Privacy Policy

Introduction

SarasJodi (“we”, “our”) is a matrimonial discovery and family-participation service operated by Jack of AI Pty Ltd (Australia), registered in Australia (address: Australia). This policy explains what information we collect, how we use it, who may view it, and how you can exercise choices. It applies to our website and related support channels. Privacy and support contact: [email protected]. Effective: 10 October 2026.

Australian Privacy Act and APPs

Where the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) apply to Jack of AI Pty Ltd (Australia), we aim to handle personal information in a manner consistent with those principles — including open and transparent management, collection that is reasonably necessary for our functions, use and disclosure for the primary purpose of operating SarasJodi (or a related secondary purpose where permitted), reasonable steps to keep information secure and accurate, and providing access and correction pathways. This policy is a layered summary of our practices as implemented; it does not assert APP-entity status or certified compliance without independent counsel confirmation.

Who can use SarasJodi

The service is intended only for adults aged 18 or above. Account creation requires a working mobile number verified by one-time password (OTP). We do not knowingly permit matrimonial profiles for minors. Family members who help manage a profile must also be adults.

Information we collect

Depending on how you use SarasJodi, we may collect: account identifiers (phone number via Firebase Authentication, optional email where provided, login tokens); profile details (name, gender, date of birth, marital status, height and other physical attributes, mother tongue, languages, community and sub-community, habits, about me, photographs); education, employment and income ranges; horoscope fields (including birth place/state/country, manglik status, gothra, raasi; exact birth time if entered); family details; residing city/state/country and residential address; partner preferences; family membership and invitation records; interest requests, shortlists, messages and blocks; verification documents you upload (government ID, address proof, optional selfie); reports and admin review notes; subscription/VIP status where offered; technical logs (including device/IP-related data used for security and session management); and communications you send to [email protected].

Sensitive and optional information

Community and sub-community, marital history, photographs, family information and horoscope details can be highly personal. Many biodata fields can be completed progressively after signup. Verification document images are stored privately and are not shown on public profile cards. We do not display government ID or address-proof images to other members. Where information is sensitive under Australian privacy law, we collect and use it only as reasonably necessary to provide SarasJodi and related safety/verification functions, or with your consent where required.

Why we use data

We use personal data to create and manage accounts and profiles; run discovery, search and matching for eligible visible profiles; facilitate interests, shortlists, messaging and blocks; support authorised family collaboration; run optional identity verification and admin review; prevent fraud and abuse; respond to reports; provide customer support; maintain security; operate hosting and storage; and comply with applicable law. We do not sell member profiles or contact lists to advertisers.

Collection, consent and choice

We collect personal information that is reasonably necessary to provide SarasJodi. By creating an account and submitting profile or verification information, you provide that information so we can operate the features you use. You may update profile fields, change visibility, block users, manage notifications where offered, and contact us to exercise access, correction or deletion requests. Withdrawing consent or clearing fields may limit features (for example, incomplete verification documents prevent verification submit).

Family-managed profiles

A family member may create or help manage a profile when authorised by the product’s family roles (for example Owner, Manager, Viewer or Subject). Family access is recorded in the service. Candidates and managers should keep information accurate. Profiles created for someone else remain subject to the same discovery rules (verification and visibility). Contact [email protected] if you need help resolving disputed family access.

Who sees profile information — visibility matrix

SarasJodi discovery and search only return profiles that are not deleted, not family-deactivated, have verification status VERIFIED, and have visibility set to VISIBLE by the profile owner/manager. Showing a profile before verification does not place it in Discover or search until an admin verifies it. Field-level sharing follows the product privacy map:

• Visitors (not signed in): cannot use member Discover/search or view other members’ private profiles; public marketing pages only.
• Signed-in members (no mutual interest): may see basic identity and presentation fields on eligible profiles (for example name, profile code, gender, age-related birth date, marital status, height, community/sub-community, habits, about me, languages, hobbies, primary photo, verification status). Career, full family biodata, horoscope detail, partner preferences and address sections are withheld until mutual interest.
• Members with accepted mutual interest: may additionally see education, employment, family summary (excluding parent phone and family income), horoscope fields other than exact birth time, partner preferences, and residing city/state/country — still excluding owner-only fields below.
• Always owner/family/admin only (not shown to other members on public cards): phone number, parent contact number, full residential/permanent address lines, exact birth time, own and family income figures, login credentials, payment credentials, and KYC document files/storage keys.
• Invited family managers/viewers of the same profile: may see fields according to their family access role, including owner-private biodata fields needed to manage the profile; KYC document access remains restricted to authorised edit/admin paths.
• Administrators: may access verification documents and review notes solely for safety, verification and compliance operations.

Private chats, blocks and reports are not part of public listing. We do not intentionally expose restricted profiles to public search engines as indexed member content; members should still avoid posting identity documents in photos or messages.

Sharing and vendors

We use service providers only to operate SarasJodi. Currently these include: DigitalOcean for application hosting (Bangalore, India and Sydney, Australia) and DigitalOcean Spaces for photo and verification-document object storage; Google Firebase Authentication for phone OTP sign-in; and standard email when you write to [email protected]. We may disclose data when legally required or when necessary to investigate credible abuse. We do not sell personal profiles.

Cross-border storage and access

Application infrastructure is hosted on DigitalOcean in the Bangalore (India) and Sydney (Australia) regions. Object storage uses DigitalOcean Spaces (S3-compatible). Phone authentication uses Google Firebase Authentication, which may process authentication data on Google infrastructure outside Australia. Because Bangalore hosting is in use, some personal information may be stored or processed in India as well as in Australia. Members may access the service from outside Australia. Where a vendor processes data outside Australia (including in India via Bangalore hosting, or on Google infrastructure for Firebase), we rely on that vendor’s contractual and security controls and take steps that are reasonable in the circumstances. Exact subprocessors and regions may be updated as infrastructure evolves; material changes will be reflected in this policy.

Security and incidents

We apply access controls, authenticated APIs, HTTPS in transit, private storage for KYC objects with short-lived signed URLs, least-privilege admin review, and operational logging. No internet service is risk-free. We will investigate security incidents and notify affected people and the Office of the Australian Information Commissioner (OAIC) or other regulators when legally required.

Retention and deletion

See the Account Deletion and Data Retention Policy on this page for how hide/deactivate and deletion requests work in the product today.

Your privacy rights and complaints

Subject to applicable law and identity checks, you may request access to the personal information we hold about you, correction of inaccurate information, updating, erasure where appropriate, and help with privacy concerns by emailing [email protected]. In-product controls include profile editing, visibility on/off (Settings → Privacy), blocking, reporting, and family access management where you have rights. We do not charge for legitimate privacy requests except where law permits. If you are not satisfied with our response, you may contact the OAIC (https://www.oaic.gov.au/) about privacy complaints under Australian law. Overseas members may also have local privacy remedies; we do not waive those non-excludable rights.

Cookies and analytics

We use essential cookies and browser storage for authentication and session continuity (for example access tokens used to keep you signed in, and related auth cookies for member and staff admin sessions). Firebase Authentication may set its own session data for phone OTP. We do not currently load third-party advertising pixels or third-party product-analytics SDKs (such as Google Analytics) on SarasJodi. Landing-page event helpers, if present, are limited to first-party console/debug-style instrumentation and are not a third-party ad network. If we add optional analytics later, we will update this section and provide controls where required.

Changes and contact

We will post material updates with an effective date. Contact [email protected] for privacy questions. Consumer and privacy rights that cannot lawfully be excluded under Australian law remain available.

Choices available in the product today

• Hide / visibility off (Settings → Privacy): sets visibility to HIDDEN so the profile is excluded from Discover, search and matches while the account remains. You can turn visibility back on later (discovery still requires VERIFIED status).
• Family deactivation: a family Owner may deactivate a managed profile; deactivated profiles are excluded from discovery.
• Soft deletion in the system: profiles and related records use deleted_at-style soft deletion in the database so they leave active product surfaces.

A one-click “Delete Account” control that permanently erases every copy of your data is not claimed as an always-available self-serve button in the current product UI. To request permanent account closure and erasure of personally identifying material, email [email protected] from your registered contact details. We will verify the requester and prioritise the matrimonial candidate’s request for family-managed profiles.

Deletion sequence (support-assisted)

On a verified deletion request we will promptly remove the profile from discovery and active member surfaces; revoke sessions where applicable; revoke family access as needed; queue soft-deletion/anonymisation of active application data; instruct relevant processors where feasible; and retain only limited records required for security, dispute or legal obligations.

Retention schedule

• Active profile and messaging data: while the account/profile remains active and necessary to provide the service.
• After a deletion request: removal from active search and member discovery promptly (operational target: within a few business days of verification of the request).
• Application database soft-deleted records: retained only as needed for integrity and then purged or anonymised under operational practice; not used for normal matching.
• Backups: may retain encrypted copies for a limited disaster-recovery window (indicative: up to 30 days) and are not used for ordinary product features; they are overwritten on rotation.
• Verification documents in private storage: deleted or access-revoked when the profile/account deletion is processed, unless a lawful investigation hold applies.
• Complaints, fraud and security logs: retained for a justified period (indicative: up to 12 months, or longer if an active investigation or legal hold requires).
• Payment/tax records (if/when paid plans are collected): retained for periods required by applicable Australian tax and accounting law (and any other law that applies to the transaction).

We do not promise instantaneous irreversible erasure from every backup at the exact second you click a control. We do promise good-faith removal from active systems and completion of deletion requests without undue delay once identity is verified.

Exceptions and legal holds

Limited data may be retained for legal obligations, active disputes, safety investigations, fraud prevention and lawful authority requests. Retained information is restricted and deleted when the basis ends.

Confirmation and contact

Email [email protected] to request deletion or ask about retention. We will confirm receipt and outcome, or explain a lawful exception.

Operator details

• Legal entity: Jack of AI Pty Ltd (Australia)
• Registered address: Australia
• Country: Australia
• Effective date: 10 October 2026
• Contact: [email protected]
• Hosting: DigitalOcean (Bangalore / BLR region), India; Sydney, Australia

Accuracy commitments

These pages describe SarasJodi as implemented: discovery requires VERIFIED + VISIBLE; field privacy follows the product audience map; KYC files use private Spaces; phone auth uses Firebase; cookies are essential/auth-oriented; no third-party ad analytics SDK is currently claimed. We do not claim all members are ID-verified, criminal-background-checked, end-to-end encrypted in chat, or permanently deleted from backups within a fixed hour unless and until those capabilities are built and disclosed.

Cross-border and multi-jurisdiction note (for counsel)

SarasJodi is operated by Jack of AI Pty Ltd (Australia). Infrastructure currently includes DigitalOcean capacity in Bangalore (India) and Sydney (Australia), plus Google Firebase Authentication. Many members may be located in India or the diaspora. Whether Indian statutes (for example intermediary, consumer or data-protection rules) impose separate obligations on the operator, or only practical safety channels for members in India, requires Australian and (if relevant) Indian counsel review. These pages do not assert that Indian IT Rules or DPDP obligations are fully mapped or inapplicable.

Counsel review

This pack is prepared for review under Australian law (including the Privacy Act 1988 / APPs where they apply, and the Australian Consumer Law). Final counsel sign-off should confirm APP-entity analysis, privacy collection notices, ACL / unfair-contract-term wording, cross-border disclosure for Bangalore hosting, named privacy contact, and any India-facing supplements before relying on these pages as final.

Reference links

• OAIC (privacy / APPs): https://www.oaic.gov.au/
• Australian Privacy Principles: https://www.oaic.gov.au/privacy/australian-privacy-principles
• ACCC (consumers / ACL): https://www.accc.gov.au/
• Scamwatch: https://www.scamwatch.gov.au/
• ReportCyber: https://www.cyber.gov.au/report-and-recover/report