data Protection Board of India established under the DPDP Act.

10. How long we keep it

We keep your waitlist entry only as long as we need it for the purpose you gave it for:

• until you delete it or withdraw your consent;
• until we open the platform to you, at which point your account is governed by its own policy; or
• until we retire or abandon the project — in which case we delete the entire waitlist and tell you we have done so.

Deletion is permanent — we do not keep a shadow copy.

11. How we protect it

We take reasonable technical and organisational measures to protect your data — including encrypting it in transit (HTTPS on every page), restricting who can access it, protecting the form against misuse, and collecting only the minimum information we need.

12. If something goes wrong

If a personal data breach affects your information, we will notify the Data Protection Board of India and every affected person without undue delay, as the DPDP Act requires. Our notice to you will say what happened, what data was involved, what we are doing about it, and what you should do.

13. Age requirement

Zomyra is strictly for adults aged 21 or over. We ask for your age and require an explicit confirmation, and we do not knowingly collect data from anyone under 21. If you believe someone under 21 has submitted the form, tell us at contact@zomyra.com and we will delete the entry immediately.

14. Changes to this policy

If we change this policy we will update the version number and effective date above. For any change that materially affects how we use data you have already given us, we will email you and ask for fresh consent rather than relying on your continued use of the site. Older versions are available on request.

15. Contact

Privacy questions, data requests and anything else: contact@zomyra.com

Zomyra LLP · Registered with limited liability
Policy version 1.1, effective 14 October 2026.